LI
Product
Linux
On CISA KEVExploited in the wild
9,731
CVEs
11
On KEV
10.0
Max CVSS
1052
New 30D
Severity mix
Critical 490High 8Medium 2Low 0
Watch
Add Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-89492 | 9.8 | Sep 11 | ocfs2: validate directory-index entry counts when reading metadata Affected: 9b7895efac906d66d19856194e1ba61f37e231a4 before aad3129b8e915d0ff492bb7517d825d8490cfdd9; 9b7895efac906d66d19856194e1ba61f37e231a4 before 5e661f55ca8568471fce558effe81cca112f5cb2; 9b7895efac906d66d19856194e1ba61f37e231a4 before fcfcba8fe17dbf2c8805690b8cc25e32d81249a4; 9b7895efac906d66d19856194e1ba61f37e231a4 before b8a5c0c32df2c5b685ceef76ac77e37c7e1dc3ed; 9b7895efac906d66d19856194e1ba61f37e231a4 before bc70726ddad53c7e9a9a85915bf2415b0d4f42f9; 2.6.30 |
| CVE-2026-89485 | 9.8 | Sep 11 | lockd: pin next file across nlm_inspect_file lock-drop Affected: 01df9c5e918ae5559f2d96da0143f8bfbb9e6171 before e3c413f789eaf0170275c7eba523ead73d963f30; 01df9c5e918ae5559f2d96da0143f8bfbb9e6171 before 08a455f87b14c7ff22ae3fdadda62a796a3a5572; 01df9c5e918ae5559f2d96da0143f8bfbb9e6171 before 550c19222c7132c888e23c9d89079ba1c9bc4cca; 01df9c5e918ae5559f2d96da0143f8bfbb9e6171 before 350087f231c11efcd288c310707c40eab63ca583; 01df9c5e918ae5559f2d96da0143f8bfbb9e6171 before c24bdb7df2f34bdc38ca8a73796f5acb40f1830c; 01df9c5e918ae5559f2d96da0143f8bfbb9e6171 before 41f0a6d31615fcae261bf28a0aa50050dc93a401; +3 more |
| CVE-2026-89482 | 9.8 | Sep 11 | nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone Affected: 25e5cb780e62bde432b401f312bb847edc78b432 before 32ea8ce96b9bd797c59c351ce490ffd97adaa8c0; 25e5cb780e62bde432b401f312bb847edc78b432 before dd8906bb8f8d5bf1c9f861e1382c82b87bfe7cab; 25e5cb780e62bde432b401f312bb847edc78b432 before 7ed0b61bbc145988be292c4d3ec580aebd8d2bcd; 25e5cb780e62bde432b401f312bb847edc78b432 before b96e1ff75e5c0ad6e077ac002b1d30b0a2b49528; 25e5cb780e62bde432b401f312bb847edc78b432 before b36161701cb366f416afdcf70771d432a7c74753; 25e5cb780e62bde432b401f312bb847edc78b432 before 6a01b58263108eaf9869bb6f82f07709240c6589; +7 more |
| CVE-2026-89479 | 9.8 | Sep 11 | sctp: stop processing a packet once its association is deleted Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 7d970353eeb98f46a3b9dc602850e4f6336a9889; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 09c3b193a3e8fe53e1f416e2f8e3283d2a785405; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before ed85fe91a61bc0e0da6b585c07102b20f4cc65a0; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 5c0b2dbbdafc9eeeb11fffe1e46551fc3b55d8ee; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before ee3f04cf566f6041aa9a0360494fd8db5ade383a; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before fa306a40e716c5abcd967475459ce1ebd56e5115; +3 more |
| CVE-2026-89478 | 9.8 | Sep 11 | sctp: drop a chunk if its transport was removed Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 3fc072e7cb4a0ff251d13cfc2d24f62489cd9386; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before d7cb5ad832095dc4becfdb2a36007ffd50e49fb0; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 0422b092a3d43ca462932ff9f747731ca078d1d4; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 928fd7920ba37cc5637a211b9be979083413a2fa; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c6c86a5e62a4fec36692ddd64b9144b660f71f96; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 1035bdef1efb9b1076d1a57b81e08c637ff08ecc; +3 more |
