LI
Product
Linux
On CISA KEVExploited in the wild
12,551
CVEs
12
On KEV
10.0
Max CVSS
1052
New 30D
Severity mix
Critical 489High 9Medium 2Low 0
Watch
Add Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-74480 | 9.8 | Aug 15 | net: bridge: stop fast-leave after deleting a port group Affected: 6db6f0eae6052b70885562e1733896647ec1d807 before d6c32e2e25a9a06ba021030e26b6d602a277eb72; 6db6f0eae6052b70885562e1733896647ec1d807 before 482bcb85139addb4e8ac8ed10baeda3e0aad4031; 6db6f0eae6052b70885562e1733896647ec1d807 before 1a109cc9890d017c41d77e6c82da739579c49f0b; 6db6f0eae6052b70885562e1733896647ec1d807 before 159ad90cb929c033308bb39a2c5f8fbf393b77aa; 6db6f0eae6052b70885562e1733896647ec1d807 before 4695430e8132420bf8de94da3eb36a6cf35fde6b; 6db6f0eae6052b70885562e1733896647ec1d807 before 0309ebbc570000ea0df11c06b69798e5860c5f6f; +3 more |
| CVE-2026-74478 | 9.8 | Aug 15 | um: vector: fix use-after-free in vector_mmsg_rx() Affected: 49da7e64f33e80edffb1a9eeb230fa4c3f42dffb before 967c779c9853d2a1cc9cd8e61d300250c348f3d9; 49da7e64f33e80edffb1a9eeb230fa4c3f42dffb before a7bc015bb798c525e7a82dd14225c6aeb994274b; 49da7e64f33e80edffb1a9eeb230fa4c3f42dffb before 7dc9781e320d664c9bdd50003c9acfddf363d1e1; 49da7e64f33e80edffb1a9eeb230fa4c3f42dffb before 4b9601595e8b6b5d18878cac0aeabc687d241111; 49da7e64f33e80edffb1a9eeb230fa4c3f42dffb before 67d58ab4f2ccf7145f3da07e025735a09c79de1b; 49da7e64f33e80edffb1a9eeb230fa4c3f42dffb before 180ff4c81faf01ec4e06082c9daa7c40518ead89; +3 more |
| CVE-2026-74474 | 9.8 | Aug 15 | vxlan: use pskb_network_may_pull() for transmit path header pulls Affected: e4f67addf158f98f8197e08974966b18480dc751 before 371425d4be7795e9158388af9eee0201e6047410; e4f67addf158f98f8197e08974966b18480dc751 before bb01c51950c3ff3c76acdd54b85ab38ccc2a8bb4; e4f67addf158f98f8197e08974966b18480dc751 before 6146901881f09ef063eb34ad389f63231f8486f5; e4f67addf158f98f8197e08974966b18480dc751 before 94dee751aad627b3645d424b5d0c736d394573e9; e4f67addf158f98f8197e08974966b18480dc751 before 7076a34b6e33315dc160b4612bfea1c597495585; e4f67addf158f98f8197e08974966b18480dc751 before b9553558b48db54ac9273e6b98d7263ef5c1a329; +1 more |
| CVE-2026-74473 | 9.8 | Aug 15 | vxlan: use pskb_network_may_pull() in route_shortcircuit() Affected: e4f67addf158f98f8197e08974966b18480dc751 before c419af4924c1593500a40519730ed98575d04a3e; e4f67addf158f98f8197e08974966b18480dc751 before 6bd0a3a1b5744166946f0c551a6665c3b46b05e4; e4f67addf158f98f8197e08974966b18480dc751 before 214ba43faf106cb06cd3dd30999c5c809c868b53; e4f67addf158f98f8197e08974966b18480dc751 before 42887be7c4cf283cce02cd0fb6411221167c8b6c; e4f67addf158f98f8197e08974966b18480dc751 before aa0d31376d574ac858a40078431a77127bf04ee4; e4f67addf158f98f8197e08974966b18480dc751 before ee799977d7941dbfb11049e17edd9eaf4f8820f7; +3 more |
| CVE-2026-74436 | 9.8 | Aug 15 | rxrpc: serialize kernel accept preallocation with socket teardown Affected: 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before d6207326b4ca0ae1041281b6af9df53f8080669a; 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before 11b429b84c87cb5a0152f14e7d6cb649ed363901; 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before c20d983968f239574290cf804a58cde18ad1c559; 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before 0337cdba0c477f176c0459bed012109453184573; 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before dfa0b2bbc5e50119f89c6b5407faa5ed86dfa7c5; 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before 35a967ff8b24db09ee429c39c5b5e6571639997d; +3 more |
