LI
Product
Linux
On CISA KEVExploited in the wild
9,927
CVEs
11
On KEV
10.0
Max CVSS
1052
New 30D
Severity mix
Critical 490High 8Medium 2Low 0
Watch
Add Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-72366 | 9.8 | Aug 15 | netfs: Fix netfs_create_write_req() to handle async cache object creation Affected: 7b589a9b45ae32aa9d7bece597490e141198d7a6 before aee03fbc8803a40d65e20f1af816a7219048a426; 7b589a9b45ae32aa9d7bece597490e141198d7a6 before 8ab75e445c161c4cb504aa98e20ce1dd1ecd8e9a; 7b589a9b45ae32aa9d7bece597490e141198d7a6 before 1188a9846fadeacf9d1430b528e5217f749d665b; 7b589a9b45ae32aa9d7bece597490e141198d7a6 before dbd6f56d975b23241b7bbb11bb8f562af548a0aa; 6.11 |
| CVE-2026-72355 | 9.8 | Aug 15 | netfs: Fix barriering when walking subrequest list Affected: 288ace2f57c9d06dd2e42bd80d03747d879a4068 before 4cca4b44e561a19c77cb1949ae6846da0539db40; 288ace2f57c9d06dd2e42bd80d03747d879a4068 before be47c047250671c9225c0319ca4695be9b391c59; 288ace2f57c9d06dd2e42bd80d03747d879a4068 before 5c6ce05e406520290c1d89da97fb3cd70c09137d; 6.10 |
| CVE-2026-72351 | 9.8 | Aug 15 | gue: validate REMCSUM private option length Affected: c1aa8347e73e4092411fbd96cc59531fb7e76d04 before 158b9995d3c87f3b93f5c22df54a12e12a3438b3; c1aa8347e73e4092411fbd96cc59531fb7e76d04 before 7c6876ec1b227261b51803f784c7be1b2242a1a0; c1aa8347e73e4092411fbd96cc59531fb7e76d04 before 2c4de9988e9ddc760b750d6b6e701c35ff60ad14; c1aa8347e73e4092411fbd96cc59531fb7e76d04 before 2a99224c120823987e4d829726f4ecb33e03fc1e; c1aa8347e73e4092411fbd96cc59531fb7e76d04 before 61e78679c7c9ca685bff58e4b6348304dc60aafd; c1aa8347e73e4092411fbd96cc59531fb7e76d04 before 4a4a1d41c6e901e773bcf795f562a47fa71f692a; +3 more |
| CVE-2026-72339 | 9.8 | Aug 15 | qede: fix off-by-one in BD ring consumption on build_skb failure Affected: 8a8633978b842c88fbcfe00d4e5dde96048f630e before ecc05d4b20220a09c9c69584fc46ca55248a374a; 8a8633978b842c88fbcfe00d4e5dde96048f630e before 07be8b8adf91b7ada4c3dacce064d572a6066421; 8a8633978b842c88fbcfe00d4e5dde96048f630e before 1624aa100c0b218181aa74e3696a389b509298cb; 8a8633978b842c88fbcfe00d4e5dde96048f630e before 0bf78df2d3ecb1f4964ff42a7327d25845955153; 8a8633978b842c88fbcfe00d4e5dde96048f630e before 814a5edac8c9fc04051808d5faaa93768e989281; 8a8633978b842c88fbcfe00d4e5dde96048f630e before b066420e57f3402a52c998678b4678252ac9bb63; +3 more |
| CVE-2026-72323 | 9.8 | Aug 15 | ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 7265c747eec415ca3109a6a14a419f7ae433b780; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before d107b4c4f8274763b7ea5ab05d45cef78e4b81ba; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 74b301f7f197517016befb5f5dfab01f7bc64be5; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 40a1e998cb266ed4cb529a0bb4fee2b0ba732702; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 165258303357e54b75fc19b341ae2a2b7c9e3910; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 75e984fe0cb9e7fbde0c8ee838c61ce8573d3ea3; +3 more |