| CVE-2026-81002 | 9.8 | Sep 11 | xdp: fix zero-copy frame layout Affected: b0d1beeff2a97a0cf1965ea8f1d13b8973f22582 before dcb6db9ca6515fcd3e00c93ec5e27dc7a0a7012f; b0d1beeff2a97a0cf1965ea8f1d13b8973f22582 before 22092730129077c302d8c947bbe0876f0280c528; b0d1beeff2a97a0cf1965ea8f1d13b8973f22582 before ced3e18cd9b9caf630aaa1e1eac305f5192ba896; b0d1beeff2a97a0cf1965ea8f1d13b8973f22582 before 6de17275b3ccdf9887568b07e54da2e3597217cf; b0d1beeff2a97a0cf1965ea8f1d13b8973f22582 before 444216dacdbebd3e52d5e704facafbb230da09e9; b0d1beeff2a97a0cf1965ea8f1d13b8973f22582 before 15d1f3c0dbe7a740f779337deb39f23cd8d002c8; +3 more |
| CVE-2026-80986 | 9.8 | Sep 11 | net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages Affected: 27ef6a9981fe74191849966a6d5e0400a4008ab8 before 486c699a8cde82c1d9b4f443eeab4ddf86358cb0; 27ef6a9981fe74191849966a6d5e0400a4008ab8 before 5e5d9e6df677d30a2203d257b5fd8b99814fa607; 27ef6a9981fe74191849966a6d5e0400a4008ab8 before 2d1e7c5aaa3326e95e2058457f172ca99a9a4577; 6.14 |
| CVE-2026-80981 | 9.8 | Sep 11 | net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() Affected: 27ef6a9981fe74191849966a6d5e0400a4008ab8 before c52a998a223e7e84333306996edec096178d1e95; 27ef6a9981fe74191849966a6d5e0400a4008ab8 before adef84cc85d449ac28d2b4b4c49cf19619c56e27; 27ef6a9981fe74191849966a6d5e0400a4008ab8 before a42a459ef0e54cb0c4b3e43e21cb0e658e664f64; 6.14 |
| CVE-2026-80980 | 9.8 | Sep 11 | net/smc: stop killed, freed and out_of_sync sharing a byte Affected: b286a0651e4404ab96cdfdcdad8a839a26b3751e before 297e96f38d3e4f1a3b84068950dd5c7a55bbdc7b; b286a0651e4404ab96cdfdcdad8a839a26b3751e before 09a9cbadc05f452405de31012bd2c428b601291a; b286a0651e4404ab96cdfdcdad8a839a26b3751e before 313f79149eb337411c64e2c247234b62ef9a3cb9; b286a0651e4404ab96cdfdcdad8a839a26b3751e before 2cb7a8d64b7e8ccdc69bbe48fe9c4eaa79c33aec; b286a0651e4404ab96cdfdcdad8a839a26b3751e before db51a8658c11a82432b64999519a269c3aabb447; 5.8 |
| CVE-2026-80976 | 9.8 | Sep 11 | seg6: reset IP6CB after IPv6 decapsulation Affected: d7a669dd2f8ba07a17423f4ad586dfc0379882f7 before d1f0d353358987ca87f21d8956e2d2854951130d; d7a669dd2f8ba07a17423f4ad586dfc0379882f7 before a0e2b0a3718f0cf9fb0ee41710b4a6348a7315c8; d7a669dd2f8ba07a17423f4ad586dfc0379882f7 before 9ae92198c24d7dacd4070e2f34f6e1ed3a63061c; d7a669dd2f8ba07a17423f4ad586dfc0379882f7 before 96c74420ac92930a7e0f21770818544eee4a93d7; d7a669dd2f8ba07a17423f4ad586dfc0379882f7 before 2b154e96fcb3f01fd42765c64e0a56820fbc16eb; d7a669dd2f8ba07a17423f4ad586dfc0379882f7 before cfa186a0857a0f831dfca67b16bbc40ecfdf3280; +3 more |
| CVE-2026-80926 | 9.8 | Sep 11 | ksmbd: fix use-after-free in oplock break notification Affected: 945a86b21b40fb17183f5b27461baa6f03e2467f before 892f643b141aee3f7aa7c0fc61ddcb55c59f1996; 1ff58dcfcab434ebb51649da33774fbb8e1f7b67 before 5de0527f782430b1109a447646e32033ad018a6a; e735dbd489e3ea02be78dba991056fe1138be51e before c8279ae8df68cce9cd3b785e85f7a86c80a46e78; b003086d76968298f22e7cf62239833b5a3a06b1 before 8cc98db4fc590e6c7d9db6529320982ee16c5d1d; b003086d76968298f22e7cf62239833b5a3a06b1 before 0e753899627b5e28a9fea8bca98262a6f65a2452; 75e33deda658c1ab3a9336cbdb1436536f9b3660; +5 more |
| CVE-2026-80725 | 9.8 | Aug 29 | net: gro: properly validate BIG TCP aggregation criteria Affected: 0fe79f28bfaf73b66b7b1562d2468f94aa03bd12 before 37a5dcd6837fc2afc44a7bc3ed8af4e983783d46; 0fe79f28bfaf73b66b7b1562d2468f94aa03bd12 before e907bf694ed55bdfe421be99dba35751a655df25; 0fe79f28bfaf73b66b7b1562d2468f94aa03bd12 before 03cb8cc2961f5f781d12e903782cb3815ed84b1c; 0fe79f28bfaf73b66b7b1562d2468f94aa03bd12 before 3ce832e2bd431d0c12ba525ed73ad8fbc4191da5; 0fe79f28bfaf73b66b7b1562d2468f94aa03bd12 before 81be30c1f5f2bffda1f04c0efd0746af10b9643a; 5.19 |
