LI
Product
Linux
On CISA KEVExploited in the wild
9,821
CVEs
11
On KEV
10.0
Max CVSS
1052
New 30D
Severity mix
Critical 490High 8Medium 2Low 0
Watch
Add Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-74588 | 9.8 | Aug 22 | sctp: keep chunk->transport in step with the list it is queued on Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6575fb17230814b48b471727c8410c0aadff9274; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6b9e2ea2057113f3393990ba646d2d97c719a80d; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 874a7c2b5e184f06134fdfde27e9ce9271bafe58; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 1adf929121e13e0b19200bb9fef715b918d483fe; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before e2e7c1de0e226ca1b7fea2de57a6c9bca408709b; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 2b3b5eec8b2c30ee237e3c31a6a38de9c39d804d; +3 more |
| CVE-2026-74587 | 9.8 | Aug 22 | sctp: fix use-after-free of cached ASCONF chunk Affected: a000c01e60e40e15304ffe48fff051d17a7bea91 before 10459b03e2d9ee12435e96f587de4d4cacdbf435; a000c01e60e40e15304ffe48fff051d17a7bea91 before e1bb114e09372fd6e03387ced9ef566da336ed6c; a000c01e60e40e15304ffe48fff051d17a7bea91 before 179676f0166230c80053a392303485b37c93dd33; a000c01e60e40e15304ffe48fff051d17a7bea91 before dc67d528c2fa939cec7fe3bf7f3089c8d281ca3d; a000c01e60e40e15304ffe48fff051d17a7bea91 before 618b5c6d049896fcfabb91afc072954c92cb2693; a000c01e60e40e15304ffe48fff051d17a7bea91 before 07daf4f9750104960a1d60831b2353c0d41f35fb; +3 more |
| CVE-2026-74586 | 9.8 | Aug 22 | sctp: clear new_transport when removing a peer Affected: 6af29ccc223b0feb6fc6112281c3fa3cdb1afddf before c0f973bb5118dd1b146cda3fcc8af6f6057befec; 6af29ccc223b0feb6fc6112281c3fa3cdb1afddf before 3b539b317cd052236fed0350364ff1268996ba46; 6af29ccc223b0feb6fc6112281c3fa3cdb1afddf before db9d8e3b670f841755bc2018f178472dc6064d27; 6af29ccc223b0feb6fc6112281c3fa3cdb1afddf before 31efa656cf6aface26e88f038c14f22ee6ca1500; 6af29ccc223b0feb6fc6112281c3fa3cdb1afddf before 291accf36febce751021888de5f15090f4875b56; 6af29ccc223b0feb6fc6112281c3fa3cdb1afddf before ca33df36aa0143a1d04f57d2086020c12e7eddb7; +3 more |
| CVE-2026-74581 | 9.8 | Aug 21 | net: ipv6: clear suppressed fib6 rule result Affected: 209d35ee34e25f9668c404350a1c86d914c54ffa before 90c57310e266eb94e4a80d6b15a9ca131d2e82cb; 8ef8a76a340ebdb2c2eea3f6fb0ebbed09a16383 before 5d29b286c9de0b309e94b9ed083aa1a2f429434f; cdef485217d30382f3bf6448c54b4401648fe3f1 before 354db6243eca59e9d187ffbf8b7955b044ce84dc; cdef485217d30382f3bf6448c54b4401648fe3f1 before 6d98c70fe0ba8c7708bfd5b2a5174d2086775daa; cdef485217d30382f3bf6448c54b4401648fe3f1 before 9bad152c42b37499162367fe47867411e62fffa3; cdef485217d30382f3bf6448c54b4401648fe3f1 before dc3ab04220667f254f4348572b2a0b3febff89fb; +7 more |
| CVE-2026-74570 | 9.8 | Aug 15 | ntfs: harden runlist realloc size calculations Affected: 11ccc9107dc460de28af90fac1f42404d9802735 before 57e7b8bf7b02a0140463fea786e5172cbdf2da2f; 11ccc9107dc460de28af90fac1f42404d9802735 before 8bed376124ab4505b70083a2b91f2c7ef6d51e24; 7.1 |
| CVE-2026-74569 | 9.8 | Aug 15 | netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() Affected: f5b321bd37fbec9188feb1f721ab46a5ac0b35da before ed1f9be6dc8e2e280b8725e44ccdc6e0cd38640d; f5b321bd37fbec9188feb1f721ab46a5ac0b35da before 1b0843f9e9b9b0b9b4b70d143b67e58163c85b2c; f5b321bd37fbec9188feb1f721ab46a5ac0b35da before 32d4abc8923b0d4046fd63ad6e4917872e44eb6d; f5b321bd37fbec9188feb1f721ab46a5ac0b35da before 63eea41759fd682229c14e0a2205802b46d106f3; f5b321bd37fbec9188feb1f721ab46a5ac0b35da before c97621a110e386b2dd69e276eb699e1d3cec581d; f5b321bd37fbec9188feb1f721ab46a5ac0b35da before f74554e67ccf04d1fa71069e8c9afa2717e40716; +3 more |
