LI
Product
Linux
On CISA KEVExploited in the wild
12,374
CVEs
12
On KEV
10.0
Max CVSS
1052
New 30D
Severity mix
Critical 489High 9Medium 2Low 0
Watch
Add Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-80926 | 9.8 | Sep 11 | ksmbd: fix use-after-free in oplock break notification Affected: 945a86b21b40fb17183f5b27461baa6f03e2467f before 892f643b141aee3f7aa7c0fc61ddcb55c59f1996; 1ff58dcfcab434ebb51649da33774fbb8e1f7b67 before 5de0527f782430b1109a447646e32033ad018a6a; e735dbd489e3ea02be78dba991056fe1138be51e before c8279ae8df68cce9cd3b785e85f7a86c80a46e78; b003086d76968298f22e7cf62239833b5a3a06b1 before 8cc98db4fc590e6c7d9db6529320982ee16c5d1d; b003086d76968298f22e7cf62239833b5a3a06b1 before 0e753899627b5e28a9fea8bca98262a6f65a2452; 75e33deda658c1ab3a9336cbdb1436536f9b3660; +5 more |
| CVE-2026-80725 | 9.8 | Aug 29 | net: gro: properly validate BIG TCP aggregation criteria Affected: 0fe79f28bfaf73b66b7b1562d2468f94aa03bd12 before 37a5dcd6837fc2afc44a7bc3ed8af4e983783d46; 0fe79f28bfaf73b66b7b1562d2468f94aa03bd12 before e907bf694ed55bdfe421be99dba35751a655df25; 0fe79f28bfaf73b66b7b1562d2468f94aa03bd12 before 03cb8cc2961f5f781d12e903782cb3815ed84b1c; 0fe79f28bfaf73b66b7b1562d2468f94aa03bd12 before 3ce832e2bd431d0c12ba525ed73ad8fbc4191da5; 0fe79f28bfaf73b66b7b1562d2468f94aa03bd12 before 81be30c1f5f2bffda1f04c0efd0746af10b9643a; 5.19 |
| CVE-2026-80714 | 9.8 | Aug 28 | ipvs: do not propagate one-packet flag to synced conns Affected: 26ec037f9841e49cc5c615deb8e1e73e5beab2ca before 06d1d9b56ef8132fbf85006885eb43d9510b8b02; 26ec037f9841e49cc5c615deb8e1e73e5beab2ca before acbdc276091b308ca7794acb86e761f8203e2f59; 26ec037f9841e49cc5c615deb8e1e73e5beab2ca before 300348e3ba1521b003d59825f97e24f9a6859688; 26ec037f9841e49cc5c615deb8e1e73e5beab2ca before 44af98cc7d5ef8e730488d5df1eecd5deeaa5947; 26ec037f9841e49cc5c615deb8e1e73e5beab2ca before 4649e6faeecdc2d44bfa6ccbe405eef27e55d816; 26ec037f9841e49cc5c615deb8e1e73e5beab2ca before b5ee5b266f833601ac4817f6df0bc496fc376a28; +3 more |
| CVE-2026-80694 | 9.8 | Aug 28 | net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller Affected: 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 before a9133c4d335e48ba92f4daed10c506378924f976; 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 before 3bd58ac9ca0c552651f533c1bd280dd19ae7d4e8; 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 before 276f1f180f55d56cf5992a581e20ed2b3dfa6ced; 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 before 7eb46318d53940dab63dea7130e720b67a656104; 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 before e095f249e2209674f6366f6db0383a2b96e19239; 4.8 |
| CVE-2026-80681 | 9.8 | Aug 28 | vxlan: re-fetch eth header after route_shortcircuit() Affected: ae8840825605f36f98f247323edc150e761cb64e before 6375093eb45cd7d89f1945f939eeae3b29d79f56; ae8840825605f36f98f247323edc150e761cb64e before 1b7f7b653e3557690047c62f03b80a24ea5a58a5; ae8840825605f36f98f247323edc150e761cb64e before bf045341dfb3e767f0ff94cf240ce3c371973bd4; ae8840825605f36f98f247323edc150e761cb64e before 2355c8c26d2aa1b4385b369e67202e47d460d555; ae8840825605f36f98f247323edc150e761cb64e before 1511631b7cfc4152b10a0a9d04c7a0bf2ddf4585; ae8840825605f36f98f247323edc150e761cb64e before 1235e017aa11cf01e91b613c4c5ed6aa28934fff; +3 more |
| CVE-2026-80674 | 9.8 | Aug 28 | ntfs: validate resident attribute lists and harden the validator Affected: 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before 55e97648f7753c6097cb682d24d1abcfe878e812; 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before 7d19e1ffee084c4f7d321a360c14ba43404f7cc8; 7.1 |