| CVE-2026-80714 | 9.8 | Aug 28 | ipvs: do not propagate one-packet flag to synced conns Affected: 26ec037f9841e49cc5c615deb8e1e73e5beab2ca before 06d1d9b56ef8132fbf85006885eb43d9510b8b02; 26ec037f9841e49cc5c615deb8e1e73e5beab2ca before acbdc276091b308ca7794acb86e761f8203e2f59; 26ec037f9841e49cc5c615deb8e1e73e5beab2ca before 300348e3ba1521b003d59825f97e24f9a6859688; 26ec037f9841e49cc5c615deb8e1e73e5beab2ca before 44af98cc7d5ef8e730488d5df1eecd5deeaa5947; 26ec037f9841e49cc5c615deb8e1e73e5beab2ca before 4649e6faeecdc2d44bfa6ccbe405eef27e55d816; 26ec037f9841e49cc5c615deb8e1e73e5beab2ca before b5ee5b266f833601ac4817f6df0bc496fc376a28; +3 more |
| CVE-2026-80694 | 9.8 | Aug 28 | net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller Affected: 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 before a9133c4d335e48ba92f4daed10c506378924f976; 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 before 3bd58ac9ca0c552651f533c1bd280dd19ae7d4e8; 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 before 276f1f180f55d56cf5992a581e20ed2b3dfa6ced; 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 before 7eb46318d53940dab63dea7130e720b67a656104; 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 before e095f249e2209674f6366f6db0383a2b96e19239; 4.8 |
| CVE-2026-80681 | 9.8 | Aug 28 | vxlan: re-fetch eth header after route_shortcircuit() Affected: ae8840825605f36f98f247323edc150e761cb64e before 6375093eb45cd7d89f1945f939eeae3b29d79f56; ae8840825605f36f98f247323edc150e761cb64e before 1b7f7b653e3557690047c62f03b80a24ea5a58a5; ae8840825605f36f98f247323edc150e761cb64e before bf045341dfb3e767f0ff94cf240ce3c371973bd4; ae8840825605f36f98f247323edc150e761cb64e before 2355c8c26d2aa1b4385b369e67202e47d460d555; ae8840825605f36f98f247323edc150e761cb64e before 1511631b7cfc4152b10a0a9d04c7a0bf2ddf4585; ae8840825605f36f98f247323edc150e761cb64e before 1235e017aa11cf01e91b613c4c5ed6aa28934fff; +3 more |
| CVE-2026-80674 | 9.8 | Aug 28 | ntfs: validate resident attribute lists and harden the validator Affected: 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before 55e97648f7753c6097cb682d24d1abcfe878e812; 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before 7d19e1ffee084c4f7d321a360c14ba43404f7cc8; 7.1 |
| CVE-2026-80673 | 9.8 | Aug 28 | ntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find() Affected: 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before 44885c9b45eb4082fb7f558590d84bb254a08e94; 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before 344b18f389f9934d59c7b0cf3d20541ea2e0da58; 7.1 |
| CVE-2026-80668 | 9.8 | Aug 28 | netfilter: nf_conntrack_expect: use conntrack GC to reap expectations Affected: 5e1c1d22268ae710c238342c8030c21daf298168 before 3d7b808ec35291ee75dcdb2b6fe5f587bfe9b1df; d52fa1fa7440676b8c238037a050ab008c22737f before 02f7809a19fc88cfd9bc113a4bfe7add6305db39; bffcaad9afdfe45d7fc777397d3b83c1e3ebffe5 before 7ec786f4230c2a9b2eaf97a2d45368933b49d2b2; bffcaad9afdfe45d7fc777397d3b83c1e3ebffe5 before b8b09dc2bf35a00d4e0556b5d6308c7b917ebda2; 9e1196d27ef496f404c76f7a9d03761142d991c4; f338ced0473849c9f6ed0b77ca99f1aab5826787; +7 more |
| CVE-2026-80634 | 9.8 | Aug 28 | netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag Affected: e990cef6516daa4e1e236433579e333f74fd38cb before 1b52aeb40c9f04bf50eeb4ea09142139d163e239; e990cef6516daa4e1e236433579e333f74fd38cb before ee8440bb000fff4ef8acbfc99652851e9ca0a35b; e990cef6516daa4e1e236433579e333f74fd38cb before 547ea9f567498e4accc89e7816264f15a1a0629f; e990cef6516daa4e1e236433579e333f74fd38cb before 2f55fa28011c97d6495d5787808db10a8c2d690d; e990cef6516daa4e1e236433579e333f74fd38cb before e052f920773b73be49eb4d8702a9f85de7464363; 5.13 |