| CVE-2026-74434 | 9.8 | Aug 15 | rxrpc: Don't move a peeked OOB message onto the pending queue Affected: 5800b1cf3fd8ccab752a101865be1e76dac33142 before 9ada3931beb37068fcb725b34b0398457009f343; 5800b1cf3fd8ccab752a101865be1e76dac33142 before 5f470cc883416fea6d3bce18ef96bf91dd49ffc3; 5800b1cf3fd8ccab752a101865be1e76dac33142 before 5801cff7d5d7b4e9d877dfb627b23eb63167f02c; 6.16 |
| CVE-2026-74433 | 9.8 | Aug 15 | rxrpc: Fix UAF in rxgk_issue_challenge() Affected: 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a before 844b8525ce503405c462ad67f750bec648720397; 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a before 83bb0ed050e2ad9453d8ef50e4d6e624eac6eed8; 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a before 107a4cb0d47e735830f852d83970d5c81f8e1e08; 6.16 |
| CVE-2026-74428 | 9.8 | Aug 15 | rxrpc: Fix double unlock in rxrpc_recvmsg() Affected: 5800b1cf3fd8ccab752a101865be1e76dac33142 before 8cd8cf3052fff9a4b86b25734f610e4af03786d3; 5800b1cf3fd8ccab752a101865be1e76dac33142 before 1297ae6aeebc3863cb437e42a1bc4cd6173e43d9; 5800b1cf3fd8ccab752a101865be1e76dac33142 before a2f299b4d5510147fa8629a6aba2869bbcc88aea; 6.16 |
| CVE-2026-74427 | 9.8 | Aug 15 | afs: Fix netns teardown to cancel the preallocation charger Affected: 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before 63ccaf1bdf8be2330f47f9b5b233dd3fd04acbd9; 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before f5096e18b6b7fbd1c2a1942e275a51bcfdfb2ad1; 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before 59e8b7652f6cbfb62d377ead0ad553c1b4e39a7a; 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before 85d5fb80fe4f0cc836b6df83f26de204fe102ff7; 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before a33975ff2b6ea47b8f29956403374b1cdd057539; 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 before b83ecf80e28afb7b6595ba79932e77ca68a5a83d; +3 more |
| CVE-2026-74406 | 9.8 | Aug 15 | vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). Affected: 5602c48cf87562c2f95b831d690631935e834295 before 9c58c729d32e7cea5772cc44929c6cd61e5a31cd; 5602c48cf87562c2f95b831d690631935e834295 before f79c80f173fda9545b220c1f094b65fc06c252d0; 5602c48cf87562c2f95b831d690631935e834295 before 08f40c0d23c67c3aa4224c3311e134999c721fb4; 5602c48cf87562c2f95b831d690631935e834295 before 4a8cde6f7281ea2c4c290f9ad9923b3631defceb; 5602c48cf87562c2f95b831d690631935e834295 before ef44dac2a37f86eeae6b88ed10a6d60b35387dfd; 5602c48cf87562c2f95b831d690631935e834295 before 30a45c0bffdd62350261e2f2689fdba426a33578; +1 more |
| CVE-2026-74401 | 9.8 | Aug 15 | dlm: fix add msg handle in send_queue ordered Affected: 489d8e559c6596eb08e16447d9830bc39afbe54e before ae9e534e502a0f48c12baf83608c5de0ff0eab11; 489d8e559c6596eb08e16447d9830bc39afbe54e before 6369619f1b665f12d8c99cc6ff733c64eb08b22e; 489d8e559c6596eb08e16447d9830bc39afbe54e before 712714f818d83373847874ab0f8e426be79296cf; 489d8e559c6596eb08e16447d9830bc39afbe54e before 4d45250b1d22960f86d83245be188b16e456218b; 489d8e559c6596eb08e16447d9830bc39afbe54e before d2248cb70c070f8f04762872772e155b59016f17; 5.14 |
| CVE-2026-74398 | 9.8 | Aug 15 | ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD Affected: c15b1ccadb323ea50023e8f1cca2954129a62b51 before 47b05836705b63dab93d9ac7c69a3a507375ef80; c15b1ccadb323ea50023e8f1cca2954129a62b51 before d21be7d051012c6b572fa4e3334443c250216f7b; c15b1ccadb323ea50023e8f1cca2954129a62b51 before 875c284c0f98b042bb97abad460f63a24c977f88; c15b1ccadb323ea50023e8f1cca2954129a62b51 before 8ed0ce9ea58d677d1bac92614ee5f60f8ea57363; c15b1ccadb323ea50023e8f1cca2954129a62b51 before 3bdc86d89fd6c6523753fa6f42fcfaf30ee699cb; c15b1ccadb323ea50023e8f1cca2954129a62b51 before b61af0268e3d1308c466bf0be5dced844eafc1ef; +5 more |