| CVE-2026-74556 | 9.8 | Aug 15 | scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer Affected: a081c13e39b5c17052a7b46fafa61019c4c110ff before a51812842084fd390590ab8dc0431f10c73ddc56; a081c13e39b5c17052a7b46fafa61019c4c110ff before a8f94cc9f0e5759252551be3a172960c57f21f54; a081c13e39b5c17052a7b46fafa61019c4c110ff before f1a3a51fc5dba0e99532379665069f1700da6b44; a081c13e39b5c17052a7b46fafa61019c4c110ff before c97b5265cc47775f77fd2a23d6bde0426997b233; a081c13e39b5c17052a7b46fafa61019c4c110ff before 084af0253673425ce2ae62e3c7f74f0dd023711b; a081c13e39b5c17052a7b46fafa61019c4c110ff before 72815741715bd41556dac5eeb068bf0f8af06ee7; +3 more |
| CVE-2026-74545 | 9.8 | Aug 15 | rtase: fix double free of multi-frag skb on DMA map failure Affected: d6e882b89fdf80be0ab4f914ec10f75215e49495 before 4f09172aff5f73a5e914f4fbc0d00a1c2ea9f7cb; d6e882b89fdf80be0ab4f914ec10f75215e49495 before db986098f30881fafcc752800aa3b13fd289c922; d6e882b89fdf80be0ab4f914ec10f75215e49495 before de691dc3227b061c4d0beba9f0128fe1ff33dd68; d6e882b89fdf80be0ab4f914ec10f75215e49495 before 6fb7b769d6ed6d1d2e02af4a80e57a2477f35086; 6.12 |
| CVE-2026-74495 | 9.8 | Aug 15 | igbvf: Fix leak in TX DMA error cleanup Affected: c1fa347f20f17f14a4a1575727fa24340e8a9117 before e42b7225c45f57b42306b80cdd3bda202bae7293; c1fa347f20f17f14a4a1575727fa24340e8a9117 before e3ed89c257f6361f13df23023cd10ace830330ad; c1fa347f20f17f14a4a1575727fa24340e8a9117 before 56726ff12cb6759ab90d6f5332c2377aeca7d249; c1fa347f20f17f14a4a1575727fa24340e8a9117 before 31089f4eab42e0fc248ec80c26f9b0bad59ba4cc; c1fa347f20f17f14a4a1575727fa24340e8a9117 before bc25d56c03e41c10bc4b40e99ca5d7b941675c04; c1fa347f20f17f14a4a1575727fa24340e8a9117 before 845a9cdd9b03b7b6fa8de3ee80579780350a7f65; +3 more |
| CVE-2026-74493 | 9.8 | Aug 15 | net/smc: fix socket use-after-free during link group termination Affected: 69318b5215f2dc32c345a3d65b98b4b1bf29c007 before ff44f2df57fb5560bdc75eb977867643e764a262; 69318b5215f2dc32c345a3d65b98b4b1bf29c007 before 9fb17c95b8f0683570fca1fb2792264147af937a; 69318b5215f2dc32c345a3d65b98b4b1bf29c007 before bea8dc14de2d56aca749d368563e6888217710a5; 69318b5215f2dc32c345a3d65b98b4b1bf29c007 before 5a42f162b857019a4c10ff687dc3bcdf51831865; 69318b5215f2dc32c345a3d65b98b4b1bf29c007 before 281c103a8eaed59001ce952f231df1b07674215a; 69318b5215f2dc32c345a3d65b98b4b1bf29c007 before f807a63d0d95680c34f677700da9148a07d7c78f; +3 more |
| CVE-2026-74480 | 9.8 | Aug 15 | net: bridge: stop fast-leave after deleting a port group Affected: 6db6f0eae6052b70885562e1733896647ec1d807 before d6c32e2e25a9a06ba021030e26b6d602a277eb72; 6db6f0eae6052b70885562e1733896647ec1d807 before 482bcb85139addb4e8ac8ed10baeda3e0aad4031; 6db6f0eae6052b70885562e1733896647ec1d807 before 1a109cc9890d017c41d77e6c82da739579c49f0b; 6db6f0eae6052b70885562e1733896647ec1d807 before 159ad90cb929c033308bb39a2c5f8fbf393b77aa; 6db6f0eae6052b70885562e1733896647ec1d807 before 4695430e8132420bf8de94da3eb36a6cf35fde6b; 6db6f0eae6052b70885562e1733896647ec1d807 before 0309ebbc570000ea0df11c06b69798e5860c5f6f; +3 more |