| CVE-2026-80630 | 9.8 | Aug 28 | net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Affected: cc71a757da78dd4aa1b4a9b19cb011833730ccf2 before 3e515188393e62a718ccebee651ee74514104ff6; eda741fe155ddf5ecd2dd3bfbd4fc3c0c7dbb450 before 20dd591d8f951e1e6aca5052be8785e6181055e2; 829c49b6b2ff45b043739168fd1245e4e1a91a30 before 94a5f1efdefb01f82cd228bf4e7ef1e8fc075c80; 2f9761a94bae33d26e6a81b31b36e7d776d93dc1 before acc08a0c7f37ebb1901144e03a7cba7d4afd9203; 4d55144b12e742404bb3f8fee6038bafbf45619d before 7c09843fd2b44d9bf0de798683861d1aecd62a08; 342debc12183b51773b3345ba267e9263bdfaaef before 0500af8630c3253f0dde879bd3a73a06bb2f2b3f; +14 more |
| CVE-2026-80617 | 9.8 | Aug 28 | net: airoha: fix foe_check_time allocation size Affected: 56b99327a451917f1c17f85fc33ea8293c08a9ee before 112b5eff24e044561ee9599a0d34e0fcea1df4e0; 6d5b601d52a27aafff555b480e538507901c672c before 9f7cd1e26d2f1766438edc9b9254f2c618f9ae98; 6d5b601d52a27aafff555b480e538507901c672c before 5c121ee635680c93d7074becf14cfbaac140f80d; 6.18.33 before 6.18.40; 6.19 |
| CVE-2026-80612 | 9.8 | Aug 28 | net: lwtunnel: Drop skb metadata before LWT encapsulation Affected: 8989d328dfe7c7a3b9f4b9f0ef60006d277f81cc before 19eec11f3ab5dd29ba58f5f209c24e946c95ef12; 8989d328dfe7c7a3b9f4b9f0ef60006d277f81cc before c00320b0e355c4bf0ae4743a53b4180fea237546; 6.19 |
| CVE-2026-80609 | 9.8 | Aug 28 | qede: fix out-of-bounds check for cqe->len_list[] Affected: ecbb12caf399d7cf364b7553ed5aebeaa2f255bc before 6d203bdd227fca1787f8a80cf84b990936633c5a; a778912b4a53587ea07d85526d152f85d109cbfe before bd3a6a083b408e96437dbd86ff543ba9ec3a788b; f0923011c1261b33a2ac1de349256d39cb750dd0 before e30af53dca803893a29eb3bbe0539752ba435410; 917a9d02182ac8b4f25eb47dc02f3ec679608c24 before 1aacefd074b5dcc99b8dbcd73e1c963ed5010110; 896f1a2493b59beb2b5ccdf990503dbb16cb2256 before b17751a2ebc4aef3ce6be6f71ee8df92bf5ddfcd; 896f1a2493b59beb2b5ccdf990503dbb16cb2256 before 6d46ab395803f162cdc50e8d346e5f1a4e766771; +8 more |
| CVE-2026-80600 | 9.8 | Aug 28 | batman-adv: dat: acquire ARP hw source only after skb realloc Affected: b61ec31c85756bbc898fb892555509afe709459a before a82fc217cb7a447313c76ebf9f09b100771b0ddf; b61ec31c85756bbc898fb892555509afe709459a before 86aa79b43e5b561fd3648891165bd7313b541315; b61ec31c85756bbc898fb892555509afe709459a before d755cd001fa2c248e186c1fc3df3d11d97dc843c; b61ec31c85756bbc898fb892555509afe709459a before 3404be97b940a9b1ae1aea5fdbc6cdbbe9cd5146; b61ec31c85756bbc898fb892555509afe709459a before 01678c53a7717a748aee388b6839e7b9761d641c; b61ec31c85756bbc898fb892555509afe709459a before 3b4c70c40f2e135a50cd38fc61c7d23a296a9981; +3 more |
| CVE-2026-80589 | 9.8 | Aug 26 | block: stop the timeout timer when releasing a never added disk Affected: 6f8191fdf41d3a53cc1d63fe2234e812c55a0092 before 6ae7364f68e6c7af6b6df4bbb14040b89e5975d0; 6f8191fdf41d3a53cc1d63fe2234e812c55a0092 before 6f06dbe5012c160e0dba418a5a9cb16c456ad46a; 6f8191fdf41d3a53cc1d63fe2234e812c55a0092 before 1a0ae4d502062a2759f2a92d12bdeab3c64c7372; 6f8191fdf41d3a53cc1d63fe2234e812c55a0092 before bb03b56d1d754908a37a160603be21769da423cf; 6f8191fdf41d3a53cc1d63fe2234e812c55a0092 before 93d620519d71dfc6ee64b5baea74f1d85d4439fb; 6f8191fdf41d3a53cc1d63fe2234e812c55a0092 before 26cb8ebbfaf713c82e142d08828d4d765057633b; +3 more |
| CVE-2026-80587 | 9.8 | Aug 26 | mptcp: avoid combining some incoming suboptions Affected: eda7acddf8080bb2d022a8d4b8b2345eb80c63ec before 0e2210af439755a2af352eea4178261dcf61742e; eda7acddf8080bb2d022a8d4b8b2345eb80c63ec before dc1d8d3eb345c616fbe922a010fa391c72c54d52; eda7acddf8080bb2d022a8d4b8b2345eb80c63ec before 099bfcbd0c16ae9b50aba2a1bea033e63f895da7; eda7acddf8080bb2d022a8d4b8b2345eb80c63ec before a04dcc784959e4702048785d87e0d029bd2fbdcb; eda7acddf8080bb2d022a8d4b8b2345eb80c63ec before 6bab907292155513af397a12ccb488acbfc30d79; eda7acddf8080bb2d022a8d4b8b2345eb80c63ec before b6ee361524641f57b2e2363f7737f20e17f67827; +1 more |