| CVE-2026-72322 | 9.8 | Aug 15 | ipv6: mcast: Fix potential UAF in MLD delayed work Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before f12b63ef26a035c5a29b3ef56401e38199010d4a; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 0401d6cf7877c9be36652385dfcbf7f891b8b590; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before f03b0a45535d49bdab7e502efaacee205b2a7865; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9815e834f5ff8b39e0ea9f0dbd532f4a3b8f0785; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before ebbebf6cee950d7f1c81990256c0eae9e62572ae; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9ce741c22df4fd9546e30306317ac7df3607e48f; +3 more |
| CVE-2026-72319 | 9.8 | Aug 15 | ipvs: ensure inner headers in ICMP errors are in headroom Affected: f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before 19657b3a17b774ae4e2f2635b5ae8638c9344a40; f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before dac813101914c21219ac221a60a31a11bc90e7ec; f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before dd22f74a09e25ca298ced0a3763ef353242cb78d; f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before 9bc9b95aee2b2e3f1301a16a67ee504960402875; f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before a735f9964a3d9ed97daf9b08507f8b5bcafe6326; f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e before 8f48cfe657409fb5c7ba0521b14da6d47546d9cf; +3 more |
| CVE-2026-72317 | 9.8 | Aug 15 | SUNRPC: pin upper rpc_clnt across the TLS connect_worker Affected: 75eb6af7acdf566c68d61e98e67ee2f235201c02 before 79cd550f8c884523b604fbfa43eb02def74d6224; 75eb6af7acdf566c68d61e98e67ee2f235201c02 before 7a65b41b657b71d5a77861f47dd13eb4bc8e10d0; 75eb6af7acdf566c68d61e98e67ee2f235201c02 before 5b0427ba582d143a364301f825f4e32272f06d2d; 75eb6af7acdf566c68d61e98e67ee2f235201c02 before d49f6d098ed48775b9d27a9f9c5c220fdf76f102; 75eb6af7acdf566c68d61e98e67ee2f235201c02 before 46bc86c833956219bbfd246c1ffd832a479c5199; 6.5 |
| CVE-2026-72299 | 9.8 | Aug 15 | tipc: restrict socket queue dumps in enqueue tracepoints Affected: 01e661ebfbad40e6280fb8ec25f2861d39ba4387 before ae5d0d9ce767b20a5580bb6dc5e06f3e1b8a0fb0; 01e661ebfbad40e6280fb8ec25f2861d39ba4387 before 273ff83c49b82e4267373adbe629e6ee8aeaa16c; 01e661ebfbad40e6280fb8ec25f2861d39ba4387 before 258fb15b30db4f3941ab335d5e02f744baf1da54; 01e661ebfbad40e6280fb8ec25f2861d39ba4387 before 12876864f9de5fa6f611a30c6c17e405a773bf0a; 01e661ebfbad40e6280fb8ec25f2861d39ba4387 before b9e100815f4b55e9ccaf6af9a3aba173eb13d381; 01e661ebfbad40e6280fb8ec25f2861d39ba4387 before 61a55fa24a5d737436018764a647fe5b6cb36371; +3 more |
| CVE-2026-72251 | 9.8 | Aug 15 | netfilter: nf_nat_sip: reload possible stale data pointer Affected: 7266507d89991fa1e989283e4e032c6d9357fe26 before bded21a4bf9bf86a79148be735723a97ca9a7532; 7266507d89991fa1e989283e4e032c6d9357fe26 before dc11f26685aa850f237226f0f463647aea58ab7c; 7266507d89991fa1e989283e4e032c6d9357fe26 before e38143c9b477f2968024c47c647dd4456a40aff1; 7266507d89991fa1e989283e4e032c6d9357fe26 before 57e4e29644ec054d7021d296407e7ddd844afea2; 7266507d89991fa1e989283e4e032c6d9357fe26 before eae9c6ccb5af69c713a65f8ae219f5c1aa32cd17; 7266507d89991fa1e989283e4e032c6d9357fe26 before 2bcf2c5052fb5e73e255140ab43f056aef409c27; +3 more |