| CVE-2026-74478 | 9.8 | Aug 15 | um: vector: fix use-after-free in vector_mmsg_rx() Affected: 49da7e64f33e80edffb1a9eeb230fa4c3f42dffb before 967c779c9853d2a1cc9cd8e61d300250c348f3d9; 49da7e64f33e80edffb1a9eeb230fa4c3f42dffb before a7bc015bb798c525e7a82dd14225c6aeb994274b; 49da7e64f33e80edffb1a9eeb230fa4c3f42dffb before 7dc9781e320d664c9bdd50003c9acfddf363d1e1; 49da7e64f33e80edffb1a9eeb230fa4c3f42dffb before 4b9601595e8b6b5d18878cac0aeabc687d241111; 49da7e64f33e80edffb1a9eeb230fa4c3f42dffb before 67d58ab4f2ccf7145f3da07e025735a09c79de1b; 49da7e64f33e80edffb1a9eeb230fa4c3f42dffb before 180ff4c81faf01ec4e06082c9daa7c40518ead89; +3 more |
| CVE-2026-74474 | 9.8 | Aug 15 | vxlan: use pskb_network_may_pull() for transmit path header pulls Affected: e4f67addf158f98f8197e08974966b18480dc751 before 371425d4be7795e9158388af9eee0201e6047410; e4f67addf158f98f8197e08974966b18480dc751 before bb01c51950c3ff3c76acdd54b85ab38ccc2a8bb4; e4f67addf158f98f8197e08974966b18480dc751 before 6146901881f09ef063eb34ad389f63231f8486f5; e4f67addf158f98f8197e08974966b18480dc751 before 94dee751aad627b3645d424b5d0c736d394573e9; e4f67addf158f98f8197e08974966b18480dc751 before 7076a34b6e33315dc160b4612bfea1c597495585; e4f67addf158f98f8197e08974966b18480dc751 before b9553558b48db54ac9273e6b98d7263ef5c1a329; +1 more |
| CVE-2026-74473 | 9.8 | Aug 15 | vxlan: use pskb_network_may_pull() in route_shortcircuit() Affected: e4f67addf158f98f8197e08974966b18480dc751 before c419af4924c1593500a40519730ed98575d04a3e; e4f67addf158f98f8197e08974966b18480dc751 before 6bd0a3a1b5744166946f0c551a6665c3b46b05e4; e4f67addf158f98f8197e08974966b18480dc751 before 214ba43faf106cb06cd3dd30999c5c809c868b53; e4f67addf158f98f8197e08974966b18480dc751 before 42887be7c4cf283cce02cd0fb6411221167c8b6c; e4f67addf158f98f8197e08974966b18480dc751 before aa0d31376d574ac858a40078431a77127bf04ee4; e4f67addf158f98f8197e08974966b18480dc751 before ee799977d7941dbfb11049e17edd9eaf4f8820f7; +3 more |
| CVE-2026-74436 | 9.8 | Aug 15 | rxrpc: serialize kernel accept preallocation with socket teardown Affected: 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before d6207326b4ca0ae1041281b6af9df53f8080669a; 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before 11b429b84c87cb5a0152f14e7d6cb649ed363901; 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before c20d983968f239574290cf804a58cde18ad1c559; 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before 0337cdba0c477f176c0459bed012109453184573; 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before dfa0b2bbc5e50119f89c6b5407faa5ed86dfa7c5; 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before 35a967ff8b24db09ee429c39c5b5e6571639997d; +3 more |
| CVE-2026-74434 | 9.8 | Aug 15 | rxrpc: Don't move a peeked OOB message onto the pending queue Affected: 5800b1cf3fd8ccab752a101865be1e76dac33142 before 9ada3931beb37068fcb725b34b0398457009f343; 5800b1cf3fd8ccab752a101865be1e76dac33142 before 5f470cc883416fea6d3bce18ef96bf91dd49ffc3; 5800b1cf3fd8ccab752a101865be1e76dac33142 before 5801cff7d5d7b4e9d877dfb627b23eb63167f02c; 6.16 |
| CVE-2026-74433 | 9.8 | Aug 15 | rxrpc: Fix UAF in rxgk_issue_challenge() Affected: 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a before 844b8525ce503405c462ad67f750bec648720397; 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a before 83bb0ed050e2ad9453d8ef50e4d6e624eac6eed8; 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a before 107a4cb0d47e735830f852d83970d5c81f8e1e08; 6.16 |
| CVE-2026-74428 | 9.8 | Aug 15 | rxrpc: Fix double unlock in rxrpc_recvmsg() Affected: 5800b1cf3fd8ccab752a101865be1e76dac33142 before 8cd8cf3052fff9a4b86b25734f610e4af03786d3; 5800b1cf3fd8ccab752a101865be1e76dac33142 before 1297ae6aeebc3863cb437e42a1bc4cd6173e43d9; 5800b1cf3fd8ccab752a101865be1e76dac33142 before a2f299b4d5510147fa8629a6aba2869bbcc88aea; 6.16 |