| CVE-2026-80673 | 9.8 | Aug 28 | ntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find() Affected: 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before 44885c9b45eb4082fb7f558590d84bb254a08e94; 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before 344b18f389f9934d59c7b0cf3d20541ea2e0da58; 7.1 |
| CVE-2026-80668 | 9.8 | Aug 28 | netfilter: nf_conntrack_expect: use conntrack GC to reap expectations Affected: 5e1c1d22268ae710c238342c8030c21daf298168 before 3d7b808ec35291ee75dcdb2b6fe5f587bfe9b1df; d52fa1fa7440676b8c238037a050ab008c22737f before 02f7809a19fc88cfd9bc113a4bfe7add6305db39; bffcaad9afdfe45d7fc777397d3b83c1e3ebffe5 before 7ec786f4230c2a9b2eaf97a2d45368933b49d2b2; bffcaad9afdfe45d7fc777397d3b83c1e3ebffe5 before b8b09dc2bf35a00d4e0556b5d6308c7b917ebda2; 9e1196d27ef496f404c76f7a9d03761142d991c4; f338ced0473849c9f6ed0b77ca99f1aab5826787; +7 more |
| CVE-2026-80634 | 9.8 | Aug 28 | netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag Affected: e990cef6516daa4e1e236433579e333f74fd38cb before 1b52aeb40c9f04bf50eeb4ea09142139d163e239; e990cef6516daa4e1e236433579e333f74fd38cb before ee8440bb000fff4ef8acbfc99652851e9ca0a35b; e990cef6516daa4e1e236433579e333f74fd38cb before 547ea9f567498e4accc89e7816264f15a1a0629f; e990cef6516daa4e1e236433579e333f74fd38cb before 2f55fa28011c97d6495d5787808db10a8c2d690d; e990cef6516daa4e1e236433579e333f74fd38cb before e052f920773b73be49eb4d8702a9f85de7464363; 5.13 |
| CVE-2026-80630 | 9.8 | Aug 28 | net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Affected: cc71a757da78dd4aa1b4a9b19cb011833730ccf2 before 3e515188393e62a718ccebee651ee74514104ff6; eda741fe155ddf5ecd2dd3bfbd4fc3c0c7dbb450 before 20dd591d8f951e1e6aca5052be8785e6181055e2; 829c49b6b2ff45b043739168fd1245e4e1a91a30 before 94a5f1efdefb01f82cd228bf4e7ef1e8fc075c80; 2f9761a94bae33d26e6a81b31b36e7d776d93dc1 before acc08a0c7f37ebb1901144e03a7cba7d4afd9203; 4d55144b12e742404bb3f8fee6038bafbf45619d before 7c09843fd2b44d9bf0de798683861d1aecd62a08; 342debc12183b51773b3345ba267e9263bdfaaef before 0500af8630c3253f0dde879bd3a73a06bb2f2b3f; +14 more |
| CVE-2026-80617 | 9.8 | Aug 28 | net: airoha: fix foe_check_time allocation size Affected: 56b99327a451917f1c17f85fc33ea8293c08a9ee before 112b5eff24e044561ee9599a0d34e0fcea1df4e0; 6d5b601d52a27aafff555b480e538507901c672c before 9f7cd1e26d2f1766438edc9b9254f2c618f9ae98; 6d5b601d52a27aafff555b480e538507901c672c before 5c121ee635680c93d7074becf14cfbaac140f80d; 6.18.33 before 6.18.40; 6.19 |
| CVE-2026-80612 | 9.8 | Aug 28 | net: lwtunnel: Drop skb metadata before LWT encapsulation Affected: 8989d328dfe7c7a3b9f4b9f0ef60006d277f81cc before 19eec11f3ab5dd29ba58f5f209c24e946c95ef12; 8989d328dfe7c7a3b9f4b9f0ef60006d277f81cc before c00320b0e355c4bf0ae4743a53b4180fea237546; 6.19 |
| CVE-2026-80609 | 9.8 | Aug 28 | qede: fix out-of-bounds check for cqe->len_list[] Affected: ecbb12caf399d7cf364b7553ed5aebeaa2f255bc before 6d203bdd227fca1787f8a80cf84b990936633c5a; a778912b4a53587ea07d85526d152f85d109cbfe before bd3a6a083b408e96437dbd86ff543ba9ec3a788b; f0923011c1261b33a2ac1de349256d39cb750dd0 before e30af53dca803893a29eb3bbe0539752ba435410; 917a9d02182ac8b4f25eb47dc02f3ec679608c24 before 1aacefd074b5dcc99b8dbcd73e1c963ed5010110; 896f1a2493b59beb2b5ccdf990503dbb16cb2256 before b17751a2ebc4aef3ce6be6f71ee8df92bf5ddfcd; 896f1a2493b59beb2b5ccdf990503dbb16cb2256 before 6d46ab395803f162cdc50e8d346e5f1a4e766771; +8 more |