| CVE-2026-72249 | 9.8 | Aug 15 | netfilter: flowtable: use dst in this direction when pushing IPIP header Affected: d30301ba4b07ac92eb38353a111833b009003170 before ecb78fbb03d3f86e2e93767875e273308086a424; d30301ba4b07ac92eb38353a111833b009003170 before c328b90c17fc5fa7786503695152880b2afb9326; 6.19 |
| CVE-2026-72248 | 9.8 | Aug 15 | netfilter: flowtable: support IPIP tunnel with direct xmit Affected: d30301ba4b07ac92eb38353a111833b009003170 before 0880c4ed122d0cddc9f29a2b28f055d1f24f0fca; d30301ba4b07ac92eb38353a111833b009003170 before fa7395c02d95e51bad2952325d2d6503bfbad437; 6.19 |
| CVE-2026-72234 | 9.8 | Aug 15 | batman-adv: access unicast_ttvn skb->data only after skb realloc Affected: c018ad3de61a1dc4194879a53e5559e094aa7b1a before aa9558af859934f24717d4bab97d61004f91a736; c018ad3de61a1dc4194879a53e5559e094aa7b1a before 9c2c05629e46c1fd43931506d41c56a885a98eb4; c018ad3de61a1dc4194879a53e5559e094aa7b1a before 7b162b36de750565404cd3b98315706622c6974f; c018ad3de61a1dc4194879a53e5559e094aa7b1a before ed90eb5c68420cdfe67ec1f773324198d2ef6f50; c018ad3de61a1dc4194879a53e5559e094aa7b1a before 979175834a699ccc3c4c0b0ba60ecae0f135a587; c018ad3de61a1dc4194879a53e5559e094aa7b1a before b8afcf799b2cc92c41beebd029e53ed18960184a; +3 more |
| CVE-2026-72226 | 9.8 | Aug 15 | batman-adv: tt: prevent TVLV OOB check overflow Affected: 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b before 0de12a4c4847f571d82a9cd96bc633eded41d7c6; 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b before d6ff4764ff784ede25f5c83a6f5883a74c93a5ea; 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b before 1898273c5dc8148267ef9f97cd2517a2822350e7; 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b before 604bd5042fbcd1ab9f7cd98fd847ec017aeede8a; 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b before 7319c0794f91be2734aac695794e7203606b49f8; 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b before 3256c05d5a9db34346eaf20f52dddde984852d77; +3 more |
| CVE-2026-72222 | 9.8 | Aug 15 | sunrpc: pin svc_xprt across the asynchronous TLS handshake callback Affected: b3cbf98e2fdf3cb147a95161560cd25987284330 before f3b55945dd99f29d83e1965d0141040a35262346; b3cbf98e2fdf3cb147a95161560cd25987284330 before 2d4f97d13fff91e0bc539216be88b884b544d49f; b3cbf98e2fdf3cb147a95161560cd25987284330 before 3f9ee75a97a769be258784c22b89657acb5ed9bd; b3cbf98e2fdf3cb147a95161560cd25987284330 before 083e9c2ec7e8bb13b79c9fd7b337abdd758ecc5f; b3cbf98e2fdf3cb147a95161560cd25987284330 before 4f988f3a2808fb659f3880c282041ff067acad78; 6.4 |