| CVE-2026-74394 | 9.8 | Aug 15 | RDMA/srpt: fix integer overflow in immediate data length check Affected: 5dabcd0456d7ee17c2c7a17d7c2305444d2b9639 before c82c860f8c8e4f4f454c9f14d0ad0c0466965f7d; 5dabcd0456d7ee17c2c7a17d7c2305444d2b9639 before 3efa5301137140a3ca3677a9098c0a93a0acfd49; 5dabcd0456d7ee17c2c7a17d7c2305444d2b9639 before 067b9556eeb007f28b7c2033b4dcde5b6d88418f; 5dabcd0456d7ee17c2c7a17d7c2305444d2b9639 before dcf7a986f377cce0749ed53f1d64195fbd5fdf91; 5dabcd0456d7ee17c2c7a17d7c2305444d2b9639 before 07dec3f6dcb6c6cc891162d252b800eb0e6d5e8e; 5dabcd0456d7ee17c2c7a17d7c2305444d2b9639 before 65572fbd86033ae2370125593d59b8be34253aaf; +3 more |
| CVE-2026-74384 | 9.8 | Aug 15 | nvme-multipath: fix flex array size in struct nvme_ns_head Affected: f333444708f82c4a4d3ccac004da0bfd9cfdfa42 before 7e7b167e65610dfa7564d449474f4b477f9d4c1c; f333444708f82c4a4d3ccac004da0bfd9cfdfa42 before 316b5f1168264844aa125959de1d6da2b1905795; f333444708f82c4a4d3ccac004da0bfd9cfdfa42 before 1d4131b5c9823c7d2c86389898ad1b466af7df5e; f333444708f82c4a4d3ccac004da0bfd9cfdfa42 before 9ffdd11bd6c961b46b3689850ff6c5d7af5c5fe5; f333444708f82c4a4d3ccac004da0bfd9cfdfa42 before bde4d6eb53f7d3cdae7e62c9ee84345fdd6e70a6; f333444708f82c4a4d3ccac004da0bfd9cfdfa42 before 140d6fff4ed266592492a23444043842b4af7a62; +3 more |
| CVE-2026-74376 | 9.8 | Aug 15 | md/raid10: reset read_slot when reusing r10bio for discard Affected: d30588b2731fb01e1616cf16c3fe79a1443e29aa before 3cb2a606ce4902eceabe68338df0653312f861f8; d30588b2731fb01e1616cf16c3fe79a1443e29aa before 561c9711e4f545d6464a023168bdee03b00fa945; d30588b2731fb01e1616cf16c3fe79a1443e29aa before ce3030e92f14362880055de5fe3c258971118853; d30588b2731fb01e1616cf16c3fe79a1443e29aa before 742e4afd247d9c972695227716b03d432a7e1d26; d30588b2731fb01e1616cf16c3fe79a1443e29aa before b7313f23ea5a79b199a007bfad64a866cc2c22e7; d30588b2731fb01e1616cf16c3fe79a1443e29aa before eb04e3e9c14ed15914f5fd2eae8b6435f54f095f; +2 more |
| CVE-2026-74361 | 9.8 | Aug 15 | nvme: fix FDP fdpcidx bounds check Affected: 30b5f20bb2ddab013035399e5c7e6577da49320a before 5e406928404d67a8da8aa3ae21732e1ea1a04118; 30b5f20bb2ddab013035399e5c7e6577da49320a before 5d0e7d2af884b91329235abb16652ae4eead8079; 30b5f20bb2ddab013035399e5c7e6577da49320a before 0967074f6830718fd2597404ef119bddd0dbfd00; 6.16 |
| CVE-2026-74350 | 9.8 | Aug 15 | ocfs2: validate fast symlink target during inode read Affected: ea022dfb3c2a4680483b00eb2fecc9fc4f6091d1 before dcabbf7da43825e23e5e89adccc1430faee1bce1; ea022dfb3c2a4680483b00eb2fecc9fc4f6091d1 before 030d4caae89977b80349df95523dfda1dfb10f73; ea022dfb3c2a4680483b00eb2fecc9fc4f6091d1 before d94bf50756d7f80bb728ad58246376649e1035b6; ea022dfb3c2a4680483b00eb2fecc9fc4f6091d1 before f9e2cb692b77a679b1f4cc2b7b277fa908586533; ea022dfb3c2a4680483b00eb2fecc9fc4f6091d1 before e234973f286ed2e8961a24561ec91594ec3e3ff8; 3.5 |
| CVE-2026-74345 | 9.8 | Aug 15 | RDMA/siw: Fix endpoint/socket association handling Affected: 6c52fdc244b5ccc468006fd65a504d4ee33743c7 before ff584d3735b13a1d7f8cd072f98fea40b6062518; 6c52fdc244b5ccc468006fd65a504d4ee33743c7 before b28d513393f81e2de00f82970487a9d001557e4e; 6c52fdc244b5ccc468006fd65a504d4ee33743c7 before f6183983ce1ff254d629a333739082b39d7c5eb6; 6c52fdc244b5ccc468006fd65a504d4ee33743c7 before b6cf763eee0a932792bef64ceaca568d324192fc; 6c52fdc244b5ccc468006fd65a504d4ee33743c7 before ea4f6f6c53577fb3f05dbd78b15e586772d49831; 5.3 |