| CVE-2026-80600 | 9.8 | Aug 28 | batman-adv: dat: acquire ARP hw source only after skb realloc Affected: b61ec31c85756bbc898fb892555509afe709459a before a82fc217cb7a447313c76ebf9f09b100771b0ddf; b61ec31c85756bbc898fb892555509afe709459a before 86aa79b43e5b561fd3648891165bd7313b541315; b61ec31c85756bbc898fb892555509afe709459a before d755cd001fa2c248e186c1fc3df3d11d97dc843c; b61ec31c85756bbc898fb892555509afe709459a before 3404be97b940a9b1ae1aea5fdbc6cdbbe9cd5146; b61ec31c85756bbc898fb892555509afe709459a before 01678c53a7717a748aee388b6839e7b9761d641c; b61ec31c85756bbc898fb892555509afe709459a before 3b4c70c40f2e135a50cd38fc61c7d23a296a9981; +3 more |
| CVE-2026-80589 | 9.8 | Aug 26 | block: stop the timeout timer when releasing a never added disk Affected: 6f8191fdf41d3a53cc1d63fe2234e812c55a0092 before 6ae7364f68e6c7af6b6df4bbb14040b89e5975d0; 6f8191fdf41d3a53cc1d63fe2234e812c55a0092 before 6f06dbe5012c160e0dba418a5a9cb16c456ad46a; 6f8191fdf41d3a53cc1d63fe2234e812c55a0092 before 1a0ae4d502062a2759f2a92d12bdeab3c64c7372; 6f8191fdf41d3a53cc1d63fe2234e812c55a0092 before bb03b56d1d754908a37a160603be21769da423cf; 6f8191fdf41d3a53cc1d63fe2234e812c55a0092 before 93d620519d71dfc6ee64b5baea74f1d85d4439fb; 6f8191fdf41d3a53cc1d63fe2234e812c55a0092 before 26cb8ebbfaf713c82e142d08828d4d765057633b; +3 more |
| CVE-2026-80587 | 9.8 | Aug 26 | mptcp: avoid combining some incoming suboptions Affected: eda7acddf8080bb2d022a8d4b8b2345eb80c63ec before 0e2210af439755a2af352eea4178261dcf61742e; eda7acddf8080bb2d022a8d4b8b2345eb80c63ec before dc1d8d3eb345c616fbe922a010fa391c72c54d52; eda7acddf8080bb2d022a8d4b8b2345eb80c63ec before 099bfcbd0c16ae9b50aba2a1bea033e63f895da7; eda7acddf8080bb2d022a8d4b8b2345eb80c63ec before a04dcc784959e4702048785d87e0d029bd2fbdcb; eda7acddf8080bb2d022a8d4b8b2345eb80c63ec before 6bab907292155513af397a12ccb488acbfc30d79; eda7acddf8080bb2d022a8d4b8b2345eb80c63ec before b6ee361524641f57b2e2363f7737f20e17f67827; +1 more |
| CVE-2026-80586 | 9.8 | Aug 26 | mptcp: options: reset DSS fields in case of unexpected size Affected: 648ef4b88673dadb8463bf0d4b10fbf33d55def8 before 15e35fdad7a5576bf3f1c8d688877aeb5d1b506b; 648ef4b88673dadb8463bf0d4b10fbf33d55def8 before b1256090816ec46011601e084be580731df58fc7; 648ef4b88673dadb8463bf0d4b10fbf33d55def8 before 192878df582c51d440bf7b91a15f297f29f2b596; 648ef4b88673dadb8463bf0d4b10fbf33d55def8 before 26dac5c9ffb20812b475fdf253eb04fab99cff3b; 648ef4b88673dadb8463bf0d4b10fbf33d55def8 before 4e80eff5c1c893aca2ac1d202f0b256d2e52ecde; 648ef4b88673dadb8463bf0d4b10fbf33d55def8 before 1fade1b2ac5b1a4948e538fae7313bea57b5ac36; +3 more |
| CVE-2026-80561 | 9.8 | Aug 26 | libceph: fix multiple unsafe decodes in decode_locker() Affected: d4ed4a530562881cc5225050e42d96034f405aae before 1ed45c8d96498725eb54f740172f9068d8673906; d4ed4a530562881cc5225050e42d96034f405aae before 6265103e78f0ee7e2518de9cf938b94bee9700a0; d4ed4a530562881cc5225050e42d96034f405aae before 3c3716dc06a34e4ca7f743f5fcfa07fbc5a11070; d4ed4a530562881cc5225050e42d96034f405aae before fa4aa86fff0c56799c2e3f51a88879053285f4a9; d4ed4a530562881cc5225050e42d96034f405aae before dbfd83f722a78446ec18a476ef7a38e52240b50a; d4ed4a530562881cc5225050e42d96034f405aae before d1bba38574d095f191557d397d9633f08cd966b1; +3 more |
| CVE-2026-80558 | 9.8 | Aug 26 | libceph: Avoid using invalid osd indices from primary_temp Affected: 5e8d4d36bf23bb7baf027c479d54395840219928 before 505fc50b8ff8e687b7e3ef6866269dea27366224; 5e8d4d36bf23bb7baf027c479d54395840219928 before 1c705fe8e59c6b16f48964973fb23c8ec4735b73; 5e8d4d36bf23bb7baf027c479d54395840219928 before dfe1877d351b99eb1b1a62a3fc2d174220e88e20; 5e8d4d36bf23bb7baf027c479d54395840219928 before e2ffeec85201b2bb748e99e12539ee1b92f62796; 5e8d4d36bf23bb7baf027c479d54395840219928 before 6799d4a916ffcb3d450d8440f9fe0f0862f768d6; 5e8d4d36bf23bb7baf027c479d54395840219928 before 4f392fec075562dc93bb0c69f37423ca2af9b48f; +3 more |
