LI
Product
Linux
On CISA KEVExploited in the wild
11,010
CVEs
11
On KEV
10.0
Max CVSS
1052
New 30D
Severity mix
Critical 490High 8Medium 2Low 0
Watch
Add Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-89681 | 9.8 | Sep 11 | nfsd: fix layout fence worker double-reference race Affected: f52792f484ba2316853736856dde19b7e7458861 before a278d361e0e8f242211891193d56483a7a9f47a8; f52792f484ba2316853736856dde19b7e7458861 before 8580571227451384399b3fa53fcde19848c48e5a; 7.1 |
| CVE-2026-89677 | 9.8 | Sep 11 | nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file() Affected: 64a989dbd144e0622371396461b11335459692d2 before 033e783709ce99662cf81f6abcad746a8da9d35f; 64a989dbd144e0622371396461b11335459692d2 before 3e2c79360c6a89975ec5b5a7d4ef937e4db91a27; 7.0 |
| CVE-2026-89676 | 9.8 | Sep 11 | nfsd: fix stale s2s_cp_stateids IDR entry for async COPY Affected: e0639dc5805a9d4faaa2c07ad98fa853b9529dd3 before bdce362f49410b9def65d76c21f6259cd89696d8; e0639dc5805a9d4faaa2c07ad98fa853b9529dd3 before 7aa34ea78f74e6ef60c8112635a87fc43d57f6c9; e0639dc5805a9d4faaa2c07ad98fa853b9529dd3 before 9b4e5e9ba5ae13808b8a6d229d87c54611ba0e7a; e0639dc5805a9d4faaa2c07ad98fa853b9529dd3 before 14b978e8d05ce018d0afbeb6611833ef91713a02; e0639dc5805a9d4faaa2c07ad98fa853b9529dd3 before d0beaee498e11880e72826026db0e9c9890fc114; 4.20 |
| CVE-2026-89675 | 9.8 | Sep 11 | nfsd: fix UAF in async copy cancel and shutdown Affected: e0639dc5805a9d4faaa2c07ad98fa853b9529dd3 before 9031493ef7369d5c59c4bacc96f0c85965f09a98; e0639dc5805a9d4faaa2c07ad98fa853b9529dd3 before a385cf5e016b748babf94cc664e43a26e17db117; e0639dc5805a9d4faaa2c07ad98fa853b9529dd3 before 62c0f6eaf050bb9284c1f9cac6ed1770092e6b95; 4.20 |
| CVE-2026-89674 | 9.8 | Sep 11 | nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget Affected: 9b9960a0ca4773e21c4b153ed355583946346b25 before 3a7fd224df0fbb42167eb1b77be45d72fe0b1098; 9b9960a0ca4773e21c4b153ed355583946346b25 before 29e4478e2ed5a227e8f0c33cacb91bf227cedd47; 9b9960a0ca4773e21c4b153ed355583946346b25 before 65a72b721943618eeb3a41c8b36e915591f3f83f; 9b9960a0ca4773e21c4b153ed355583946346b25 before bee826c00ac900473f91306f1f3e5a5a81fd4a74; 9b9960a0ca4773e21c4b153ed355583946346b25 before e7d9d23ecd9172f05b09bb678ff22db8e361c428; 9b9960a0ca4773e21c4b153ed355583946346b25 before 0380129b1373c437eb35401a174671c8888f4b80; +3 more |
| CVE-2026-89669 | 9.8 | Sep 11 | nfsd: initialize copy-notify stateid before publishing it Affected: 624322f1adc58acd0b69f77a6ddc764207e97241 before 863b6e995665472f2af5be2436a874ab6a9e5ac6; 624322f1adc58acd0b69f77a6ddc764207e97241 before d18d36395d973ef7372c8e6724970585f75b5c0b; 624322f1adc58acd0b69f77a6ddc764207e97241 before 4415a692346a39fdb647cbd717eda510159aaf55; 624322f1adc58acd0b69f77a6ddc764207e97241 before 9caad13b7cfe9ccb90cc405ac77335800e086595; 624322f1adc58acd0b69f77a6ddc764207e97241 before e08a3dcaca0505f861e344a387f37f94d95dbdc2; 624322f1adc58acd0b69f77a6ddc764207e97241 before a4d7fedcaaf33e60a01e53eafca9041ef966212f; +3 more |
| CVE-2026-89662 | 9.8 | Sep 11 | NFSD: Prevent lock owner use-after-free during client teardown Affected: 68ef3bc3166468678d5e1fdd216628c35bd1186f before 42d7954b0a1907d4ef122aef94561952a033cdc3; 68ef3bc3166468678d5e1fdd216628c35bd1186f before bb38ff8b4dafbbd1781ad37cd96722fdf2cd972a; 68ef3bc3166468678d5e1fdd216628c35bd1186f before b8bad5a11416b26cc7fd4b18fba46d75ff636558; 68ef3bc3166468678d5e1fdd216628c35bd1186f before 1ce74d1b7770e69735e8f8e509807af4ff9c8ee7; 68ef3bc3166468678d5e1fdd216628c35bd1186f before a6ead6fff3a7d03e49845f048f7000a2e0d34431; 68ef3bc3166468678d5e1fdd216628c35bd1186f before 4804c58f73a80d12df1de323bf97a164f6ee8743; +9 more |