| CVE-2026-74427 | 9.8 | Aug 15 | afs: Fix netns teardown to cancel the preallocation charger Affected: 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before 63ccaf1bdf8be2330f47f9b5b233dd3fd04acbd9; 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before f5096e18b6b7fbd1c2a1942e275a51bcfdfb2ad1; 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before 59e8b7652f6cbfb62d377ead0ad553c1b4e39a7a; 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before 85d5fb80fe4f0cc836b6df83f26de204fe102ff7; 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before a33975ff2b6ea47b8f29956403374b1cdd057539; 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before b83ecf80e28afb7b6595ba79932e77ca68a5a83d; +3 more |
| CVE-2026-74406 | 9.8 | Aug 15 | vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). Affected: 5602c48cf87562c2f95b831d690631935e834295 before 9c58c729d32e7cea5772cc44929c6cd61e5a31cd; 5602c48cf87562c2f95b831d690631935e834295 before f79c80f173fda9545b220c1f094b65fc06c252d0; 5602c48cf87562c2f95b831d690631935e834295 before 08f40c0d23c67c3aa4224c3311e134999c721fb4; 5602c48cf87562c2f95b831d690631935e834295 before 4a8cde6f7281ea2c4c290f9ad9923b3631defceb; 5602c48cf87562c2f95b831d690631935e834295 before ef44dac2a37f86eeae6b88ed10a6d60b35387dfd; 5602c48cf87562c2f95b831d690631935e834295 before 30a45c0bffdd62350261e2f2689fdba426a33578; +1 more |
| CVE-2026-74401 | 9.8 | Aug 15 | dlm: fix add msg handle in send_queue ordered Affected: 489d8e559c6596eb08e16447d9830bc39afbe54e before ae9e534e502a0f48c12baf83608c5de0ff0eab11; 489d8e559c6596eb08e16447d9830bc39afbe54e before 6369619f1b665f12d8c99cc6ff733c64eb08b22e; 489d8e559c6596eb08e16447d9830bc39afbe54e before 712714f818d83373847874ab0f8e426be79296cf; 489d8e559c6596eb08e16447d9830bc39afbe54e before 4d45250b1d22960f86d83245be188b16e456218b; 489d8e559c6596eb08e16447d9830bc39afbe54e before d2248cb70c070f8f04762872772e155b59016f17; 5.14 |
| CVE-2026-74398 | 9.8 | Aug 15 | ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD Affected: c15b1ccadb323ea50023e8f1cca2954129a62b51 before 47b05836705b63dab93d9ac7c69a3a507375ef80; c15b1ccadb323ea50023e8f1cca2954129a62b51 before d21be7d051012c6b572fa4e3334443c250216f7b; c15b1ccadb323ea50023e8f1cca2954129a62b51 before 875c284c0f98b042bb97abad460f63a24c977f88; c15b1ccadb323ea50023e8f1cca2954129a62b51 before 8ed0ce9ea58d677d1bac92614ee5f60f8ea57363; c15b1ccadb323ea50023e8f1cca2954129a62b51 before 3bdc86d89fd6c6523753fa6f42fcfaf30ee699cb; c15b1ccadb323ea50023e8f1cca2954129a62b51 before b61af0268e3d1308c466bf0be5dced844eafc1ef; +5 more |
| CVE-2026-74394 | 9.8 | Aug 15 | RDMA/srpt: fix integer overflow in immediate data length check Affected: 5dabcd0456d7ee17c2c7a17d7c2305444d2b9639 before c82c860f8c8e4f4f454c9f14d0ad0c0466965f7d; 5dabcd0456d7ee17c2c7a17d7c2305444d2b9639 before 3efa5301137140a3ca3677a9098c0a93a0acfd49; 5dabcd0456d7ee17c2c7a17d7c2305444d2b9639 before 067b9556eeb007f28b7c2033b4dcde5b6d88418f; 5dabcd0456d7ee17c2c7a17d7c2305444d2b9639 before dcf7a986f377cce0749ed53f1d64195fbd5fdf91; 5dabcd0456d7ee17c2c7a17d7c2305444d2b9639 before 07dec3f6dcb6c6cc891162d252b800eb0e6d5e8e; 5dabcd0456d7ee17c2c7a17d7c2305444d2b9639 before 65572fbd86033ae2370125593d59b8be34253aaf; +3 more |
| CVE-2026-74384 | 9.8 | Aug 15 | nvme-multipath: fix flex array size in struct nvme_ns_head Affected: f333444708f82c4a4d3ccac004da0bfd9cfdfa42 before 7e7b167e65610dfa7564d449474f4b477f9d4c1c; f333444708f82c4a4d3ccac004da0bfd9cfdfa42 before 316b5f1168264844aa125959de1d6da2b1905795; f333444708f82c4a4d3ccac004da0bfd9cfdfa42 before 1d4131b5c9823c7d2c86389898ad1b466af7df5e; f333444708f82c4a4d3ccac004da0bfd9cfdfa42 before 9ffdd11bd6c961b46b3689850ff6c5d7af5c5fe5; f333444708f82c4a4d3ccac004da0bfd9cfdfa42 before bde4d6eb53f7d3cdae7e62c9ee84345fdd6e70a6; f333444708f82c4a4d3ccac004da0bfd9cfdfa42 before 140d6fff4ed266592492a23444043842b4af7a62; +3 more |