| CVE-2026-80557 | 9.8 | Aug 26 | libceph: fix OOB read in decode_watchers() via missing bounds check Affected: a4ed38d7a180f184a6e7aedd09db9ca4b1e6a71c before 85479b7d65b4ebcb07fbbe57230976793974ab4a; a4ed38d7a180f184a6e7aedd09db9ca4b1e6a71c before 1c824e7c75bb4adf19553dd4ea944a5d83096be8; a4ed38d7a180f184a6e7aedd09db9ca4b1e6a71c before f161be39201eb5f9b1f58fb8f90b8a9cd3931eb6; a4ed38d7a180f184a6e7aedd09db9ca4b1e6a71c before eab3eeb68bfc639d74f27256f05546af5c4f787d; a4ed38d7a180f184a6e7aedd09db9ca4b1e6a71c before c59219a6b62d74936963983e5815524c3de8dd79; a4ed38d7a180f184a6e7aedd09db9ca4b1e6a71c before cb8246e5846dbbe34930903a90c7a90dd8e5910b; +3 more |
| CVE-2026-80528 | 9.8 | Aug 26 | ceph: avoid fs reclaim while using current->journal_info Affected: 315f24088048a51eed341c53be66ea477a3c7d16 before ca5fa2380dd90a0adb01580fa6225025351a90f6; 315f24088048a51eed341c53be66ea477a3c7d16 before 00c12f57a87f537fa8779258fb3a03003a99963e; 315f24088048a51eed341c53be66ea477a3c7d16 before 4dbb2c02558e71f93510a6461d7e798b67426b49; 315f24088048a51eed341c53be66ea477a3c7d16 before c8a21660c3b90864c391164eea5622e7b5b2897c; 315f24088048a51eed341c53be66ea477a3c7d16 before 47b745747b3aa39064724a642884f9df924ddf20; 315f24088048a51eed341c53be66ea477a3c7d16 before 79d95b43ca090426399651ed580dd9bf2db36ab8; +3 more |
| CVE-2026-80519 | 9.8 | Aug 26 | ovpn: finish crypto callback cleanup before peer release Affected: 8534731dbf2d52a539b94defd06d2a8d3514aacb before a3a676495c6419e0cca04d6a67227604e92a3d5a; 8534731dbf2d52a539b94defd06d2a8d3514aacb before 4b0de8be288f5fbec5d8ee64ed4e8b14bf19b517; 8534731dbf2d52a539b94defd06d2a8d3514aacb before 9e163917a86c6adfbe150e13f4c73653a54616de; 6.16 |
| CVE-2026-74752 | 9.8 | Aug 26 | sctp: validate cookie AUTH state before use Affected: 1f485649f52929d9937b346a920a522a7363e202 before 4a4410de8dc6903d859c9e1731fc6dcee28bd072; 1f485649f52929d9937b346a920a522a7363e202 before 7f17984cfa697613800eb693e183b06884129bd3; 1f485649f52929d9937b346a920a522a7363e202 before 88619b117be1daf633ce32210570ce35a0bd1c98; 1f485649f52929d9937b346a920a522a7363e202 before 3dbb44d88b1e94dd31fe43588af7437b34b44d56; 2.6.24 |
| CVE-2026-74746 | 9.8 | Aug 26 | netfilter: flowtable: publish GC-visible tuple last Affected: ac2a66665e231847cab11b8c8e844ce43207dd2e before 0a00254585827f1695aa2700114af622ea754cfa; ac2a66665e231847cab11b8c8e844ce43207dd2e before be345dcbddb4643a54252b954af974b16eda8f91; ac2a66665e231847cab11b8c8e844ce43207dd2e before 211ee5d998d92a7d548811939c65942d06c146e4; ac2a66665e231847cab11b8c8e844ce43207dd2e before d37917e7bebe078f3c17e47fd6fc1c9f6e8497b2; ac2a66665e231847cab11b8c8e844ce43207dd2e before 972fdf7c4f5c282a239c88fea614b056c33dc025; ac2a66665e231847cab11b8c8e844ce43207dd2e before d9d3050a70efe217e73a0751e55fdae6a7092620; +3 more |
| CVE-2026-74744 | 9.8 | Aug 26 | ipvlan: inherit needed_headroom and needed_tailroom from phy_dev Affected: 2ad7bf3638411cb547f2823df08166c13ab04269 before af602c4d0ee548da18e2409b4b4da1079625a372; 2ad7bf3638411cb547f2823df08166c13ab04269 before f3c17ff65f54781cde696e16a6c577615ed735aa; 2ad7bf3638411cb547f2823df08166c13ab04269 before c0fbe31f6b20ade0465130685859faa5c86fda59; 2ad7bf3638411cb547f2823df08166c13ab04269 before 5f33188457bbcc1b11ca87084037963c516ed3d9; 2ad7bf3638411cb547f2823df08166c13ab04269 before 5c2ca77212eb38559b0353b8363b7a84f4b019dd; 2ad7bf3638411cb547f2823df08166c13ab04269 before e16e960d55a40d36bd7c2494cc005e757dc9a1ef; +1 more |