| CVE-2026-89660 | 9.8 | Sep 11 | NFSD: Prevent client use-after-free during admin state revocation Affected: 1c13bf9f2e3cd5a59ef988c6c5a49fe0f02bcdfc before e1ba4d3c5bfdca3f013b8cbc829ae2f7975d8608; 1c13bf9f2e3cd5a59ef988c6c5a49fe0f02bcdfc before 549bd9868e9d77b07ea94870940d64342829c6ad; 1c13bf9f2e3cd5a59ef988c6c5a49fe0f02bcdfc before bf1f948691523282cc4905bc6cd325e0c0b49e6a; 1c13bf9f2e3cd5a59ef988c6c5a49fe0f02bcdfc before e270e5a0778e5bff852c8862ce9576ce70359393; 6.9 |
| CVE-2026-89659 | 9.8 | Sep 11 | NFSD: Prevent client use-after-free during delegation revoke Affected: 3bd64a5ba1719c2bb6cba4493dfd3e23a7653e54 before 94f0c73797c30a35812ffb32d11b8737d245c405; 3bd64a5ba1719c2bb6cba4493dfd3e23a7653e54 before 0dd276b1324a5e08e83c6f675919946c9f0d61c9; 3bd64a5ba1719c2bb6cba4493dfd3e23a7653e54 before 3c0a53ee0b442348d8d2286d6960d3f07bb3a3d3; 3bd64a5ba1719c2bb6cba4493dfd3e23a7653e54 before 2a9d637c2a8fd8ac29ad9b29f28d122ef75c1a56; 3bd64a5ba1719c2bb6cba4493dfd3e23a7653e54 before 4683ca76b3b7e5808338491c6eb3c20e6b4894d5; 3.10 |
| CVE-2026-89658 | 9.8 | Sep 11 | NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup Affected: d688d8585e6bea5e4e37f7497feea93b6b0a469c before 0ae0d2b5c5a1b39c0b3c15d96b32a5b0c583d519; d688d8585e6bea5e4e37f7497feea93b6b0a469c before b413ec5b23e3445dc9c4f273116078e2d4747626; d688d8585e6bea5e4e37f7497feea93b6b0a469c before 81cf7f1413862f87b078920c838460a6a88aa030; d688d8585e6bea5e4e37f7497feea93b6b0a469c before 7b4f8a1586c42d3afc3c0ac779af2db7ab1a5c55; 6.9 |
| CVE-2026-89656 | 9.8 | Sep 11 | libceph: reject buckets with mismatched CRUSH ids Affected: 66a0e2d579dbec5c676cfe446234ffebb267c564 before ee59040d6ed1a5f8d10d27174b8f32c90ca8e89a; 66a0e2d579dbec5c676cfe446234ffebb267c564 before baad5875fdd2f5e248250fc3519bb045d64f1716; 66a0e2d579dbec5c676cfe446234ffebb267c564 before 4aeb93daadf388e72073abc204312dd364eeb30a; 66a0e2d579dbec5c676cfe446234ffebb267c564 before 6e5c6ce252b1eccfd41670a5cf95ab44f7ba7022; 66a0e2d579dbec5c676cfe446234ffebb267c564 before 3516a4131c4e45d62ee4e42e82c36930e8c1fbbd; 66a0e2d579dbec5c676cfe446234ffebb267c564 before 00562ccd4e88d092b9b851df50fad20442bfeb24; +3 more |
| CVE-2026-89655 | 9.8 | Sep 11 | ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock Affected: e4500b5e35c213e0f97be7cb69328c0877203a79 before 091137821e1fc88f37e15201abf055c9494ddc61; e4500b5e35c213e0f97be7cb69328c0877203a79 before 01542430081014d80fc9e70e92d6647432ddb7fc; e4500b5e35c213e0f97be7cb69328c0877203a79 before 23eb34a53a53cb1a6dab1eeee830633207ac158d; e4500b5e35c213e0f97be7cb69328c0877203a79 before 19f16f04c2b014a7dd214dc1e42557d8530b16f3; e4500b5e35c213e0f97be7cb69328c0877203a79 before 2701431aa3cc8b23efe6890182e7b04f5e76fab5; e4500b5e35c213e0f97be7cb69328c0877203a79 before fe46746087b5b9c5bb2d022df6c7819218494ced; +3 more |