| CVE-2026-72221 | 9.8 | Aug 15 | sunrpc: wait for in-flight TLS handshake callback when cancel loses race Affected: b3cbf98e2fdf3cb147a95161560cd25987284330 before 0d8ceb39884148dc7a2fdf71e1cac5961ed1d2b9; b3cbf98e2fdf3cb147a95161560cd25987284330 before e0f4691d42a54d359d8b64509fd9ab938d4f2a33; b3cbf98e2fdf3cb147a95161560cd25987284330 before 65b23bec1fca6e9ebdc3e6041ebf8c6ab074141b; b3cbf98e2fdf3cb147a95161560cd25987284330 before a4f878e8ecd729ccf2e50993444e217583adeace; b3cbf98e2fdf3cb147a95161560cd25987284330 before d00e32f84ca1a77cb67a3fbf59f58dada95f5a21; 6.4 |
| CVE-2026-72220 | 9.8 | Aug 15 | sunrpc: harden rq_procinfo lifecycle to prevent double-free Affected: d9adbb6e10bf7d4223d3d521ede1b2052903bc5e before 66014ab165cb01bfef5836939412a8ef98d5d5ff; d9adbb6e10bf7d4223d3d521ede1b2052903bc5e before 31ba490c02d476a5e4f90b8845932ac9db8aa71b; d9adbb6e10bf7d4223d3d521ede1b2052903bc5e before 18d216788bef06332ff8901670ecf1ed8f6eb614; 6.18 |
| CVE-2026-72217 | 9.8 | Aug 15 | SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing Affected: 2eb2b93581813b74c7174961126f6ec38eadb5a7 before 4a1148f2739d5089c3ca8ae2e9d1053e219ab5df; 2eb2b93581813b74c7174961126f6ec38eadb5a7 before 6029e711a818bf34d6c4b90cafee24f3afffa110; 2eb2b93581813b74c7174961126f6ec38eadb5a7 before 69e18135e2a004a79505451dbef07314ea16e1eb; 2eb2b93581813b74c7174961126f6ec38eadb5a7 before 98414b42530af65cb984ffc12685096a3b5e179a; 2eb2b93581813b74c7174961126f6ec38eadb5a7 before 42f5b80dda6b86e424054baf1475df686c403d5c; 6.6 |
| CVE-2026-72211 | 9.8 | Aug 15 | ntfs: grow index root value before reparent header update Affected: 0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0 before 38d444271604afc6381ddb5a181e391915c35fae; 0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0 before 0bb508fb3b97e4802ec727fd2af4d608f65dd190; 7.1 |
| CVE-2026-72210 | 9.8 | Aug 15 | ntfs: fix off-by-one in mapping pairs decoding bounds checks Affected: 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before bfe835e535fe0aa5767fdd8116f62e835ba50b55; 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before 18760a74ef7c28df93726445b5595162e62ed341; 7.1 |
| CVE-2026-72209 | 9.8 | Aug 15 | ntfs: validate attribute values on lookup Affected: 6ceb4cc81ef3409ff79dcb959771f9110787397a before e4c36dfac57a7261e9aeb0f3a7f30944a8aefb56; 6ceb4cc81ef3409ff79dcb959771f9110787397a before d5803e3345dae9c6470bb61869885236276b9a35; 7.1 |
| CVE-2026-72208 | 9.8 | Aug 15 | ntfs: add bounds check before accessing EA entries Affected: c451d34ae14201c2bb40652bf74072a79ff82f7d before d9d9925de1d8f233cc60d3dc356e12f232f97c15; c451d34ae14201c2bb40652bf74072a79ff82f7d before 937282f7d15b593d0be765fa2ced164130ec87f7; 7.1 |
| CVE-2026-72207 | 9.8 | Aug 15 | ntfs: not change 0-byte $DATA attribute to non-resident Affected: 495e90fa334828d4119061e2726af51d0a0fb4ed before ceb49c37250125d418410988f2376ed4d57a6706; 495e90fa334828d4119061e2726af51d0a0fb4ed before 0aad21570197973af4a1b25b3fb8ed3aeb9e7670; 7.1 |
| CVE-2026-72206 | 9.8 | Aug 15 | ntfs: validate index block header more strictly Affected: 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before 34a49b3e94a50f45b62c6e6f574f676a079ba23e; 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before 14bc34fe948523dc2b0174691f9af9e74eb4f3fd; 7.1 |