| CVE-2026-74376 | 9.8 | Aug 15 | md/raid10: reset read_slot when reusing r10bio for discard Affected: d30588b2731fb01e1616cf16c3fe79a1443e29aa before 3cb2a606ce4902eceabe68338df0653312f861f8; d30588b2731fb01e1616cf16c3fe79a1443e29aa before 561c9711e4f545d6464a023168bdee03b00fa945; d30588b2731fb01e1616cf16c3fe79a1443e29aa before ce3030e92f14362880055de5fe3c258971118853; d30588b2731fb01e1616cf16c3fe79a1443e29aa before 742e4afd247d9c972695227716b03d432a7e1d26; d30588b2731fb01e1616cf16c3fe79a1443e29aa before b7313f23ea5a79b199a007bfad64a866cc2c22e7; d30588b2731fb01e1616cf16c3fe79a1443e29aa before eb04e3e9c14ed15914f5fd2eae8b6435f54f095f; +2 more |
| CVE-2026-74361 | 9.8 | Aug 15 | nvme: fix FDP fdpcidx bounds check Affected: 30b5f20bb2ddab013035399e5c7e6577da49320a before 5e406928404d67a8da8aa3ae21732e1ea1a04118; 30b5f20bb2ddab013035399e5c7e6577da49320a before 5d0e7d2af884b91329235abb16652ae4eead8079; 30b5f20bb2ddab013035399e5c7e6577da49320a before 0967074f6830718fd2597404ef119bddd0dbfd00; 6.16 |
| CVE-2026-74350 | 9.8 | Aug 15 | ocfs2: validate fast symlink target during inode read Affected: ea022dfb3c2a4680483b00eb2fecc9fc4f6091d1 before dcabbf7da43825e23e5e89adccc1430faee1bce1; ea022dfb3c2a4680483b00eb2fecc9fc4f6091d1 before 030d4caae89977b80349df95523dfda1dfb10f73; ea022dfb3c2a4680483b00eb2fecc9fc4f6091d1 before d94bf50756d7f80bb728ad58246376649e1035b6; ea022dfb3c2a4680483b00eb2fecc9fc4f6091d1 before f9e2cb692b77a679b1f4cc2b7b277fa908586533; ea022dfb3c2a4680483b00eb2fecc9fc4f6091d1 before e234973f286ed2e8961a24561ec91594ec3e3ff8; 3.5 |
| CVE-2026-74345 | 9.8 | Aug 15 | RDMA/siw: Fix endpoint/socket association handling Affected: 6c52fdc244b5ccc468006fd65a504d4ee33743c7 before ff584d3735b13a1d7f8cd072f98fea40b6062518; 6c52fdc244b5ccc468006fd65a504d4ee33743c7 before b28d513393f81e2de00f82970487a9d001557e4e; 6c52fdc244b5ccc468006fd65a504d4ee33743c7 before f6183983ce1ff254d629a333739082b39d7c5eb6; 6c52fdc244b5ccc468006fd65a504d4ee33743c7 before b6cf763eee0a932792bef64ceaca568d324192fc; 6c52fdc244b5ccc468006fd65a504d4ee33743c7 before ea4f6f6c53577fb3f05dbd78b15e586772d49831; 5.3 |
| CVE-2026-74315 | 9.8 | Aug 15 | lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file() Affected: 3de744ee4e4557da0d63be8a97ad44b4dad58912 before 686c2434f9f16b87aeed18d76cc562df9f2695ab; 3de744ee4e4557da0d63be8a97ad44b4dad58912 before 6e4c62caecf792e8a15ad9bc7f371e57c17e3302; 7.1 |
| CVE-2026-74269 | 9.8 | Aug 15 | bnxt: fix head underflow on XDP head-grow Affected: f6974b4c2d8e1062b5a52228ee47293c15b4ee1e before 3e8f3959a7fd28461b8cd9708c21286b4250b77a; f6974b4c2d8e1062b5a52228ee47293c15b4ee1e before ff34e5a26a26c92142afea11455e259c4c4c617b; f6974b4c2d8e1062b5a52228ee47293c15b4ee1e before 4c03275bc4435cc8e25f7f3f08aff58c0e783d8d; f6974b4c2d8e1062b5a52228ee47293c15b4ee1e before bb72b1c6755631c74b7e0878ee55bb81c06776c0; f6974b4c2d8e1062b5a52228ee47293c15b4ee1e before e26657fe3b85c068b01f42bb0c602f242d643ba9; e9f11bfc03fb0d3c86f91b8ae945bb10f7e19c16; +4 more |