| CVE-2026-74315 | 9.8 | Aug 15 | lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file() Affected: 3de744ee4e4557da0d63be8a97ad44b4dad58912 before 686c2434f9f16b87aeed18d76cc562df9f2695ab; 3de744ee4e4557da0d63be8a97ad44b4dad58912 before 6e4c62caecf792e8a15ad9bc7f371e57c17e3302; 7.1 |
| CVE-2026-74269 | 9.8 | Aug 15 | bnxt: fix head underflow on XDP head-grow Affected: f6974b4c2d8e1062b5a52228ee47293c15b4ee1e before 3e8f3959a7fd28461b8cd9708c21286b4250b77a; f6974b4c2d8e1062b5a52228ee47293c15b4ee1e before ff34e5a26a26c92142afea11455e259c4c4c617b; f6974b4c2d8e1062b5a52228ee47293c15b4ee1e before 4c03275bc4435cc8e25f7f3f08aff58c0e783d8d; f6974b4c2d8e1062b5a52228ee47293c15b4ee1e before bb72b1c6755631c74b7e0878ee55bb81c06776c0; f6974b4c2d8e1062b5a52228ee47293c15b4ee1e before e26657fe3b85c068b01f42bb0c602f242d643ba9; e9f11bfc03fb0d3c86f91b8ae945bb10f7e19c16; +4 more |
| CVE-2026-74268 | 9.8 | Aug 15 | tcp: clear sock_ops cb flags before force-closing a child socket Affected: d44874910a26f3a8f81edf873a2473363f07f660 before 5d5389b2c37ca00da61d1407618ebe15abae0c8b; d44874910a26f3a8f81edf873a2473363f07f660 before 9f30ba9aa0270a18fdd1e6cd426c480c35f7de9d; d44874910a26f3a8f81edf873a2473363f07f660 before 71e9c53220abd7f5a45aa4d5e5b420d3479f3a4f; d44874910a26f3a8f81edf873a2473363f07f660 before 9fffa6465851a1910a6e9cb7272787dd615b26b1; d44874910a26f3a8f81edf873a2473363f07f660 before fe23d56e9266d58ba5c380f1970118eedeee0b68; d44874910a26f3a8f81edf873a2473363f07f660 before ce311bd2e36596f0aa2c92ca86fb3e019ac57eae; +3 more |
| CVE-2026-74267 | 9.8 | Aug 15 | net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Affected: cc71a757da78dd4aa1b4a9b19cb011833730ccf2 before bb9cfd874ee884117b33e92a002b9a45b48202f4; eda741fe155ddf5ecd2dd3bfbd4fc3c0c7dbb450 before 7a05af7f58566682b73578b72ca8e53a268c43bd; 829c49b6b2ff45b043739168fd1245e4e1a91a30 before eba49fd85995a3851c597fa2d214f8d21736e1d8; 2f9761a94bae33d26e6a81b31b36e7d776d93dc1 before e8c6dbadf139cb14ea6ed14add6ed6e88504dedd; 4d55144b12e742404bb3f8fee6038bafbf45619d before e4615aa6bb7802944ae790cb4b3ef8c1b7491af3; 342debc12183b51773b3345ba267e9263bdfaaef before 755108bb7a5083e911294c416cfea605dc75632f; +14 more |
| CVE-2026-74255 | 9.8 | Aug 15 | tipc: fix UAF in tipc_l2_send_msg() Affected: 282b3a056225b35024246f63feb91d769d714dad before 609ced2301be1df7e7ed2ef47d1d916674e6ba3b; 282b3a056225b35024246f63feb91d769d714dad before 71aafa16d79b107b33837f60b6cbc7d0cb8c5708; 282b3a056225b35024246f63feb91d769d714dad before f4002f1c669cc02e3763f479fc25ff1dfa9e2420; 282b3a056225b35024246f63feb91d769d714dad before 50ff092633b06382e5091dd5b093ce943d4ac2f9; 282b3a056225b35024246f63feb91d769d714dad before aef12b5ce793dea6b3a97a58fd0f946000ae8945; 282b3a056225b35024246f63feb91d769d714dad before 0d8a12d7143126afdf9fbe2e3d438650dd6603ed; +3 more |
| CVE-2026-72494 | 9.8 | Aug 15 | RDMA/irdma: Replace waitqueue and flag with completion Affected: 44d9e52977a1b90b0db1c7f8b197c218e9226520 before 7d89bff21c12e543d12ad70cb0103cf815891b24; 44d9e52977a1b90b0db1c7f8b197c218e9226520 before 8de303efe2ff4fcbf240dfc6eb3469e1e8f18a3f; 44d9e52977a1b90b0db1c7f8b197c218e9226520 before 706591cccdd3ac2c0ddc8c2ed6c89a6be9865826; 44d9e52977a1b90b0db1c7f8b197c218e9226520 before bde37aed0724c0139dea177f3aae8d989b6babb1; 44d9e52977a1b90b0db1c7f8b197c218e9226520 before d9c8c45e6d2f438a3c8e643ae78b59454fa0fadd; 5.14 |