| CVE-2026-80586 | 9.8 | Aug 26 | mptcp: options: reset DSS fields in case of unexpected size Affected: 648ef4b88673dadb8463bf0d4b10fbf33d55def8 before 15e35fdad7a5576bf3f1c8d688877aeb5d1b506b; 648ef4b88673dadb8463bf0d4b10fbf33d55def8 before b1256090816ec46011601e084be580731df58fc7; 648ef4b88673dadb8463bf0d4b10fbf33d55def8 before 192878df582c51d440bf7b91a15f297f29f2b596; 648ef4b88673dadb8463bf0d4b10fbf33d55def8 before 26dac5c9ffb20812b475fdf253eb04fab99cff3b; 648ef4b88673dadb8463bf0d4b10fbf33d55def8 before 4e80eff5c1c893aca2ac1d202f0b256d2e52ecde; 648ef4b88673dadb8463bf0d4b10fbf33d55def8 before 1fade1b2ac5b1a4948e538fae7313bea57b5ac36; +3 more |
| CVE-2026-80561 | 9.8 | Aug 26 | libceph: fix multiple unsafe decodes in decode_locker() Affected: d4ed4a530562881cc5225050e42d96034f405aae before 1ed45c8d96498725eb54f740172f9068d8673906; d4ed4a530562881cc5225050e42d96034f405aae before 6265103e78f0ee7e2518de9cf938b94bee9700a0; d4ed4a530562881cc5225050e42d96034f405aae before 3c3716dc06a34e4ca7f743f5fcfa07fbc5a11070; d4ed4a530562881cc5225050e42d96034f405aae before fa4aa86fff0c56799c2e3f51a88879053285f4a9; d4ed4a530562881cc5225050e42d96034f405aae before dbfd83f722a78446ec18a476ef7a38e52240b50a; d4ed4a530562881cc5225050e42d96034f405aae before d1bba38574d095f191557d397d9633f08cd966b1; +3 more |
| CVE-2026-80558 | 9.8 | Aug 26 | libceph: Avoid using invalid osd indices from primary_temp Affected: 5e8d4d36bf23bb7baf027c479d54395840219928 before 505fc50b8ff8e687b7e3ef6866269dea27366224; 5e8d4d36bf23bb7baf027c479d54395840219928 before 1c705fe8e59c6b16f48964973fb23c8ec4735b73; 5e8d4d36bf23bb7baf027c479d54395840219928 before dfe1877d351b99eb1b1a62a3fc2d174220e88e20; 5e8d4d36bf23bb7baf027c479d54395840219928 before e2ffeec85201b2bb748e99e12539ee1b92f62796; 5e8d4d36bf23bb7baf027c479d54395840219928 before 6799d4a916ffcb3d450d8440f9fe0f0862f768d6; 5e8d4d36bf23bb7baf027c479d54395840219928 before 4f392fec075562dc93bb0c69f37423ca2af9b48f; +3 more |
| CVE-2026-80557 | 9.8 | Aug 26 | libceph: fix OOB read in decode_watchers() via missing bounds check Affected: a4ed38d7a180f184a6e7aedd09db9ca4b1e6a71c before 85479b7d65b4ebcb07fbbe57230976793974ab4a; a4ed38d7a180f184a6e7aedd09db9ca4b1e6a71c before 1c824e7c75bb4adf19553dd4ea944a5d83096be8; a4ed38d7a180f184a6e7aedd09db9ca4b1e6a71c before f161be39201eb5f9b1f58fb8f90b8a9cd3931eb6; a4ed38d7a180f184a6e7aedd09db9ca4b1e6a71c before eab3eeb68bfc639d74f27256f05546af5c4f787d; a4ed38d7a180f184a6e7aedd09db9ca4b1e6a71c before c59219a6b62d74936963983e5815524c3de8dd79; a4ed38d7a180f184a6e7aedd09db9ca4b1e6a71c before cb8246e5846dbbe34930903a90c7a90dd8e5910b; +3 more |
| CVE-2026-80528 | 9.8 | Aug 26 | ceph: avoid fs reclaim while using current->journal_info Affected: 315f24088048a51eed341c53be66ea477a3c7d16 before ca5fa2380dd90a0adb01580fa6225025351a90f6; 315f24088048a51eed341c53be66ea477a3c7d16 before 00c12f57a87f537fa8779258fb3a03003a99963e; 315f24088048a51eed341c53be66ea477a3c7d16 before 4dbb2c02558e71f93510a6461d7e798b67426b49; 315f24088048a51eed341c53be66ea477a3c7d16 before c8a21660c3b90864c391164eea5622e7b5b2897c; 315f24088048a51eed341c53be66ea477a3c7d16 before 47b745747b3aa39064724a642884f9df924ddf20; 315f24088048a51eed341c53be66ea477a3c7d16 before 79d95b43ca090426399651ed580dd9bf2db36ab8; +3 more |