| CVE-2026-74268 | 9.8 | Aug 15 | tcp: clear sock_ops cb flags before force-closing a child socket Affected: d44874910a26f3a8f81edf873a2473363f07f660 before 5d5389b2c37ca00da61d1407618ebe15abae0c8b; d44874910a26f3a8f81edf873a2473363f07f660 before 9f30ba9aa0270a18fdd1e6cd426c480c35f7de9d; d44874910a26f3a8f81edf873a2473363f07f660 before 71e9c53220abd7f5a45aa4d5e5b420d3479f3a4f; d44874910a26f3a8f81edf873a2473363f07f660 before 9fffa6465851a1910a6e9cb7272787dd615b26b1; d44874910a26f3a8f81edf873a2473363f07f660 before fe23d56e9266d58ba5c380f1970118eedeee0b68; d44874910a26f3a8f81edf873a2473363f07f660 before ce311bd2e36596f0aa2c92ca86fb3e019ac57eae; +3 more |
| CVE-2026-74267 | 9.8 | Aug 15 | net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Affected: cc71a757da78dd4aa1b4a9b19cb011833730ccf2 before bb9cfd874ee884117b33e92a002b9a45b48202f4; eda741fe155ddf5ecd2dd3bfbd4fc3c0c7dbb450 before 7a05af7f58566682b73578b72ca8e53a268c43bd; 829c49b6b2ff45b043739168fd1245e4e1a91a30 before eba49fd85995a3851c597fa2d214f8d21736e1d8; 2f9761a94bae33d26e6a81b31b36e7d776d93dc1 before e8c6dbadf139cb14ea6ed14add6ed6e88504dedd; 4d55144b12e742404bb3f8fee6038bafbf45619d before e4615aa6bb7802944ae790cb4b3ef8c1b7491af3; 342debc12183b51773b3345ba267e9263bdfaaef before 755108bb7a5083e911294c416cfea605dc75632f; +14 more |
| CVE-2026-74255 | 9.8 | Aug 15 | tipc: fix UAF in tipc_l2_send_msg() Affected: 282b3a056225b35024246f63feb91d769d714dad before 609ced2301be1df7e7ed2ef47d1d916674e6ba3b; 282b3a056225b35024246f63feb91d769d714dad before 71aafa16d79b107b33837f60b6cbc7d0cb8c5708; 282b3a056225b35024246f63feb91d769d714dad before f4002f1c669cc02e3763f479fc25ff1dfa9e2420; 282b3a056225b35024246f63feb91d769d714dad before 50ff092633b06382e5091dd5b093ce943d4ac2f9; 282b3a056225b35024246f63feb91d769d714dad before aef12b5ce793dea6b3a97a58fd0f946000ae8945; 282b3a056225b35024246f63feb91d769d714dad before 0d8a12d7143126afdf9fbe2e3d438650dd6603ed; +3 more |
| CVE-2026-72494 | 9.8 | Aug 15 | RDMA/irdma: Replace waitqueue and flag with completion Affected: 44d9e52977a1b90b0db1c7f8b197c218e9226520 before 7d89bff21c12e543d12ad70cb0103cf815891b24; 44d9e52977a1b90b0db1c7f8b197c218e9226520 before 8de303efe2ff4fcbf240dfc6eb3469e1e8f18a3f; 44d9e52977a1b90b0db1c7f8b197c218e9226520 before 706591cccdd3ac2c0ddc8c2ed6c89a6be9865826; 44d9e52977a1b90b0db1c7f8b197c218e9226520 before bde37aed0724c0139dea177f3aae8d989b6babb1; 44d9e52977a1b90b0db1c7f8b197c218e9226520 before d9c8c45e6d2f438a3c8e643ae78b59454fa0fadd; 5.14 |
| CVE-2026-72491 | 9.8 | Aug 15 | net/9p: fix race condition on rdma->state in trans_rdma.c Affected: 473c7dd1d7b59ff8f88a5154737e3eac78a96e5b before 4cee2b8766045059d5e0b8114837b4a8efe827ac; 473c7dd1d7b59ff8f88a5154737e3eac78a96e5b before 5424138848eb7d7d8a7196676e90a2cbf2142454; 473c7dd1d7b59ff8f88a5154737e3eac78a96e5b before 3970a19a80de530b801b6256354d4a529a9a2d6c; 473c7dd1d7b59ff8f88a5154737e3eac78a96e5b before 8aadc136d8e8d8fc95d7982d213cfe2234dfcf2b; 473c7dd1d7b59ff8f88a5154737e3eac78a96e5b before 151f8cf5b23d8a534d884432a82a6d54d5a61989; 473c7dd1d7b59ff8f88a5154737e3eac78a96e5b before 13bf9879b778b2f4b260b45bed18f31806120d1e; +11 more |
| CVE-2026-72477 | 9.8 | Aug 15 | fs/ntfs3: call _ntfs_bad_inode() when failing to rename Affected: 519b078998ce6e729f98dccf35505b4756985d11 before 580896e33003845de66c75cd61544cf9d9bfbe15; 519b078998ce6e729f98dccf35505b4756985d11 before ff825bf0521f6da2f30878cbad18ab7b341bc31b; 519b078998ce6e729f98dccf35505b4756985d11 before e8ed78f40eecd0176fda71d673f6957c98e7ffbe; 6.17 |