| CVE-2026-72491 | 9.8 | Aug 15 | net/9p: fix race condition on rdma->state in trans_rdma.c Affected: 473c7dd1d7b59ff8f88a5154737e3eac78a96e5b before 4cee2b8766045059d5e0b8114837b4a8efe827ac; 473c7dd1d7b59ff8f88a5154737e3eac78a96e5b before 5424138848eb7d7d8a7196676e90a2cbf2142454; 473c7dd1d7b59ff8f88a5154737e3eac78a96e5b before 3970a19a80de530b801b6256354d4a529a9a2d6c; 473c7dd1d7b59ff8f88a5154737e3eac78a96e5b before 8aadc136d8e8d8fc95d7982d213cfe2234dfcf2b; 473c7dd1d7b59ff8f88a5154737e3eac78a96e5b before 151f8cf5b23d8a534d884432a82a6d54d5a61989; 473c7dd1d7b59ff8f88a5154737e3eac78a96e5b before 13bf9879b778b2f4b260b45bed18f31806120d1e; +11 more |
| CVE-2026-72477 | 9.8 | Aug 15 | fs/ntfs3: call _ntfs_bad_inode() when failing to rename Affected: 519b078998ce6e729f98dccf35505b4756985d11 before 580896e33003845de66c75cd61544cf9d9bfbe15; 519b078998ce6e729f98dccf35505b4756985d11 before ff825bf0521f6da2f30878cbad18ab7b341bc31b; 519b078998ce6e729f98dccf35505b4756985d11 before e8ed78f40eecd0176fda71d673f6957c98e7ffbe; 6.17 |
| CVE-2026-72473 | 9.8 | Aug 15 | xprtrdma: Decouple req recycling from RPC completion Affected: 0ab115237025f5e379620bbcd56a02697d07b002 before 740975054a1970c0cf15f70ac39724a064f45847; 0ab115237025f5e379620bbcd56a02697d07b002 before 9f3d9b68c1c6c51746e5ecdb52b2e6a2901de37e; 0ab115237025f5e379620bbcd56a02697d07b002 before e7632089523acddcdd8f090ad19e96fb3107b04d; 0ab115237025f5e379620bbcd56a02697d07b002 before 53442c7d0c888e51b8bc3da196970a669cc6b294; 0ab115237025f5e379620bbcd56a02697d07b002 before 8203f760a72bd39a3b66bc4eff0aa272a99fe22b; 0ab115237025f5e379620bbcd56a02697d07b002 before e786233d2e0bbff9a82e43f02ae3a46ab4b08ec3; +1 more |
| CVE-2026-72472 | 9.8 | Aug 15 | nfs: use nfsi->rwsem to protect traversal of the file lock list Affected: c69899a17ca4836230720e65493942d9582a0424 before 1cda95bf2e9c0e6b63545b7565fe4a1e474322f4; c69899a17ca4836230720e65493942d9582a0424 before f161ef7b0dd2f51fdb002ba4a4e9bf0ee7409218; c69899a17ca4836230720e65493942d9582a0424 before e68035178e65e2b3aa386ce61202ff33724ae418; c69899a17ca4836230720e65493942d9582a0424 before 4837fb36219e6c08b666bc31a86841bad8526358; 4.0 |
| CVE-2026-72466 | 9.8 | Aug 15 | xprtrdma: Fix bcall rep leak and unbounded peek Affected: 41c8f70f5a3db7e06179186b6525fd9ee1d7d314 before 0cee8f9c3b14bd6dee9c4310090a7f45b89b834f; 41c8f70f5a3db7e06179186b6525fd9ee1d7d314 before 7afc2f8d2fd9394724df9eaf22ce7a71029a5fba; 41c8f70f5a3db7e06179186b6525fd9ee1d7d314 before 88b5346284a184a6b7d019912232a571d672d3e3; 41c8f70f5a3db7e06179186b6525fd9ee1d7d314 before 07aa506436be7634e381e1e1f6d0efa9efc81ecc; 41c8f70f5a3db7e06179186b6525fd9ee1d7d314 before d7a2870dde3bb09d51d6b9c877642996ad6b92dd; 41c8f70f5a3db7e06179186b6525fd9ee1d7d314 before 118a16a18c59f7ad8084b2d13988839b669fca10; +2 more |
| CVE-2026-72463 | 9.8 | Aug 15 | xfrm: Fix dev use-after-free in xfrm async resumption Affected: 4236c30b437b80f673b9e08c8fae38b8d471ac9e before fed4d3195a31125566876952ce66113ec1eb9008; 0f451b43c88bf2b9c038b414be580efee42e031b before 1acd93259b6be269e26be5d71c224bccd1f8352f; 1c428b03840094410c5fb6a5db30640486bbbfcb before 63a30015199912bd5055bead8001b1ae68a67cdb; 1c428b03840094410c5fb6a5db30640486bbbfcb before 8045c0df98d4f14c54e5cb875f1c9c0ce89fe4ff; 94439cbe478b53f92223da9aae95fffb28623c3f; 5002beda5cac69d522dc54da0d5d463ed9c963d2; +5 more |
| CVE-2026-72451 | 9.8 | Aug 15 | xfrm: Fix xfrm state cache insertion race Affected: 5e4334dc39443645415450163ff5ff1ee7e79784 before 6dab4dec9a49121d079981ac913569f232c06b06; 81a331a0e72ddc2f75092603d9577bd1a0ca23ad before a1a3360a0c44b8b5c134db2a9d0667b61c9cf523; 81a331a0e72ddc2f75092603d9577bd1a0ca23ad before 041859fd55c81ea55e76d051e39b7b79975b8c7d; 81a331a0e72ddc2f75092603d9577bd1a0ca23ad before ddd3d0132920319ac426e12456013eadbae67e15; 6.12.13 before 6.12.97; 6.13 |