| CVE-2026-89654 | 9.8 | Sep 11 | ceph: fix UAF in check_new_map() on session freed during unlock Affected: 2f2dc053404febedc9c273452d9d518fb31fde72 before 352a278d5a1965aae3f817ce5d24a67ee42d45d1; 2f2dc053404febedc9c273452d9d518fb31fde72 before 820871e9dbeecd2533c4c5f5d91878ceaf02324c; 2f2dc053404febedc9c273452d9d518fb31fde72 before 9646dfee880730aae4b379a4b8ee6c88ac735acd; 2f2dc053404febedc9c273452d9d518fb31fde72 before 21d5be092d947f8d83f76f7ebf3989e7e9230a98; 2f2dc053404febedc9c273452d9d518fb31fde72 before ee611a7509554c4ca1f54f6aefe592fb1df7ea70; 2.6.34 |
| CVE-2026-89653 | 9.8 | Sep 11 | ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode Affected: d517b3983dd3106ca92d6c5d0d09415a4a09481c before 3740c88ca9cb2210a8dbdd55ea4cec119fbe86fe; d517b3983dd3106ca92d6c5d0d09415a4a09481c before 8c823bbab3c24e657469a84db96902ba82d4e8bb; d517b3983dd3106ca92d6c5d0d09415a4a09481c before c4addccd05bacbef2144b4db14853d0308a218ac; d517b3983dd3106ca92d6c5d0d09415a4a09481c before 736adee11af36e407ed902264f8b2fb5cf94b62f; d517b3983dd3106ca92d6c5d0d09415a4a09481c before 4d298880f82c42383b36946bafde7ccf4d804c9b; d517b3983dd3106ca92d6c5d0d09415a4a09481c before 96c3f5fbb0d5386e7111426f047f98cec4586674; +2 more |
| CVE-2026-89652 | 9.8 | Sep 11 | ceph: bound copied dentry name length in NFS export get_name Affected: 19913b4eac4a230dccb548931358398f45dabe4c before a294064e0e0f81ea607b2f019e16888aa1b0a011; 19913b4eac4a230dccb548931358398f45dabe4c before 61d9f27b191b838b96b697ce0bfaee39a138243a; 19913b4eac4a230dccb548931358398f45dabe4c before 06fb5e623cdc2402d6bb29be94d9beb9a826ffec; 19913b4eac4a230dccb548931358398f45dabe4c before e7c2fd3893a7f7fcd7e8cf0b2c6348bb1e893df6; 19913b4eac4a230dccb548931358398f45dabe4c before eff8013c5a8916613c742ae5a2cc341cb605c0ae; 3.15 |
| CVE-2026-89651 | 9.8 | Sep 11 | ceph: bound MDSCapAuth path and fs_name decode in handle_session() Affected: 1d17de9534cb5a4c4c380d174cc2f9281b34f89e before dc5c7dffda92ef372fa587c444a1c537373df824; 1d17de9534cb5a4c4c380d174cc2f9281b34f89e before c37db86d2b5e9b57001ccae7e7a727e95a4f9c02; 1d17de9534cb5a4c4c380d174cc2f9281b34f89e before 5f892c767b30e4fb0c744c59f9235c717383d2cd; 1d17de9534cb5a4c4c380d174cc2f9281b34f89e before 77933e22adfe813be2bd10be08d6e950103c3967; 6.10 |
| CVE-2026-89643 | 9.8 | Sep 11 | audit: avoid dropping live tree ref on fsnotify rule autoremove Affected: 34d99af52ad40bd498ba66970579a5bc1fb1a3bc before 9cac21f8eb82675ed19fb955b8bbb9dd14cc3d58; 34d99af52ad40bd498ba66970579a5bc1fb1a3bc before b322cc7adcd2e6ec1594d187533a126506ab545c; 34d99af52ad40bd498ba66970579a5bc1fb1a3bc before 695c85dc345a4e0292739f004c261bedef3f27e6; 34d99af52ad40bd498ba66970579a5bc1fb1a3bc before 01b0ec8c397be65ff710777c97017ca1de56ef8e; 34d99af52ad40bd498ba66970579a5bc1fb1a3bc before cf37b61b5420fd4600fe78cf8c24da6e4d9bfe28; 34d99af52ad40bd498ba66970579a5bc1fb1a3bc before 636a99bab36ba27515363d325866c0273ac83b3e; +3 more |
| CVE-2026-89637 | 9.8 | Sep 11 | smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 Affected: 316cf94a910f6f93d43cc574359d163ccae098a3 before 9eed72e9534b10a6d9f8f5146feff3db53aebdba; 316cf94a910f6f93d43cc574359d163ccae098a3 before 5e6533a683f6a851158d9f33fb4ea8f4f25d7f84; 316cf94a910f6f93d43cc574359d163ccae098a3 before 730d0bb19507b9e19c2fe5343109ac618e2fbce5; 3.6 |