| CVE-2026-72473 | 9.8 | Aug 15 | xprtrdma: Decouple req recycling from RPC completion Affected: 0ab115237025f5e379620bbcd56a02697d07b002 before 740975054a1970c0cf15f70ac39724a064f45847; 0ab115237025f5e379620bbcd56a02697d07b002 before 9f3d9b68c1c6c51746e5ecdb52b2e6a2901de37e; 0ab115237025f5e379620bbcd56a02697d07b002 before e7632089523acddcdd8f090ad19e96fb3107b04d; 0ab115237025f5e379620bbcd56a02697d07b002 before 53442c7d0c888e51b8bc3da196970a669cc6b294; 0ab115237025f5e379620bbcd56a02697d07b002 before 8203f760a72bd39a3b66bc4eff0aa272a99fe22b; 0ab115237025f5e379620bbcd56a02697d07b002 before e786233d2e0bbff9a82e43f02ae3a46ab4b08ec3; +1 more |
| CVE-2026-72472 | 9.8 | Aug 15 | nfs: use nfsi->rwsem to protect traversal of the file lock list Affected: c69899a17ca4836230720e65493942d9582a0424 before 1cda95bf2e9c0e6b63545b7565fe4a1e474322f4; c69899a17ca4836230720e65493942d9582a0424 before f161ef7b0dd2f51fdb002ba4a4e9bf0ee7409218; c69899a17ca4836230720e65493942d9582a0424 before e68035178e65e2b3aa386ce61202ff33724ae418; c69899a17ca4836230720e65493942d9582a0424 before 4837fb36219e6c08b666bc31a86841bad8526358; 4.0 |
| CVE-2026-72466 | 9.8 | Aug 15 | xprtrdma: Fix bcall rep leak and unbounded peek Affected: 41c8f70f5a3db7e06179186b6525fd9ee1d7d314 before 0cee8f9c3b14bd6dee9c4310090a7f45b89b834f; 41c8f70f5a3db7e06179186b6525fd9ee1d7d314 before 7afc2f8d2fd9394724df9eaf22ce7a71029a5fba; 41c8f70f5a3db7e06179186b6525fd9ee1d7d314 before 88b5346284a184a6b7d019912232a571d672d3e3; 41c8f70f5a3db7e06179186b6525fd9ee1d7d314 before 07aa506436be7634e381e1e1f6d0efa9efc81ecc; 41c8f70f5a3db7e06179186b6525fd9ee1d7d314 before d7a2870dde3bb09d51d6b9c877642996ad6b92dd; 41c8f70f5a3db7e06179186b6525fd9ee1d7d314 before 118a16a18c59f7ad8084b2d13988839b669fca10; +2 more |
| CVE-2026-72463 | 9.8 | Aug 15 | xfrm: Fix dev use-after-free in xfrm async resumption Affected: 4236c30b437b80f673b9e08c8fae38b8d471ac9e before fed4d3195a31125566876952ce66113ec1eb9008; 0f451b43c88bf2b9c038b414be580efee42e031b before 1acd93259b6be269e26be5d71c224bccd1f8352f; 1c428b03840094410c5fb6a5db30640486bbbfcb before 63a30015199912bd5055bead8001b1ae68a67cdb; 1c428b03840094410c5fb6a5db30640486bbbfcb before 8045c0df98d4f14c54e5cb875f1c9c0ce89fe4ff; 94439cbe478b53f92223da9aae95fffb28623c3f; 5002beda5cac69d522dc54da0d5d463ed9c963d2; +5 more |
| CVE-2026-72451 | 9.8 | Aug 15 | xfrm: Fix xfrm state cache insertion race Affected: 5e4334dc39443645415450163ff5ff1ee7e79784 before 6dab4dec9a49121d079981ac913569f232c06b06; 81a331a0e72ddc2f75092603d9577bd1a0ca23ad before a1a3360a0c44b8b5c134db2a9d0667b61c9cf523; 81a331a0e72ddc2f75092603d9577bd1a0ca23ad before 041859fd55c81ea55e76d051e39b7b79975b8c7d; 81a331a0e72ddc2f75092603d9577bd1a0ca23ad before ddd3d0132920319ac426e12456013eadbae67e15; 6.12.13 before 6.12.97; 6.13 |
| CVE-2026-72442 | 9.8 | Aug 15 | netfilter: flowtable: fix and simplify IP6IP6 tunnel handling Affected: d98103575dcdd3a730e0901ab457791a9ac6930c before 7f8d816a9aa2729d270418f00c9ef5e85bfc1b31; d98103575dcdd3a730e0901ab457791a9ac6930c before f4c2d8668d85ed125985da663c824a9c25498257; 7.0 |
| CVE-2026-72436 | 9.8 | Aug 15 | netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types Affected: 18f84d41d34fa35d0d64bbaea01fe664553ecc06 before c107233d2ff4fd7cef5d02f9124b99194957a710; 18f84d41d34fa35d0d64bbaea01fe664553ecc06 before 6329d3a9afe715fddda0460cfa46b496d61c2fe0; 18f84d41d34fa35d0d64bbaea01fe664553ecc06 before 7445fe965b7d8756070a40e80f8b73348ccda1d7; 18f84d41d34fa35d0d64bbaea01fe664553ecc06 before c4d257734e91bfcdc71d41843392dd6400b5bb1b; 18f84d41d34fa35d0d64bbaea01fe664553ecc06 before 3219d74e4536658c937fd878a327257b86ce80dd; 18f84d41d34fa35d0d64bbaea01fe664553ecc06 before e4b4984e28c16406ecb318444dea4a8bf47def3e; +1 more |