| CVE-2026-72442 | 9.8 | Aug 15 | netfilter: flowtable: fix and simplify IP6IP6 tunnel handling Affected: d98103575dcdd3a730e0901ab457791a9ac6930c before 7f8d816a9aa2729d270418f00c9ef5e85bfc1b31; d98103575dcdd3a730e0901ab457791a9ac6930c before f4c2d8668d85ed125985da663c824a9c25498257; 7.0 |
| CVE-2026-72436 | 9.8 | Aug 15 | netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types Affected: 18f84d41d34fa35d0d64bbaea01fe664553ecc06 before c107233d2ff4fd7cef5d02f9124b99194957a710; 18f84d41d34fa35d0d64bbaea01fe664553ecc06 before 6329d3a9afe715fddda0460cfa46b496d61c2fe0; 18f84d41d34fa35d0d64bbaea01fe664553ecc06 before 7445fe965b7d8756070a40e80f8b73348ccda1d7; 18f84d41d34fa35d0d64bbaea01fe664553ecc06 before c4d257734e91bfcdc71d41843392dd6400b5bb1b; 18f84d41d34fa35d0d64bbaea01fe664553ecc06 before 3219d74e4536658c937fd878a327257b86ce80dd; 18f84d41d34fa35d0d64bbaea01fe664553ecc06 before e4b4984e28c16406ecb318444dea4a8bf47def3e; +1 more |
| CVE-2026-72429 | 9.8 | Aug 15 | ipv6: ioam: fix type confusion of dst_entry Affected: 47ce7c854563fe8450e9cb8dcd62c6470e28076b before ea24f911ead85ba3d570a31e37c52b6c949f6928; 47ce7c854563fe8450e9cb8dcd62c6470e28076b before 5a3b2ee1e96d0580a8ed8deda6dfa430604f9ab0; 47ce7c854563fe8450e9cb8dcd62c6470e28076b before 9ed19e11d2146076d117d51a940643990118449b; 6.16 |
| CVE-2026-72422 | 9.8 | Aug 15 | ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE Affected: dd4e4c811898410e6a3ae3b63207b7c542860907 before c7bef84740d1d57848c74f6f5b996606e43ea4fe; aa7253c2393f6dcd6a1468b0792f6da76edad917 before d0a469122e7bf8338fec1949fb1e8e1290ed8caa; aa7253c2393f6dcd6a1468b0792f6da76edad917 before 7470511d085af1c7a043a60e53d52b512d5a10b1; aa7253c2393f6dcd6a1468b0792f6da76edad917 before 16a1ecf39c217e3d164bd32ef2a4f650abc067fa; aa7253c2393f6dcd6a1468b0792f6da76edad917 before 77bb0bbfcc4e777ca653174689e5e363f8ee63d1; aa7253c2393f6dcd6a1468b0792f6da76edad917 before 1c89da3baa2b1f269178afa87dc30479b8535776; +7 more |
| CVE-2026-72417 | 9.8 | Aug 15 | netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() Affected: ab427db17885814069bae891834f20842f0ac3a4 before 025a41e76b51fbc7b8eaa5bacbaa9621d00e6aa7; ab427db17885814069bae891834f20842f0ac3a4 before 84460b644329e25809b4a6d9279d6359d7fd8ebc; 6.19 |
| CVE-2026-72399 | 9.8 | Aug 15 | net: enetc: check the number of BDs needed for xdp_frame Affected: 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before 1ecb199b0e6d12ab6c26c0b7edf1a8f4472d9aed; 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before f55276160ffad3e235b657ee4b7304eb99b90e5c; 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before cfbc6e9b84dcc0aa2d65c84ea4745af327763209; 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before 1681cc7974a6123f5d5740b03bc11e4784bd2542; 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before d22829101ab675607ad6c3d420fb3ab875f46bbb; 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before 555c5475e787802eeae0d2b91c2f66c330db2767; +1 more |
| CVE-2026-72398 | 9.8 | Aug 15 | sctp: add INIT verification after cookie unpacking Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 81892d83cc897331510f35b30d17f8b0dc285966; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 683a012b984fef4bc155e278742fbe01561e102a; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before bca3100f550281c2f2418652338bced3b35af0e6; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 062bcbf8d1f1051fdeb20b94920031b0e2cb95a2; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 414c5447fe6a200613dd46d7fdc8454622076cb1; 2.6.12 |