| CVE-2026-80519 | 9.8 | Aug 26 | ovpn: finish crypto callback cleanup before peer release Affected: 8534731dbf2d52a539b94defd06d2a8d3514aacb before a3a676495c6419e0cca04d6a67227604e92a3d5a; 8534731dbf2d52a539b94defd06d2a8d3514aacb before 4b0de8be288f5fbec5d8ee64ed4e8b14bf19b517; 8534731dbf2d52a539b94defd06d2a8d3514aacb before 9e163917a86c6adfbe150e13f4c73653a54616de; 6.16 |
| CVE-2026-74752 | 9.8 | Aug 26 | sctp: validate cookie AUTH state before use Affected: 1f485649f52929d9937b346a920a522a7363e202 before 4a4410de8dc6903d859c9e1731fc6dcee28bd072; 1f485649f52929d9937b346a920a522a7363e202 before 7f17984cfa697613800eb693e183b06884129bd3; 1f485649f52929d9937b346a920a522a7363e202 before 88619b117be1daf633ce32210570ce35a0bd1c98; 1f485649f52929d9937b346a920a522a7363e202 before 3dbb44d88b1e94dd31fe43588af7437b34b44d56; 2.6.24 |
| CVE-2026-74746 | 9.8 | Aug 26 | netfilter: flowtable: publish GC-visible tuple last Affected: ac2a66665e231847cab11b8c8e844ce43207dd2e before 0a00254585827f1695aa2700114af622ea754cfa; ac2a66665e231847cab11b8c8e844ce43207dd2e before be345dcbddb4643a54252b954af974b16eda8f91; ac2a66665e231847cab11b8c8e844ce43207dd2e before 211ee5d998d92a7d548811939c65942d06c146e4; ac2a66665e231847cab11b8c8e844ce43207dd2e before d37917e7bebe078f3c17e47fd6fc1c9f6e8497b2; ac2a66665e231847cab11b8c8e844ce43207dd2e before 972fdf7c4f5c282a239c88fea614b056c33dc025; ac2a66665e231847cab11b8c8e844ce43207dd2e before d9d3050a70efe217e73a0751e55fdae6a7092620; +3 more |
| CVE-2026-74744 | 9.8 | Aug 26 | ipvlan: inherit needed_headroom and needed_tailroom from phy_dev Affected: 2ad7bf3638411cb547f2823df08166c13ab04269 before af602c4d0ee548da18e2409b4b4da1079625a372; 2ad7bf3638411cb547f2823df08166c13ab04269 before f3c17ff65f54781cde696e16a6c577615ed735aa; 2ad7bf3638411cb547f2823df08166c13ab04269 before c0fbe31f6b20ade0465130685859faa5c86fda59; 2ad7bf3638411cb547f2823df08166c13ab04269 before 5f33188457bbcc1b11ca87084037963c516ed3d9; 2ad7bf3638411cb547f2823df08166c13ab04269 before 5c2ca77212eb38559b0353b8363b7a84f4b019dd; 2ad7bf3638411cb547f2823df08166c13ab04269 before e16e960d55a40d36bd7c2494cc005e757dc9a1ef; +1 more |
| CVE-2026-74743 | 9.8 | Aug 26 | macvlan: inherit needed_headroom and needed_tailroom from lowerdev Affected: b863ceb7ddcea8c55fcf1d7b2ac591d50aa7ed53 before c2ef3f134b069c54b9cc95cce1a16c38c4939336; b863ceb7ddcea8c55fcf1d7b2ac591d50aa7ed53 before 7b0eb3e0f363ca79a3af9efd2e87c6258f11da2b; b863ceb7ddcea8c55fcf1d7b2ac591d50aa7ed53 before 8cd90e850e434577bf6774778657d26d6995e53f; b863ceb7ddcea8c55fcf1d7b2ac591d50aa7ed53 before 28afc87bd8da0b3348bbbd834c8a89e83712cf5e; b863ceb7ddcea8c55fcf1d7b2ac591d50aa7ed53 before 8f6a05dbac05725e0786701eb04778c5bdbe4eaa; b863ceb7ddcea8c55fcf1d7b2ac591d50aa7ed53 before 96fa90b74385b7f2b0d97251dd43d5ee6ca44668; +3 more |
| CVE-2026-74737 | 9.8 | Aug 26 | net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG Affected: 93a76530316a3d8cc2d82c3deca48424fee92100 before 14fc40bf28390e0ebee6a072457c36b82c614100; 93a76530316a3d8cc2d82c3deca48424fee92100 before 1c0e35ce761131f82062222779d8574849790892; 93a76530316a3d8cc2d82c3deca48424fee92100 before 9a220225efd6f58350bbb53fe70bdec08519267f; 93a76530316a3d8cc2d82c3deca48424fee92100 before 551688b410d3fb0dae7739724422f268cd9446d6; 93a76530316a3d8cc2d82c3deca48424fee92100 before 46a8e084a159e638ac2728e96980b65d752d65fd; 93a76530316a3d8cc2d82c3deca48424fee92100 before 72e4e3d7efc3b7d85f86abbe8b94f8e45074abe3; +3 more |
| CVE-2026-74730 | 9.8 | Aug 22 | NFS: Pin the 'struct nfs_server' during a FREE_STATEID call Affected: 7c1d5fae4a87d3cf3e9ffd68bcdbaf6529013009 before ed2f92ce2fc48463c41e0e540b9a3454889e8af8; 7c1d5fae4a87d3cf3e9ffd68bcdbaf6529013009 before d858ab09e787106432d4d9830bad9dfedf02f890; 7c1d5fae4a87d3cf3e9ffd68bcdbaf6529013009 before af62f1af182d33a0de38308c012841885d8ab92e; 7c1d5fae4a87d3cf3e9ffd68bcdbaf6529013009 before caee6a68ffaa5016dfc01cd0b3dc1896a32e3abd; 7c1d5fae4a87d3cf3e9ffd68bcdbaf6529013009 before ed1161ab6239761958b38d5667225634fc2be894; 7c1d5fae4a87d3cf3e9ffd68bcdbaf6529013009 before d71dfffa512e71b166a889484e4c3b148a9a3af2; +3 more |