| CVE-2026-89636 | 9.8 | Sep 11 | smb: client: clear ce->tgthint in free_tgts() Affected: 54be1f6c1c37498bba557049df646cc239fa37e3 before 14f60e959b5ac813715ff72e127beb3584ddabf6; 54be1f6c1c37498bba557049df646cc239fa37e3 before 3ff9462bb7a06d8d32a1dc02d39580b078ec9e55; 54be1f6c1c37498bba557049df646cc239fa37e3 before 7507bd1885643d0461a6017767492450af1ce2a3; 54be1f6c1c37498bba557049df646cc239fa37e3 before 9ab46a13798a61d9d020b01d4e57efdabe6624fa; 54be1f6c1c37498bba557049df646cc239fa37e3 before 5baab40404a9393bcc0b7b8f1950bf2c307e0984; 54be1f6c1c37498bba557049df646cc239fa37e3 before b1b741cf8e7ce1b91d937e23decd3d3358748700; +1 more |
| CVE-2026-89635 | 9.8 | Sep 11 | ksmbd: only rebind the reopened file's own oplock on durable reconnect Affected: f363a0fb134a3eb9e47368b1edbd251fd76be84b before 74e3ef4630f004c0de40c0540648a5a4033c6c9d; f363a0fb134a3eb9e47368b1edbd251fd76be84b before 3f220a0a62e6b9b391c9d1f0e6580b05173cc7f7; 7.2 |
| CVE-2026-89633 | 9.8 | Sep 11 | smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() Affected: e4eb295d38b57f4d4b956942a48887eb252d97c6 before 6eb70b78e48b0031bd1a05fe1b58959a48e87739; e4eb295d38b57f4d4b956942a48887eb252d97c6 before 36d01415d881d5326a0dd3384f781cd7e69aff2d; e4eb295d38b57f4d4b956942a48887eb252d97c6 before 672cf86aa6aa0fb4012ce4c3b3498df42ad67a4e; e4eb295d38b57f4d4b956942a48887eb252d97c6 before 033bc80019f07d158630df4e69b19a49010f54f1; e4eb295d38b57f4d4b956942a48887eb252d97c6 before 6343c1da561962688f203362d80d6a3bfa39fa1b; 2.6.12 |
| CVE-2026-89614 | 9.8 | Sep 11 | ntfs: bound the free-cluster bitmap scan to the volume Affected: 11ccc9107dc460de28af90fac1f42404d9802735 before dc15a9f5307d5372aef3b64bf3ed7802f530c471; 11ccc9107dc460de28af90fac1f42404d9802735 before 19cac7902a8ab748e15f98ddaafcf5f8882be21d; 7.1 |
| CVE-2026-89613 | 9.8 | Sep 11 | ntfs: reject invalid empty mapping pairs Affected: 11ccc9107dc460de28af90fac1f42404d9802735 before b0cc6dbc655e037251874b3e0dd1a760dcf29007; 11ccc9107dc460de28af90fac1f42404d9802735 before 766062a82e1ce4087c7dc077224144dfd34b3661; 7.1 |
| CVE-2026-89612 | 9.8 | Sep 11 | ntfs: reject invalid MFT LCNs from boot sector Affected: 11ccc9107dc460de28af90fac1f42404d9802735 before 8f8420b68a6f05ca2b03779d8208814ec539b9e5; 11ccc9107dc460de28af90fac1f42404d9802735 before cc9d09fef78410bcd37ac05168cbd5f6dd75d3d2; 7.1 |
| CVE-2026-89611 | 9.8 | Sep 11 | ntfs: validate non-resident attribute offsets Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before cd7b3dc7557faadeea626034e3bac68a449851ef; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before a83e82b0ec3ae523028e24813f23f18b43e8fc1c; before 7.2.4 |
| CVE-2026-89610 | 9.8 | Sep 11 | ntfs: verify run length exceeding volume boundary Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6e844d4b82434a781b80d02145fd1b17cf90e3c3; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before fea9e4488f384c0ef1c0e3d96b565127c1b98447; before 7.2.4 |
| CVE-2026-89558 | 9.8 | Sep 11 | md/raid10: fix still_degraded being inverted in raid10_sync_request() Affected: fe6a19d40ceb44281905485f56dda715e3214e0e before 9bb8da6ecb330a5b1ac9b96f1e55f134a7aef1d4; fe6a19d40ceb44281905485f56dda715e3214e0e before 0efabe6229dc683dbf6eeebd0f9fddc7971ed420; fe6a19d40ceb44281905485f56dda715e3214e0e before 00449d752bee9c8787f42ea1bf533a9fb17f9b6b; fe6a19d40ceb44281905485f56dda715e3214e0e before 47f1441b281decde6954a2fa82b4131637d685ac; 6.12 |