| CVE-2026-74743 | 9.8 | Aug 26 | macvlan: inherit needed_headroom and needed_tailroom from lowerdev Affected: b863ceb7ddcea8c55fcf1d7b2ac591d50aa7ed53 before c2ef3f134b069c54b9cc95cce1a16c38c4939336; b863ceb7ddcea8c55fcf1d7b2ac591d50aa7ed53 before 7b0eb3e0f363ca79a3af9efd2e87c6258f11da2b; b863ceb7ddcea8c55fcf1d7b2ac591d50aa7ed53 before 8cd90e850e434577bf6774778657d26d6995e53f; b863ceb7ddcea8c55fcf1d7b2ac591d50aa7ed53 before 28afc87bd8da0b3348bbbd834c8a89e83712cf5e; b863ceb7ddcea8c55fcf1d7b2ac591d50aa7ed53 before 8f6a05dbac05725e0786701eb04778c5bdbe4eaa; b863ceb7ddcea8c55fcf1d7b2ac591d50aa7ed53 before 96fa90b74385b7f2b0d97251dd43d5ee6ca44668; +3 more |
| CVE-2026-74737 | 9.8 | Aug 26 | net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG Affected: 93a76530316a3d8cc2d82c3deca48424fee92100 before 14fc40bf28390e0ebee6a072457c36b82c614100; 93a76530316a3d8cc2d82c3deca48424fee92100 before 1c0e35ce761131f82062222779d8574849790892; 93a76530316a3d8cc2d82c3deca48424fee92100 before 9a220225efd6f58350bbb53fe70bdec08519267f; 93a76530316a3d8cc2d82c3deca48424fee92100 before 551688b410d3fb0dae7739724422f268cd9446d6; 93a76530316a3d8cc2d82c3deca48424fee92100 before 46a8e084a159e638ac2728e96980b65d752d65fd; 93a76530316a3d8cc2d82c3deca48424fee92100 before 72e4e3d7efc3b7d85f86abbe8b94f8e45074abe3; +3 more |
| CVE-2026-74730 | 9.8 | Aug 22 | NFS: Pin the 'struct nfs_server' during a FREE_STATEID call Affected: 7c1d5fae4a87d3cf3e9ffd68bcdbaf6529013009 before ed2f92ce2fc48463c41e0e540b9a3454889e8af8; 7c1d5fae4a87d3cf3e9ffd68bcdbaf6529013009 before d858ab09e787106432d4d9830bad9dfedf02f890; 7c1d5fae4a87d3cf3e9ffd68bcdbaf6529013009 before af62f1af182d33a0de38308c012841885d8ab92e; 7c1d5fae4a87d3cf3e9ffd68bcdbaf6529013009 before caee6a68ffaa5016dfc01cd0b3dc1896a32e3abd; 7c1d5fae4a87d3cf3e9ffd68bcdbaf6529013009 before ed1161ab6239761958b38d5667225634fc2be894; 7c1d5fae4a87d3cf3e9ffd68bcdbaf6529013009 before d71dfffa512e71b166a889484e4c3b148a9a3af2; +3 more |
| CVE-2026-74727 | 9.8 | Aug 22 | ovpn: skip rehash for peers already removed from by_id Affected: 1d36a36f6d5347360ef9681a05f6166683bafd1d before d20c181088984b6eaa8d7fe7cb5ab3510988df59; 1d36a36f6d5347360ef9681a05f6166683bafd1d before 66745480298775f188b2f5ad266643e85a90f73b; 1d36a36f6d5347360ef9681a05f6166683bafd1d before 33ec10567fe14456063daf549fdf1a4f53448e4c; 6.16 |
| CVE-2026-74723 | 9.8 | Aug 22 | btrfs: lzo: reject inline extents without valid headers Affected: a6fa6fae40ec336c7df6155255ae64ebef43a8bc before 5d00c9c1c951ae82d498eabbdfff973252a05c50; a6fa6fae40ec336c7df6155255ae64ebef43a8bc before fd150d7c8e0ad9d721c011cfd4cc0f3c65bd6834; a6fa6fae40ec336c7df6155255ae64ebef43a8bc before 056876c9db1e969bfcf7d8583c7696cc0dd080df; a6fa6fae40ec336c7df6155255ae64ebef43a8bc before fc50b475ad27f50b4dcc98fc4c44e8802bc1b248; a6fa6fae40ec336c7df6155255ae64ebef43a8bc before 0fa78ef637deb5dbe341582f88553a4bce496de0; 2.6.38 |
| CVE-2026-74688 | 9.8 | Aug 22 | sctp: clear control chunk transport if it is being removed Affected: 8a07eb0a50aebc8c95478d49c28c7f8419a26cef before dbb3f418a8665ffb0514e1a9520ab6a1c5d4d886; 8a07eb0a50aebc8c95478d49c28c7f8419a26cef before fad4766a74220fe579c6fcaa10ba01c23529814f; 8a07eb0a50aebc8c95478d49c28c7f8419a26cef before 936658ec41c28c397ef390140e02d4c91ade92f0; 8a07eb0a50aebc8c95478d49c28c7f8419a26cef before 8de65194a04d2552cd39b6c67d942d490f22d174; 8a07eb0a50aebc8c95478d49c28c7f8419a26cef before 6160e756db81d6cb63e3e2952efcf6c5134be385; 8a07eb0a50aebc8c95478d49c28c7f8419a26cef before 18d704bdd809377dfd81a3c2f42426763b5da227; +3 more |