| CVE-2026-74727 | 9.8 | Aug 22 | ovpn: skip rehash for peers already removed from by_id Affected: 1d36a36f6d5347360ef9681a05f6166683bafd1d before d20c181088984b6eaa8d7fe7cb5ab3510988df59; 1d36a36f6d5347360ef9681a05f6166683bafd1d before 66745480298775f188b2f5ad266643e85a90f73b; 1d36a36f6d5347360ef9681a05f6166683bafd1d before 33ec10567fe14456063daf549fdf1a4f53448e4c; 6.16 |
| CVE-2026-74723 | 9.8 | Aug 22 | btrfs: lzo: reject inline extents without valid headers Affected: a6fa6fae40ec336c7df6155255ae64ebef43a8bc before 5d00c9c1c951ae82d498eabbdfff973252a05c50; a6fa6fae40ec336c7df6155255ae64ebef43a8bc before fd150d7c8e0ad9d721c011cfd4cc0f3c65bd6834; a6fa6fae40ec336c7df6155255ae64ebef43a8bc before 056876c9db1e969bfcf7d8583c7696cc0dd080df; a6fa6fae40ec336c7df6155255ae64ebef43a8bc before fc50b475ad27f50b4dcc98fc4c44e8802bc1b248; a6fa6fae40ec336c7df6155255ae64ebef43a8bc before 0fa78ef637deb5dbe341582f88553a4bce496de0; 2.6.38 |
| CVE-2026-74688 | 9.8 | Aug 22 | sctp: clear control chunk transport if it is being removed Affected: 8a07eb0a50aebc8c95478d49c28c7f8419a26cef before dbb3f418a8665ffb0514e1a9520ab6a1c5d4d886; 8a07eb0a50aebc8c95478d49c28c7f8419a26cef before fad4766a74220fe579c6fcaa10ba01c23529814f; 8a07eb0a50aebc8c95478d49c28c7f8419a26cef before 936658ec41c28c397ef390140e02d4c91ade92f0; 8a07eb0a50aebc8c95478d49c28c7f8419a26cef before 8de65194a04d2552cd39b6c67d942d490f22d174; 8a07eb0a50aebc8c95478d49c28c7f8419a26cef before 6160e756db81d6cb63e3e2952efcf6c5134be385; 8a07eb0a50aebc8c95478d49c28c7f8419a26cef before 18d704bdd809377dfd81a3c2f42426763b5da227; +3 more |
| CVE-2026-74669 | 9.8 | Aug 22 | ipvs: clear IPv4 options after rebasing tunnel ICMP errors Affected: f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before 79ffa99202c944467e28b13b513bf2998732edff; f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before c9413b50204738fbc429bb86bf01353c393a6c28; f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before 37c61b3745129cbd682c557b51345828120972e5; f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before ed246dd85ebf27c1f6b7897834d40786c0ca3006; f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before 6f46fc460e9316062bdcdf89199eb5d7a33da33b; f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before 75eec935444db4af2123e0491936f6e273d7ea00; +3 more |
| CVE-2026-74662 | 9.8 | Aug 22 | inet: frags: publish queues before arming timer Affected: 648700f76b03b7e8149d13cc2bdb3355035258a9 before f4e4dab62181b7fe7c011bed6fbef9fc3d48c769; 648700f76b03b7e8149d13cc2bdb3355035258a9 before 4ed0681dc2c1e0538b79d2fc56190ffcb369dacd; 648700f76b03b7e8149d13cc2bdb3355035258a9 before 08a04d7bfb9c103432561aff8a62b6872e694a6a; 648700f76b03b7e8149d13cc2bdb3355035258a9 before d3ffb89b2944672cf7bdd8e9ee577d2043b4a956; 648700f76b03b7e8149d13cc2bdb3355035258a9 before 39c6c4b267b65f00e0b0335a2ae00cbe9e3174f0; 648700f76b03b7e8149d13cc2bdb3355035258a9 before 9f904dd3e455750e5d4ec9b2f134835811b85a2f; +5 more |
| CVE-2026-74628 | 9.8 | Aug 22 | net/x25: fix use-after-free of the socket by its timers Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before ba925a2e98ce967a0e71c5bcbcf5dbd3facaf0c8; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6b79659590f0f82a9b8efd2ffd55ec6399ebfc33; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before fdd9ac50b9b61ef2b2d52c5156aff788be91454d; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 1fc9f6d2c7c9fdb341bfe8ca449c990632299ea6; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 3c4919be5d910db4beebca420953858606fba7d8; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 4bc522b33438fefc3272840ae5988771863a4f1f; +3 more |