| CVE-2026-89555 | 9.8 | Sep 11 | mpls: reload header after pskb_may_pull() Affected: 9f427a0e474a67b454420c131709600d44850486 before aa4fe0b450a461aa1162fe8375f5d28f4c957df8; 9f427a0e474a67b454420c131709600d44850486 before b1c0783b2facc398437ad8f8b86c636d7a78f8db; 9f427a0e474a67b454420c131709600d44850486 before bfaaff99238326166694354a63a76c02563f98b1; 9f427a0e474a67b454420c131709600d44850486 before d9640239827d6d0cb84263b590f7a4f1596c17eb; 9f427a0e474a67b454420c131709600d44850486 before fed638a248116b8a249bd4202d28e5934bdc65ad; 9f427a0e474a67b454420c131709600d44850486 before d82b90a38c2ca8a0694428eab0e9551c23f2447d; +5 more |
| CVE-2026-89551 | 9.8 | Sep 11 | SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow Affected: 4c190e2f913f038c9c91ee63b59cd037260ba353 before a3d77bcd974b8625d16bddf448cb3a1b5e37049c; 4c190e2f913f038c9c91ee63b59cd037260ba353 before fa16bbe987b47e771e52eeb1b4540f18d92496ac; 4c190e2f913f038c9c91ee63b59cd037260ba353 before a924ac4c78afab71bf82641afa3b62e0c4a8b55e; 4c190e2f913f038c9c91ee63b59cd037260ba353 before 4bf59cb0ea5b0ddfbc46a1dc2fa78fc8b9986ce4; 4c190e2f913f038c9c91ee63b59cd037260ba353 before e6267cccd7b05cc514e57f2160aa8db85f5c2701; 4c190e2f913f038c9c91ee63b59cd037260ba353 before ad0cce80d4af2f74674e8b635d97aa3880e83da8; +3 more |
| CVE-2026-89550 | 9.8 | Sep 11 | SUNRPC: svcauth_gss: enforce krb5 token minimum length Affected: 7c9fdcfb1b64c47ed618c103b617af3f86e1239c before 0ea5b0c7f212c2772d32c2b88287b89a9cdf6edd; 7c9fdcfb1b64c47ed618c103b617af3f86e1239c before dd6afc6cab8c5d387d1ed2f069562ef7bdadd651; 7c9fdcfb1b64c47ed618c103b617af3f86e1239c before de942dd8c2c8358bcad04ce44271954c48924423; 7c9fdcfb1b64c47ed618c103b617af3f86e1239c before 2eed1e6a976a44015c3ee78841fe336796e2b21c; 7c9fdcfb1b64c47ed618c103b617af3f86e1239c before a919c5c88769cf8fb3ec071e6078d830bf512489; 2.6.18 |
| CVE-2026-89546 | 9.8 | Sep 11 | SUNRPC: close backchannel before destroying callback service Affected: 441244d4273a8037b265fd254dfdaca5fa736ee2 before 6debde9e3e6ae21dcca75837b4247b13ca4ea2b8; 441244d4273a8037b265fd254dfdaca5fa736ee2 before 3674f780f47d2906b5a0f7199b66973067bdfeca; 6.19 |
| CVE-2026-89542 | 9.8 | Sep 11 | SUNRPC: harden gss_krb5_unwrap_v2 against short tokens Affected: de9c17eb4a912c9028f7b470eb80815144883b26 before 299d281c7225ded15b28cb861a98d818d82787fc; de9c17eb4a912c9028f7b470eb80815144883b26 before 84ddbc8d084c0251d534f14f5d1a7da05be56404; de9c17eb4a912c9028f7b470eb80815144883b26 before 075d7cfc4df8c54cb202ba8b28420370c03ba9b6; de9c17eb4a912c9028f7b470eb80815144883b26 before f2591660e0eb263c9415bf0d0bb1b111e62df7a4; de9c17eb4a912c9028f7b470eb80815144883b26 before dddcb0f4b7e27fac16a78ea9a1c8ec2e8a241087; de9c17eb4a912c9028f7b470eb80815144883b26 before 806584a4b67a7233870c33e5b8f872e76dd02988; +3 more |
| CVE-2026-89541 | 9.8 | Sep 11 | SUNRPC: harden gss_unwrap_resp_priv length checks Affected: 2d2da60c63b67174add32f06e8d54c3a0c5cd9cf before 3691c4b3488d8ca046b9941e5be30c626dbbbb50; 2d2da60c63b67174add32f06e8d54c3a0c5cd9cf before 85fa6b12e8f439739ac36ef2aad925f37c8b976a; 2d2da60c63b67174add32f06e8d54c3a0c5cd9cf before 401f6a5b338d05bb1069ad814d9f77e3c367854f; 2d2da60c63b67174add32f06e8d54c3a0c5cd9cf before 81fd7654a8429718adfcb2a7e03496077f547ed0; 2d2da60c63b67174add32f06e8d54c3a0c5cd9cf before 89a15a50f84d32d4b99db86f957427fcbe20a99a; 2d2da60c63b67174add32f06e8d54c3a0c5cd9cf before ebcbd2523a8524c3d24e111cdbed8e271d910269; +3 more |