| CVE-2026-74669 | 9.8 | Aug 22 | ipvs: clear IPv4 options after rebasing tunnel ICMP errors Affected: f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before 79ffa99202c944467e28b13b513bf2998732edff; f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before c9413b50204738fbc429bb86bf01353c393a6c28; f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before 37c61b3745129cbd682c557b51345828120972e5; f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before ed246dd85ebf27c1f6b7897834d40786c0ca3006; f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before 6f46fc460e9316062bdcdf89199eb5d7a33da33b; f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before 75eec935444db4af2123e0491936f6e273d7ea00; +3 more |
| CVE-2026-74662 | 9.8 | Aug 22 | inet: frags: publish queues before arming timer Affected: 648700f76b03b7e8149d13cc2bdb3355035258a9 before f4e4dab62181b7fe7c011bed6fbef9fc3d48c769; 648700f76b03b7e8149d13cc2bdb3355035258a9 before 4ed0681dc2c1e0538b79d2fc56190ffcb369dacd; 648700f76b03b7e8149d13cc2bdb3355035258a9 before 08a04d7bfb9c103432561aff8a62b6872e694a6a; 648700f76b03b7e8149d13cc2bdb3355035258a9 before d3ffb89b2944672cf7bdd8e9ee577d2043b4a956; 648700f76b03b7e8149d13cc2bdb3355035258a9 before 39c6c4b267b65f00e0b0335a2ae00cbe9e3174f0; 648700f76b03b7e8149d13cc2bdb3355035258a9 before 9f904dd3e455750e5d4ec9b2f134835811b85a2f; +5 more |
| CVE-2026-74628 | 9.8 | Aug 22 | net/x25: fix use-after-free of the socket by its timers Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before ba925a2e98ce967a0e71c5bcbcf5dbd3facaf0c8; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6b79659590f0f82a9b8efd2ffd55ec6399ebfc33; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before fdd9ac50b9b61ef2b2d52c5156aff788be91454d; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 1fc9f6d2c7c9fdb341bfe8ca449c990632299ea6; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 3c4919be5d910db4beebca420953858606fba7d8; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 4bc522b33438fefc3272840ae5988771863a4f1f; +3 more |
| CVE-2026-74617 | 9.8 | Aug 22 | dibs: initialise dibs->lock in dibs_dev_alloc() Affected: cc21191b584c6f7836b0f10774f8278b7cbfba10 before fe79571f40434b257d68cbfb7b3ae93a794d8a11; cc21191b584c6f7836b0f10774f8278b7cbfba10 before 2926031acba100d0c18fcfaa7a2ed29609318848; cc21191b584c6f7836b0f10774f8278b7cbfba10 before c27e360545373b7aee9862a5beef3b9fb3df0c25; 6.18 |
| CVE-2026-74616 | 9.8 | Aug 22 | xdp: reject clones that overrun skb_shared_info tailroom Affected: e624d4ed4aa8cc3c69d1359b0aaea539203ed266 before 58408982fa39f9758124cec169f42854d6f98f35; e624d4ed4aa8cc3c69d1359b0aaea539203ed266 before 685edea27ac68d08fe4dbd3de74b858d2ad8e830; e624d4ed4aa8cc3c69d1359b0aaea539203ed266 before ba13763d667e008e185fedf592d53846a5b457d1; e624d4ed4aa8cc3c69d1359b0aaea539203ed266 before ef4b7c7046d29a67090de15af0da0d1ae8d1b192; e624d4ed4aa8cc3c69d1359b0aaea539203ed266 before fab820f1691a9e26d9031f18aae1e9ce09078f92; e624d4ed4aa8cc3c69d1359b0aaea539203ed266 before f463b6f4957c9c3fd1c75f8d3e5af4879fa609c0; +2 more |
| CVE-2026-74611 | 9.8 | Aug 22 | tls: rx: restore msg_iter before TLS 1.3 optimistic retry Affected: ce61327ce989b63c0bd1cc7afee00e218ee696ac before c71bacacd59166adbea423a04e7474b0e8245b84; ce61327ce989b63c0bd1cc7afee00e218ee696ac before 3c4e21b1bf8e666a1c141e0f5813ece929570deb; ce61327ce989b63c0bd1cc7afee00e218ee696ac before 68787940274ec89f41dc91b1a68ee1a16a90735f; ce61327ce989b63c0bd1cc7afee00e218ee696ac before 3c837266a734e2a22b24d2d567404a501d405835; ce61327ce989b63c0bd1cc7afee00e218ee696ac before 1c8629651cb54f7b51db8fc0b1a9944e4a4b0f5e; 6.0 |
| CVE-2026-74608 | 9.8 | Aug 22 | smb: client: Fix use-after-free in cifs_try_adding_channels() Affected: cbc53148cc0946b72d62a3c53870cb22ce4ec284 before 64d7584e62ac8cdc750455c5fdc6008fc2de4f06; cff97d683a083b862a8bb24309e0f4d2d928128a before c292d4686f717c03e5022fc4ae7c782f39a94915; 6aac002bcfd554aff6d3ebb55e1660d078d70ab0 before 47dfac48bce7198ad4f1a388fc8c9491f878ac3b; 6aac002bcfd554aff6d3ebb55e1660d078d70ab0 before 1ffacbadc14530e55b8d86f7b917524f6a0fb891; 6aac002bcfd554aff6d3ebb55e1660d078d70ab0 before 1305eadc6a7d78a8d0a52eee29ddd2d9e8a27805; 6aac002bcfd554aff6d3ebb55e1660d078d70ab0 before 4986410316b1ae0e63c6ce418e4eb196723626e7; +5 more |