| CVE-2026-72393 | 9.8 | Aug 15 | eth: fbnic: don't cache shinfo across skb realloc Affected: b0b0f52042acb324cd39fbefb2b1ae83af8f8ae1 before 83df3e2594cd78aa40b1246a19879abb4891945b; b0b0f52042acb324cd39fbefb2b1ae83af8f8ae1 before 21f304c2aae46625e050c28d979f4b9d83faa85e; b0b0f52042acb324cd39fbefb2b1ae83af8f8ae1 before 62b68b774f06bf52e329f254f0199bc43d350ccf; 6.15 |
| CVE-2026-72381 | 9.8 | Aug 15 | ksmbd: fix use-after-free of fp->owner.name in durable handle owner check Affected: 712cdf917e77a6444ce3836874829d770db20ee6 before fb978d72052704c6b06c6b0f129fcd60b77169f5; c7f0f0d01c88bdcb8b1694d7d321670013f7ed7d before 93d4d46bf9d442a12ea87278049ec416962c627f; 00ce8d6789dae72d042a4522264964c72891ca37 before 5a5ac2852cd326529d02f778bc1aa6184701f4d7; 49110a8ce654bbe56bef7c5e44cce31f4b102b8a before ed98719be41389d416953b8ef9f07a07dfea6b2b; 49110a8ce654bbe56bef7c5e44cce31f4b102b8a before 38637163501fd9e2f684b8cd275d0db5d79f37c6; c908c853f304a4969b5aa10eba0b50350cc65b80; +5 more |
| CVE-2026-72366 | 9.8 | Aug 15 | netfs: Fix netfs_create_write_req() to handle async cache object creation Affected: 7b589a9b45ae32aa9d7bece597490e141198d7a6 before aee03fbc8803a40d65e20f1af816a7219048a426; 7b589a9b45ae32aa9d7bece597490e141198d7a6 before 8ab75e445c161c4cb504aa98e20ce1dd1ecd8e9a; 7b589a9b45ae32aa9d7bece597490e141198d7a6 before 1188a9846fadeacf9d1430b528e5217f749d665b; 7b589a9b45ae32aa9d7bece597490e141198d7a6 before dbd6f56d975b23241b7bbb11bb8f562af548a0aa; 6.11 |
| CVE-2026-72355 | 9.8 | Aug 15 | netfs: Fix barriering when walking subrequest list Affected: 288ace2f57c9d06dd2e42bd80d03747d879a4068 before 4cca4b44e561a19c77cb1949ae6846da0539db40; 288ace2f57c9d06dd2e42bd80d03747d879a4068 before be47c047250671c9225c0319ca4695be9b391c59; 288ace2f57c9d06dd2e42bd80d03747d879a4068 before 5c6ce05e406520290c1d89da97fb3cd70c09137d; 6.10 |
| CVE-2026-72351 | 9.8 | Aug 15 | gue: validate REMCSUM private option length Affected: c1aa8347e73e4092411fbd96cc59531fb7e76d04 before 158b9995d3c87f3b93f5c22df54a12e12a3438b3; c1aa8347e73e4092411fbd96cc59531fb7e76d04 before 7c6876ec1b227261b51803f784c7be1b2242a1a0; c1aa8347e73e4092411fbd96cc59531fb7e76d04 before 2c4de9988e9ddc760b750d6b6e701c35ff60ad14; c1aa8347e73e4092411fbd96cc59531fb7e76d04 before 2a99224c120823987e4d829726f4ecb33e03fc1e; c1aa8347e73e4092411fbd96cc59531fb7e76d04 before 61e78679c7c9ca685bff58e4b6348304dc60aafd; c1aa8347e73e4092411fbd96cc59531fb7e76d04 before 4a4a1d41c6e901e773bcf795f562a47fa71f692a; +3 more |
| CVE-2026-72339 | 9.8 | Aug 15 | qede: fix off-by-one in BD ring consumption on build_skb failure Affected: 8a8633978b842c88fbcfe00d4e5dde96048f630e before ecc05d4b20220a09c9c69584fc46ca55248a374a; 8a8633978b842c88fbcfe00d4e5dde96048f630e before 07be8b8adf91b7ada4c3dacce064d572a6066421; 8a8633978b842c88fbcfe00d4e5dde96048f630e before 1624aa100c0b218181aa74e3696a389b509298cb; 8a8633978b842c88fbcfe00d4e5dde96048f630e before 0bf78df2d3ecb1f4964ff42a7327d25845955153; 8a8633978b842c88fbcfe00d4e5dde96048f630e before 814a5edac8c9fc04051808d5faaa93768e989281; 8a8633978b842c88fbcfe00d4e5dde96048f630e before b066420e57f3402a52c998678b4678252ac9bb63; +3 more |
| CVE-2026-72323 | 9.8 | Aug 15 | ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 7265c747eec415ca3109a6a14a419f7ae433b780; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before d107b4c4f8274763b7ea5ab05d45cef78e4b81ba; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 74b301f7f197517016befb5f5dfab01f7bc64be5; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 40a1e998cb266ed4cb529a0bb4fee2b0ba732702; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 165258303357e54b75fc19b341ae2a2b7c9e3910; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 75e984fe0cb9e7fbde0c8ee838c61ce8573d3ea3; +3 more |