| CVE-2026-89538 | 9.8 | Sep 11 | SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field Affected: cf4c024b908353fcc48309374d39e3399d67dfd1 before ac9efc29346b6942e71f0e24a3178a9121330fab; cf4c024b908353fcc48309374d39e3399d67dfd1 before b5746095b59f4d11f39f08751d36bbdfd1e5deac; cf4c024b908353fcc48309374d39e3399d67dfd1 before 9fc6d6e6db49ab55208d5dd1c424c1d0d9aa7296; cf4c024b908353fcc48309374d39e3399d67dfd1 before 4abb44a29bb515df6f49123848765c70fc9b5021; cf4c024b908353fcc48309374d39e3399d67dfd1 before dfcd81ab45613d45996fbf483d4ef54b0ec90ab9; cf4c024b908353fcc48309374d39e3399d67dfd1 before 1f9856af065b6158271687e9788407b9573fd16f; +3 more |
| CVE-2026-89536 | 9.8 | Sep 11 | SUNRPC: wait for in-flight client TLS handshake callback Affected: 75eb6af7acdf566c68d61e98e67ee2f235201c02 before fb43997407bc17ee39bac81ab708101312e255f5; 75eb6af7acdf566c68d61e98e67ee2f235201c02 before 15431820f448e09f8029b670d5c82aa5917d4625; 75eb6af7acdf566c68d61e98e67ee2f235201c02 before 1de391e8b94e31b45c19c16dbf315e294810c7de; 75eb6af7acdf566c68d61e98e67ee2f235201c02 before 7fbb6d2ab0391eb8d1f1a68e6bc263ef02cea61b; 75eb6af7acdf566c68d61e98e67ee2f235201c02 before a89dd597458848b463d284b15e42a8078beeb046; 6.5 |
| CVE-2026-89533 | 9.8 | Sep 11 | svcrdma: Fix offset arithmetic in read_chunk_range Affected: d7cc73972661be4a02a1b09f1d9b3283c6c05154 before 10873311f91db9454e2fadbf9866bc819e0646d9; d7cc73972661be4a02a1b09f1d9b3283c6c05154 before addbf02dfe3b25e7e38e03bbd4e2a6ed86a14be7; d7cc73972661be4a02a1b09f1d9b3283c6c05154 before cba8543c18cf42fd80fd63effb6df6ff4f7e73ce; d7cc73972661be4a02a1b09f1d9b3283c6c05154 before 6ee4dc7476b3abc92ec1d444533a559f33f59561; d7cc73972661be4a02a1b09f1d9b3283c6c05154 before a46b35f213c2426f5d6a0458a8f7e873fc59cdfd; d7cc73972661be4a02a1b09f1d9b3283c6c05154 before 4493c96bbd0068fadf69cbae8d13426202e34cdc; +2 more |
| CVE-2026-89530 | 9.8 | Sep 11 | svcrdma: Reject inline replies that overflow the pull-up buffer Affected: e248aa7be86e8179f20ac0931774ecd746f3f5bf before 8068358f445a11296328ffa7c524701596814a17; e248aa7be86e8179f20ac0931774ecd746f3f5bf before fcd91b9957462d398792201c239dffaeff1cc8b2; e248aa7be86e8179f20ac0931774ecd746f3f5bf before 1949dd1576f7a8aa161b1330c6125df9d53046d5; e248aa7be86e8179f20ac0931774ecd746f3f5bf before 8ec60eb51fae37cd3d334ff26e4a7d6fb21ff7cf; e248aa7be86e8179f20ac0931774ecd746f3f5bf before 0fbe20dfe74b783d255bf389a6ea77aa25dc7860; 9b65b18f817d9ada2bf67351f24bdcce6789a0bb; +4 more |
| CVE-2026-89526 | 9.8 | Sep 11 | svcrdma: Validate Read chunk positions before reconstruction Affected: d96962e6d0e281bab6a48e83b42f5dce6eb28bf4 before 3861eeabaebe243050952b34063763527c44e1fe; d96962e6d0e281bab6a48e83b42f5dce6eb28bf4 before 5ab3f6d882fe07ae5e61d0bcfeea00b9409155c2; d96962e6d0e281bab6a48e83b42f5dce6eb28bf4 before f84ec84d8d4bc65f9ae23372570349687f66fa39; d96962e6d0e281bab6a48e83b42f5dce6eb28bf4 before 577097455d084610fc31e91e6a61c5793b6f04ba; d96962e6d0e281bab6a48e83b42f5dce6eb28bf4 before 3779b7b9e7d1c8ba4738f9d327de3b0288cefe9b; 5.11 |
| CVE-2026-89495 | 9.8 | Sep 11 | ocfs2: bound namelen in dlm_migrate_request_handler Affected: 6714d8e86bf443f6f7af50f9d432025649f091f5 before e1288865b8ceac0dcd1009ecba43de961f13d5bd; 6714d8e86bf443f6f7af50f9d432025649f091f5 before aabc5d8388e6f8826345f0073455dbcaaaa6491d; 6714d8e86bf443f6f7af50f9d432025649f091f5 before 006c96ea488eca2ef5155ec76038e0a4dbf65f0a; 6714d8e86bf443f6f7af50f9d432025649f091f5 before 24989909d3413b44b104102caa6661b1e424ba0f; 6714d8e86bf443f6f7af50f9d432025649f091f5 before f8658ee3327f73bd81c0bcd07cdeb5a8527fac98; 6714d8e86bf443f6f7af50f9d432025649f091f5 before de10cd3b062a5235af754925fcf49beb5a1109d4; +3 more |