| CVE-2026-74597 | 9.8 | Aug 22 | ip6_tunnel: clear skb2->cb[] in ip6ip6_err() Affected: e490d1d85cf5e191791979e5f260d32eb4f703a8 before 44fe898df302e91c5ee5acbc71ffa74e78e6c183; e490d1d85cf5e191791979e5f260d32eb4f703a8 before 0dadb0620ab65949a8bc2439dd28ea3c942fe87d; e490d1d85cf5e191791979e5f260d32eb4f703a8 before b6816536a2990c0db44a26130a03e40b441e829b; e490d1d85cf5e191791979e5f260d32eb4f703a8 before 64e41736a26f37ab6215bc2e6df125df05aceb08; e490d1d85cf5e191791979e5f260d32eb4f703a8 before 484134e1eb07d700a73b1e4bbf3fb503e299be60; e490d1d85cf5e191791979e5f260d32eb4f703a8 before 4eb15c465337b18f44716c499cd6ad63eee0ad54; +3 more |
| CVE-2026-74591 | 9.8 | Aug 22 | mm/filemap: __filemap_add_folio() restore index before retrying Affected: 200a89c159a7a416115e6e309183c82183bf98aa before 4917e3ebcab50f0265e8ca01c8567de4c4a47511; 200a89c159a7a416115e6e309183c82183bf98aa before 267ecd2eb7759c26f1a026eb0a5b231071534c9c; 200a89c159a7a416115e6e309183c82183bf98aa before 86da3f7e1e609e1e8bfbab198af68467c5a015a5; 6.15 |
| CVE-2026-74588 | 9.8 | Aug 22 | sctp: keep chunk->transport in step with the list it is queued on Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6575fb17230814b48b471727c8410c0aadff9274; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6b9e2ea2057113f3393990ba646d2d97c719a80d; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 874a7c2b5e184f06134fdfde27e9ce9271bafe58; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 1adf929121e13e0b19200bb9fef715b918d483fe; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before e2e7c1de0e226ca1b7fea2de57a6c9bca408709b; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 2b3b5eec8b2c30ee237e3c31a6a38de9c39d804d; +3 more |
| CVE-2026-74587 | 9.8 | Aug 22 | sctp: fix use-after-free of cached ASCONF chunk Affected: a000c01e60e40e15304ffe48fff051d17a7bea91 before 10459b03e2d9ee12435e96f587de4d4cacdbf435; a000c01e60e40e15304ffe48fff051d17a7bea91 before e1bb114e09372fd6e03387ced9ef566da336ed6c; a000c01e60e40e15304ffe48fff051d17a7bea91 before 179676f0166230c80053a392303485b37c93dd33; a000c01e60e40e15304ffe48fff051d17a7bea91 before dc67d528c2fa939cec7fe3bf7f3089c8d281ca3d; a000c01e60e40e15304ffe48fff051d17a7bea91 before 618b5c6d049896fcfabb91afc072954c92cb2693; a000c01e60e40e15304ffe48fff051d17a7bea91 before 07daf4f9750104960a1d60831b2353c0d41f35fb; +3 more |
| CVE-2026-74586 | 9.8 | Aug 22 | sctp: clear new_transport when removing a peer Affected: 6af29ccc223b0feb6fc6112281c3fa3cdb1afddf before c0f973bb5118dd1b146cda3fcc8af6f6057befec; 6af29ccc223b0feb6fc6112281c3fa3cdb1afddf before 3b539b317cd052236fed0350364ff1268996ba46; 6af29ccc223b0feb6fc6112281c3fa3cdb1afddf before db9d8e3b670f841755bc2018f178472dc6064d27; 6af29ccc223b0feb6fc6112281c3fa3cdb1afddf before 31efa656cf6aface26e88f038c14f22ee6ca1500; 6af29ccc223b0feb6fc6112281c3fa3cdb1afddf before 291accf36febce751021888de5f15090f4875b56; 6af29ccc223b0feb6fc6112281c3fa3cdb1afddf before ca33df36aa0143a1d04f57d2086020c12e7eddb7; +3 more |
| CVE-2026-74581 | 9.8 | Aug 21 | net: ipv6: clear suppressed fib6 rule result Affected: 209d35ee34e25f9668c404350a1c86d914c54ffa before 90c57310e266eb94e4a80d6b15a9ca131d2e82cb; 8ef8a76a340ebdb2c2eea3f6fb0ebbed09a16383 before 5d29b286c9de0b309e94b9ed083aa1a2f429434f; cdef485217d30382f3bf6448c54b4401648fe3f1 before 354db6243eca59e9d187ffbf8b7955b044ce84dc; cdef485217d30382f3bf6448c54b4401648fe3f1 before 6d98c70fe0ba8c7708bfd5b2a5174d2086775daa; cdef485217d30382f3bf6448c54b4401648fe3f1 before 9bad152c42b37499162367fe47867411e62fffa3; cdef485217d30382f3bf6448c54b4401648fe3f1 before dc3ab04220667f254f4348572b2a0b3febff89fb; +7 more |