| CVE-2026-72322 | 9.8 | Aug 15 | ipv6: mcast: Fix potential UAF in MLD delayed work Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before f12b63ef26a035c5a29b3ef56401e38199010d4a; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 0401d6cf7877c9be36652385dfcbf7f891b8b590; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before f03b0a45535d49bdab7e502efaacee205b2a7865; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9815e834f5ff8b39e0ea9f0dbd532f4a3b8f0785; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before ebbebf6cee950d7f1c81990256c0eae9e62572ae; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9ce741c22df4fd9546e30306317ac7df3607e48f; +3 more |
| CVE-2026-72319 | 9.8 | Aug 15 | ipvs: ensure inner headers in ICMP errors are in headroom Affected: f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before 19657b3a17b774ae4e2f2635b5ae8638c9344a40; f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before dac813101914c21219ac221a60a31a11bc90e7ec; f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before dd22f74a09e25ca298ced0a3763ef353242cb78d; f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before 9bc9b95aee2b2e3f1301a16a67ee504960402875; f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before a735f9964a3d9ed97daf9b08507f8b5bcafe6326; f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before 8f48cfe657409fb5c7ba0521b14da6d47546d9cf; +3 more |
| CVE-2026-72317 | 9.8 | Aug 15 | SUNRPC: pin upper rpc_clnt across the TLS connect_worker Affected: 75eb6af7acdf566c68d61e98e67ee2f235201c02 before 79cd550f8c884523b604fbfa43eb02def74d6224; 75eb6af7acdf566c68d61e98e67ee2f235201c02 before 7a65b41b657b71d5a77861f47dd13eb4bc8e10d0; 75eb6af7acdf566c68d61e98e67ee2f235201c02 before 5b0427ba582d143a364301f825f4e32272f06d2d; 75eb6af7acdf566c68d61e98e67ee2f235201c02 before d49f6d098ed48775b9d27a9f9c5c220fdf76f102; 75eb6af7acdf566c68d61e98e67ee2f235201c02 before 46bc86c833956219bbfd246c1ffd832a479c5199; 6.5 |
| CVE-2026-72299 | 9.8 | Aug 15 | tipc: restrict socket queue dumps in enqueue tracepoints Affected: 01e661ebfbad40e6280fb8ec25f2861d39ba4387 before ae5d0d9ce767b20a5580bb6dc5e06f3e1b8a0fb0; 01e661ebfbad40e6280fb8ec25f2861d39ba4387 before 273ff83c49b82e4267373adbe629e6ee8aeaa16c; 01e661ebfbad40e6280fb8ec25f2861d39ba4387 before 258fb15b30db4f3941ab335d5e02f744baf1da54; 01e661ebfbad40e6280fb8ec25f2861d39ba4387 before 12876864f9de5fa6f611a30c6c17e405a773bf0a; 01e661ebfbad40e6280fb8ec25f2861d39ba4387 before b9e100815f4b55e9ccaf6af9a3aba173eb13d381; 01e661ebfbad40e6280fb8ec25f2861d39ba4387 before 61a55fa24a5d737436018764a647fe5b6cb36371; +3 more |
| CVE-2026-72251 | 9.8 | Aug 15 | netfilter: nf_nat_sip: reload possible stale data pointer Affected: 7266507d89991fa1e989283e4e032c6d9357fe26 before bded21a4bf9bf86a79148be735723a97ca9a7532; 7266507d89991fa1e989283e4e032c6d9357fe26 before dc11f26685aa850f237226f0f463647aea58ab7c; 7266507d89991fa1e989283e4e032c6d9357fe26 before e38143c9b477f2968024c47c647dd4456a40aff1; 7266507d89991fa1e989283e4e032c6d9357fe26 before 57e4e29644ec054d7021d296407e7ddd844afea2; 7266507d89991fa1e989283e4e032c6d9357fe26 before eae9c6ccb5af69c713a65f8ae219f5c1aa32cd17; 7266507d89991fa1e989283e4e032c6d9357fe26 before 2bcf2c5052fb5e73e255140ab43f056aef409c27; +3 more |
The 500 most important CVEs for this product (exploited first, then by severity)