| CVE-2026-89494 | 9.8 | Sep 11 | ocfs2: validate lengths in dlm_mig_lockres_handler Affected: 6714d8e86bf443f6f7af50f9d432025649f091f5 before 4a5798253212093b9ff7d90c6cfbe348bcda1594; 6714d8e86bf443f6f7af50f9d432025649f091f5 before dce05b17db862f47ff60614017abe639b2e71cad; 6714d8e86bf443f6f7af50f9d432025649f091f5 before 0e999d56917f861f97adb961617b1828c9eb4733; 6714d8e86bf443f6f7af50f9d432025649f091f5 before 77686fa5bba135252d348e2dacf481fc19f60c41; 6714d8e86bf443f6f7af50f9d432025649f091f5 before f33041906885f96e190cde54e61ddc69de39e3ee; 6714d8e86bf443f6f7af50f9d432025649f091f5 before 50c4cc9183e11f83427efbf770f54851f4471c02; +3 more |
| CVE-2026-89492 | 9.8 | Sep 11 | ocfs2: validate directory-index entry counts when reading metadata Affected: 9b7895efac906d66d19856194e1ba61f37e231a4 before aad3129b8e915d0ff492bb7517d825d8490cfdd9; 9b7895efac906d66d19856194e1ba61f37e231a4 before 5e661f55ca8568471fce558effe81cca112f5cb2; 9b7895efac906d66d19856194e1ba61f37e231a4 before fcfcba8fe17dbf2c8805690b8cc25e32d81249a4; 9b7895efac906d66d19856194e1ba61f37e231a4 before b8a5c0c32df2c5b685ceef76ac77e37c7e1dc3ed; 9b7895efac906d66d19856194e1ba61f37e231a4 before bc70726ddad53c7e9a9a85915bf2415b0d4f42f9; 2.6.30 |
| CVE-2026-89485 | 9.8 | Sep 11 | lockd: pin next file across nlm_inspect_file lock-drop Affected: 01df9c5e918ae5559f2d96da0143f8bfbb9e6171 before e3c413f789eaf0170275c7eba523ead73d963f30; 01df9c5e918ae5559f2d96da0143f8bfbb9e6171 before 08a455f87b14c7ff22ae3fdadda62a796a3a5572; 01df9c5e918ae5559f2d96da0143f8bfbb9e6171 before 550c19222c7132c888e23c9d89079ba1c9bc4cca; 01df9c5e918ae5559f2d96da0143f8bfbb9e6171 before 350087f231c11efcd288c310707c40eab63ca583; 01df9c5e918ae5559f2d96da0143f8bfbb9e6171 before c24bdb7df2f34bdc38ca8a73796f5acb40f1830c; 01df9c5e918ae5559f2d96da0143f8bfbb9e6171 before 41f0a6d31615fcae261bf28a0aa50050dc93a401; +3 more |
| CVE-2026-89482 | 9.8 | Sep 11 | nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone Affected: 25e5cb780e62bde432b401f312bb847edc78b432 before 32ea8ce96b9bd797c59c351ce490ffd97adaa8c0; 25e5cb780e62bde432b401f312bb847edc78b432 before dd8906bb8f8d5bf1c9f861e1382c82b87bfe7cab; 25e5cb780e62bde432b401f312bb847edc78b432 before 7ed0b61bbc145988be292c4d3ec580aebd8d2bcd; 25e5cb780e62bde432b401f312bb847edc78b432 before b96e1ff75e5c0ad6e077ac002b1d30b0a2b49528; 25e5cb780e62bde432b401f312bb847edc78b432 before b36161701cb366f416afdcf70771d432a7c74753; 25e5cb780e62bde432b401f312bb847edc78b432 before 6a01b58263108eaf9869bb6f82f07709240c6589; +7 more |
| CVE-2026-89479 | 9.8 | Sep 11 | sctp: stop processing a packet once its association is deleted Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 7d970353eeb98f46a3b9dc602850e4f6336a9889; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 09c3b193a3e8fe53e1f416e2f8e3283d2a785405; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before ed85fe91a61bc0e0da6b585c07102b20f4cc65a0; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 5c0b2dbbdafc9eeeb11fffe1e46551fc3b55d8ee; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before ee3f04cf566f6041aa9a0360494fd8db5ade383a; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before fa306a40e716c5abcd967475459ce1ebd56e5115; +3 more |