| CVE-2026-74617 | 9.8 | Aug 22 | dibs: initialise dibs->lock in dibs_dev_alloc() Affected: cc21191b584c6f7836b0f10774f8278b7cbfba10 before fe79571f40434b257d68cbfb7b3ae93a794d8a11; cc21191b584c6f7836b0f10774f8278b7cbfba10 before 2926031acba100d0c18fcfaa7a2ed29609318848; cc21191b584c6f7836b0f10774f8278b7cbfba10 before c27e360545373b7aee9862a5beef3b9fb3df0c25; 6.18 |
| CVE-2026-74616 | 9.8 | Aug 22 | xdp: reject clones that overrun skb_shared_info tailroom Affected: e624d4ed4aa8cc3c69d1359b0aaea539203ed266 before 58408982fa39f9758124cec169f42854d6f98f35; e624d4ed4aa8cc3c69d1359b0aaea539203ed266 before 685edea27ac68d08fe4dbd3de74b858d2ad8e830; e624d4ed4aa8cc3c69d1359b0aaea539203ed266 before ba13763d667e008e185fedf592d53846a5b457d1; e624d4ed4aa8cc3c69d1359b0aaea539203ed266 before ef4b7c7046d29a67090de15af0da0d1ae8d1b192; e624d4ed4aa8cc3c69d1359b0aaea539203ed266 before fab820f1691a9e26d9031f18aae1e9ce09078f92; e624d4ed4aa8cc3c69d1359b0aaea539203ed266 before f463b6f4957c9c3fd1c75f8d3e5af4879fa609c0; +2 more |
| CVE-2026-74611 | 9.8 | Aug 22 | tls: rx: restore msg_iter before TLS 1.3 optimistic retry Affected: ce61327ce989b63c0bd1cc7afee00e218ee696ac before c71bacacd59166adbea423a04e7474b0e8245b84; ce61327ce989b63c0bd1cc7afee00e218ee696ac before 3c4e21b1bf8e666a1c141e0f5813ece929570deb; ce61327ce989b63c0bd1cc7afee00e218ee696ac before 68787940274ec89f41dc91b1a68ee1a16a90735f; ce61327ce989b63c0bd1cc7afee00e218ee696ac before 3c837266a734e2a22b24d2d567404a501d405835; ce61327ce989b63c0bd1cc7afee00e218ee696ac before 1c8629651cb54f7b51db8fc0b1a9944e4a4b0f5e; 6.0 |
| CVE-2026-74608 | 9.8 | Aug 22 | smb: client: Fix use-after-free in cifs_try_adding_channels() Affected: cbc53148cc0946b72d62a3c53870cb22ce4ec284 before 64d7584e62ac8cdc750455c5fdc6008fc2de4f06; cff97d683a083b862a8bb24309e0f4d2d928128a before c292d4686f717c03e5022fc4ae7c782f39a94915; 6aac002bcfd554aff6d3ebb55e1660d078d70ab0 before 47dfac48bce7198ad4f1a388fc8c9491f878ac3b; 6aac002bcfd554aff6d3ebb55e1660d078d70ab0 before 1ffacbadc14530e55b8d86f7b917524f6a0fb891; 6aac002bcfd554aff6d3ebb55e1660d078d70ab0 before 1305eadc6a7d78a8d0a52eee29ddd2d9e8a27805; 6aac002bcfd554aff6d3ebb55e1660d078d70ab0 before 4986410316b1ae0e63c6ce418e4eb196723626e7; +5 more |
| CVE-2026-74597 | 9.8 | Aug 22 | ip6_tunnel: clear skb2->cb[] in ip6ip6_err() Affected: e490d1d85cf5e191791979e5f260d32eb4f703a8 before 44fe898df302e91c5ee5acbc71ffa74e78e6c183; e490d1d85cf5e191791979e5f260d32eb4f703a8 before 0dadb0620ab65949a8bc2439dd28ea3c942fe87d; e490d1d85cf5e191791979e5f260d32eb4f703a8 before b6816536a2990c0db44a26130a03e40b441e829b; e490d1d85cf5e191791979e5f260d32eb4f703a8 before 64e41736a26f37ab6215bc2e6df125df05aceb08; e490d1d85cf5e191791979e5f260d32eb4f703a8 before 484134e1eb07d700a73b1e4bbf3fb503e299be60; e490d1d85cf5e191791979e5f260d32eb4f703a8 before 4eb15c465337b18f44716c499cd6ad63eee0ad54; +3 more |
| CVE-2026-74591 | 9.8 | Aug 22 | mm/filemap: __filemap_add_folio() restore index before retrying Affected: 200a89c159a7a416115e6e309183c82183bf98aa before 4917e3ebcab50f0265e8ca01c8567de4c4a47511; 200a89c159a7a416115e6e309183c82183bf98aa before 267ecd2eb7759c26f1a026eb0a5b231071534c9c; 200a89c159a7a416115e6e309183c82183bf98aa before 86da3f7e1e609e1e8bfbab198af68467c5a015a5; 6.15 |
The 500 most important CVEs for this product (exploited first, then by severity)