| CVE-2026-72429 | 9.8 | Aug 15 | ipv6: ioam: fix type confusion of dst_entry Affected: 47ce7c854563fe8450e9cb8dcd62c6470e28076b before ea24f911ead85ba3d570a31e37c52b6c949f6928; 47ce7c854563fe8450e9cb8dcd62c6470e28076b before 5a3b2ee1e96d0580a8ed8deda6dfa430604f9ab0; 47ce7c854563fe8450e9cb8dcd62c6470e28076b before 9ed19e11d2146076d117d51a940643990118449b; 6.16 |
| CVE-2026-72422 | 9.8 | Aug 15 | ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE Affected: dd4e4c811898410e6a3ae3b63207b7c542860907 before c7bef84740d1d57848c74f6f5b996606e43ea4fe; aa7253c2393f6dcd6a1468b0792f6da76edad917 before d0a469122e7bf8338fec1949fb1e8e1290ed8caa; aa7253c2393f6dcd6a1468b0792f6da76edad917 before 7470511d085af1c7a043a60e53d52b512d5a10b1; aa7253c2393f6dcd6a1468b0792f6da76edad917 before 16a1ecf39c217e3d164bd32ef2a4f650abc067fa; aa7253c2393f6dcd6a1468b0792f6da76edad917 before 77bb0bbfcc4e777ca653174689e5e363f8ee63d1; aa7253c2393f6dcd6a1468b0792f6da76edad917 before 1c89da3baa2b1f269178afa87dc30479b8535776; +7 more |
| CVE-2026-72417 | 9.8 | Aug 15 | netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() Affected: ab427db17885814069bae891834f20842f0ac3a4 before 025a41e76b51fbc7b8eaa5bacbaa9621d00e6aa7; ab427db17885814069bae891834f20842f0ac3a4 before 84460b644329e25809b4a6d9279d6359d7fd8ebc; 6.19 |
| CVE-2026-72399 | 9.8 | Aug 15 | net: enetc: check the number of BDs needed for xdp_frame Affected: 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before 1ecb199b0e6d12ab6c26c0b7edf1a8f4472d9aed; 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before f55276160ffad3e235b657ee4b7304eb99b90e5c; 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before cfbc6e9b84dcc0aa2d65c84ea4745af327763209; 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before 1681cc7974a6123f5d5740b03bc11e4784bd2542; 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before d22829101ab675607ad6c3d420fb3ab875f46bbb; 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before 555c5475e787802eeae0d2b91c2f66c330db2767; +1 more |
| CVE-2026-72398 | 9.8 | Aug 15 | sctp: add INIT verification after cookie unpacking Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 81892d83cc897331510f35b30d17f8b0dc285966; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 683a012b984fef4bc155e278742fbe01561e102a; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before bca3100f550281c2f2418652338bced3b35af0e6; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 062bcbf8d1f1051fdeb20b94920031b0e2cb95a2; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 414c5447fe6a200613dd46d7fdc8454622076cb1; 2.6.12 |
| CVE-2026-72393 | 9.8 | Aug 15 | eth: fbnic: don't cache shinfo across skb realloc Affected: b0b0f52042acb324cd39fbefb2b1ae83af8f8ae1 before 83df3e2594cd78aa40b1246a19879abb4891945b; b0b0f52042acb324cd39fbefb2b1ae83af8f8ae1 before 21f304c2aae46625e050c28d979f4b9d83faa85e; b0b0f52042acb324cd39fbefb2b1ae83af8f8ae1 before 62b68b774f06bf52e329f254f0199bc43d350ccf; 6.15 |
| CVE-2026-72381 | 9.8 | Aug 15 | ksmbd: fix use-after-free of fp->owner.name in durable handle owner check Affected: 712cdf917e77a6444ce3836874829d770db20ee6 before fb978d72052704c6b06c6b0f129fcd60b77169f5; c7f0f0d01c88bdcb8b1694d7d321670013f7ed7d before 93d4d46bf9d442a12ea87278049ec416962c627f; 00ce8d6789dae72d042a4522264964c72891ca37 before 5a5ac2852cd326529d02f778bc1aa6184701f4d7; 49110a8ce654bbe56bef7c5e44cce31f4b102b8a before ed98719be41389d416953b8ef9f07a07dfea6b2b; 49110a8ce654bbe56bef7c5e44cce31f4b102b8a before 38637163501fd9e2f684b8cd275d0db5d79f37c6; c908c853f304a4969b5aa10eba0b50350cc65b80; +5 more |
The 500 most important CVEs for this product (exploited first, then by severity)