| CVE-2026-74570 | 9.8 | Aug 15 | ntfs: harden runlist realloc size calculations Affected: 11ccc9107dc460de28af90fac1f42404d9802735 before 57e7b8bf7b02a0140463fea786e5172cbdf2da2f; 11ccc9107dc460de28af90fac1f42404d9802735 before 8bed376124ab4505b70083a2b91f2c7ef6d51e24; 7.1 |
| CVE-2026-74569 | 9.8 | Aug 15 | netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() Affected: f5b321bd37fbec9188feb1f721ab46a5ac0b35da before ed1f9be6dc8e2e280b8725e44ccdc6e0cd38640d; f5b321bd37fbec9188feb1f721ab46a5ac0b35da before 1b0843f9e9b9b0b9b4b70d143b67e58163c85b2c; f5b321bd37fbec9188feb1f721ab46a5ac0b35da before 32d4abc8923b0d4046fd63ad6e4917872e44eb6d; f5b321bd37fbec9188feb1f721ab46a5ac0b35da before 63eea41759fd682229c14e0a2205802b46d106f3; f5b321bd37fbec9188feb1f721ab46a5ac0b35da before c97621a110e386b2dd69e276eb699e1d3cec581d; f5b321bd37fbec9188feb1f721ab46a5ac0b35da before f74554e67ccf04d1fa71069e8c9afa2717e40716; +3 more |
| CVE-2026-74556 | 9.8 | Aug 15 | scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer Affected: a081c13e39b5c17052a7b46fafa61019c4c110ff before a51812842084fd390590ab8dc0431f10c73ddc56; a081c13e39b5c17052a7b46fafa61019c4c110ff before a8f94cc9f0e5759252551be3a172960c57f21f54; a081c13e39b5c17052a7b46fafa61019c4c110ff before f1a3a51fc5dba0e99532379665069f1700da6b44; a081c13e39b5c17052a7b46fafa61019c4c110ff before c97b5265cc47775f77fd2a23d6bde0426997b233; a081c13e39b5c17052a7b46fafa61019c4c110ff before 084af0253673425ce2ae62e3c7f74f0dd023711b; a081c13e39b5c17052a7b46fafa61019c4c110ff before 72815741715bd41556dac5eeb068bf0f8af06ee7; +3 more |
| CVE-2026-74545 | 9.8 | Aug 15 | rtase: fix double free of multi-frag skb on DMA map failure Affected: d6e882b89fdf80be0ab4f914ec10f75215e49495 before 4f09172aff5f73a5e914f4fbc0d00a1c2ea9f7cb; d6e882b89fdf80be0ab4f914ec10f75215e49495 before db986098f30881fafcc752800aa3b13fd289c922; d6e882b89fdf80be0ab4f914ec10f75215e49495 before de691dc3227b061c4d0beba9f0128fe1ff33dd68; d6e882b89fdf80be0ab4f914ec10f75215e49495 before 6fb7b769d6ed6d1d2e02af4a80e57a2477f35086; 6.12 |
| CVE-2026-74495 | 9.8 | Aug 15 | igbvf: Fix leak in TX DMA error cleanup Affected: c1fa347f20f17f14a4a1575727fa24340e8a9117 before e42b7225c45f57b42306b80cdd3bda202bae7293; c1fa347f20f17f14a4a1575727fa24340e8a9117 before e3ed89c257f6361f13df23023cd10ace830330ad; c1fa347f20f17f14a4a1575727fa24340e8a9117 before 56726ff12cb6759ab90d6f5332c2377aeca7d249; c1fa347f20f17f14a4a1575727fa24340e8a9117 before 31089f4eab42e0fc248ec80c26f9b0bad59ba4cc; c1fa347f20f17f14a4a1575727fa24340e8a9117 before bc25d56c03e41c10bc4b40e99ca5d7b941675c04; c1fa347f20f17f14a4a1575727fa24340e8a9117 before 845a9cdd9b03b7b6fa8de3ee80579780350a7f65; +3 more |
| CVE-2026-74493 | 9.8 | Aug 15 | net/smc: fix socket use-after-free during link group termination Affected: 69318b5215f2dc32c345a3d65b98b4b1bf29c007 before ff44f2df57fb5560bdc75eb977867643e764a262; 69318b5215f2dc32c345a3d65b98b4b1bf29c007 before 9fb17c95b8f0683570fca1fb2792264147af937a; 69318b5215f2dc32c345a3d65b98b4b1bf29c007 before bea8dc14de2d56aca749d368563e6888217710a5; 69318b5215f2dc32c345a3d65b98b4b1bf29c007 before 5a42f162b857019a4c10ff687dc3bcdf51831865; 69318b5215f2dc32c345a3d65b98b4b1bf29c007 before 281c103a8eaed59001ce952f231df1b07674215a; 69318b5215f2dc32c345a3d65b98b4b1bf29c007 before f807a63d0d95680c34f677700da9148a07d7c78f; +3 more |
The 500 most important CVEs for this product (exploited first, then by severity)