| CVE-2026-89478 | 9.8 | Sep 11 | sctp: drop a chunk if its transport was removed Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 3fc072e7cb4a0ff251d13cfc2d24f62489cd9386; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before d7cb5ad832095dc4becfdb2a36007ffd50e49fb0; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 0422b092a3d43ca462932ff9f747731ca078d1d4; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 928fd7920ba37cc5637a211b9be979083413a2fa; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c6c86a5e62a4fec36692ddd64b9144b660f71f96; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 1035bdef1efb9b1076d1a57b81e08c637ff08ecc; +3 more |
| CVE-2026-81002 | 9.8 | Sep 11 | xdp: fix zero-copy frame layout Affected: b0d1beeff2a97a0cf1965ea8f1d13b8973f22582 before dcb6db9ca6515fcd3e00c93ec5e27dc7a0a7012f; b0d1beeff2a97a0cf1965ea8f1d13b8973f22582 before 22092730129077c302d8c947bbe0876f0280c528; b0d1beeff2a97a0cf1965ea8f1d13b8973f22582 before ced3e18cd9b9caf630aaa1e1eac305f5192ba896; b0d1beeff2a97a0cf1965ea8f1d13b8973f22582 before 6de17275b3ccdf9887568b07e54da2e3597217cf; b0d1beeff2a97a0cf1965ea8f1d13b8973f22582 before 444216dacdbebd3e52d5e704facafbb230da09e9; b0d1beeff2a97a0cf1965ea8f1d13b8973f22582 before 15d1f3c0dbe7a740f779337deb39f23cd8d002c8; +3 more |
| CVE-2026-80986 | 9.8 | Sep 11 | net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages Affected: 27ef6a9981fe74191849966a6d5e0400a4008ab8 before 486c699a8cde82c1d9b4f443eeab4ddf86358cb0; 27ef6a9981fe74191849966a6d5e0400a4008ab8 before 5e5d9e6df677d30a2203d257b5fd8b99814fa607; 27ef6a9981fe74191849966a6d5e0400a4008ab8 before 2d1e7c5aaa3326e95e2058457f172ca99a9a4577; 6.14 |
| CVE-2026-80981 | 9.8 | Sep 11 | net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() Affected: 27ef6a9981fe74191849966a6d5e0400a4008ab8 before c52a998a223e7e84333306996edec096178d1e95; 27ef6a9981fe74191849966a6d5e0400a4008ab8 before adef84cc85d449ac28d2b4b4c49cf19619c56e27; 27ef6a9981fe74191849966a6d5e0400a4008ab8 before a42a459ef0e54cb0c4b3e43e21cb0e658e664f64; 6.14 |
| CVE-2026-80980 | 9.8 | Sep 11 | net/smc: stop killed, freed and out_of_sync sharing a byte Affected: b286a0651e4404ab96cdfdcdad8a839a26b3751e before 297e96f38d3e4f1a3b84068950dd5c7a55bbdc7b; b286a0651e4404ab96cdfdcdad8a839a26b3751e before 09a9cbadc05f452405de31012bd2c428b601291a; b286a0651e4404ab96cdfdcdad8a839a26b3751e before 313f79149eb337411c64e2c247234b62ef9a3cb9; b286a0651e4404ab96cdfdcdad8a839a26b3751e before 2cb7a8d64b7e8ccdc69bbe48fe9c4eaa79c33aec; b286a0651e4404ab96cdfdcdad8a839a26b3751e before db51a8658c11a82432b64999519a269c3aabb447; 5.8 |
| CVE-2026-80976 | 9.8 | Sep 11 | seg6: reset IP6CB after IPv6 decapsulation Affected: d7a669dd2f8ba07a17423f4ad586dfc0379882f7 before d1f0d353358987ca87f21d8956e2d2854951130d; d7a669dd2f8ba07a17423f4ad586dfc0379882f7 before a0e2b0a3718f0cf9fb0ee41710b4a6348a7315c8; d7a669dd2f8ba07a17423f4ad586dfc0379882f7 before 9ae92198c24d7dacd4070e2f34f6e1ed3a63061c; d7a669dd2f8ba07a17423f4ad586dfc0379882f7 before 96c74420ac92930a7e0f21770818544eee4a93d7; d7a669dd2f8ba07a17423f4ad586dfc0379882f7 before 2b154e96fcb3f01fd42765c64e0a56820fbc16eb; d7a669dd2f8ba07a17423f4ad586dfc0379882f7 before cfa186a0857a0f831dfca67b16bbc40ecfdf3280; +3 more |
The 500 most important CVEs for this product (exploited first, then by severity)