| CVE-2026-72201 | 9.8 | Aug 15 | ntfs: validate index entries on reading Affected: 0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0 before e2b95d3adb558ddd5685f9e072ec8661d57ee3a9; 0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0 before 2221b691d7b2e17f08153f95848dacaa5d87e21d; 7.1 |
| CVE-2026-72200 | 9.8 | Aug 15 | ntfs: detect mapping-pairs LCN accumulator overflow Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6626fb859f4c4772f2f59751d23937716e03f98f; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 7ffa8f3d30236e0ab897c30bdb01224ff1fe1c89; 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before 7fb64788812d137b37f6d8724e1e41c624c1e814; 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before ec4f061f2219e0f0c6465d56d0380bf749235a53; 2.6.12; 7.1 |
| CVE-2026-72199 | 9.8 | Aug 15 | ntfs: validate resident index root values on lookup Affected: 0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0 before bfb01dd319b6b4c3e79756de7b75ccf0b9a0a247; 0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0 before fcf5bf0e8570798970e3ae8c95d04765ba2c5b97; 7.1 |
| CVE-2026-72194 | 9.8 | Aug 15 | fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow Affected: 82cae269cfa953032fbb8980a7d554d60fb00b17 before 99031d4f63c785d2a985b6a4c64c4256f7117052; 82cae269cfa953032fbb8980a7d554d60fb00b17 before 65357a81f64cb3fbe13b4b937586755e4b3a072f; 82cae269cfa953032fbb8980a7d554d60fb00b17 before 96fb64f9da86fd2dbd78fbe9d9e41ae27e12ce34; 82cae269cfa953032fbb8980a7d554d60fb00b17 before 78612f478f9fadcec4f9b3b089970da67ffb47e9; 82cae269cfa953032fbb8980a7d554d60fb00b17 before 908c9243ba309997b73cbda3e4c563d0fb345ee9; 82cae269cfa953032fbb8980a7d554d60fb00b17 before fdf50c788e0991e42a187ff75479a0df7fb752f1; +2 more |
| CVE-2026-72192 | 9.8 | Aug 15 | ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head Affected: 82cae269cfa953032fbb8980a7d554d60fb00b17 before 0af83b8155cc848e9f5d2c36e20a70d024214649; 82cae269cfa953032fbb8980a7d554d60fb00b17 before cb3161deebcaf8d36d3115abf452c633f2180fc1; 82cae269cfa953032fbb8980a7d554d60fb00b17 before 53c5f3b2da3774b41534728aba295c098c9efa19; 82cae269cfa953032fbb8980a7d554d60fb00b17 before 194b00c99ba971fa7cf6acd747a36032c6de54eb; 82cae269cfa953032fbb8980a7d554d60fb00b17 before aaa1f956c0fc41089a4a534da7df91552a08a47c; 82cae269cfa953032fbb8980a7d554d60fb00b17 before d240f5f9d036b8180224954d9873f172b6be4dd8; +2 more |
| CVE-2026-72191 | 9.8 | Aug 15 | ntfs3: validate split-point offset in indx_insert_into_buffer Affected: 82cae269cfa953032fbb8980a7d554d60fb00b17 before 8e4ba5a38c155bb3c1c11e63cd285b178cdb099e; 82cae269cfa953032fbb8980a7d554d60fb00b17 before 4c2f648139a0a86f4486170f72e24fedd4fae74e; 82cae269cfa953032fbb8980a7d554d60fb00b17 before b232eb5c9fe11ec2368e9b565db69c724c35fbd2; 82cae269cfa953032fbb8980a7d554d60fb00b17 before 7bf74e6baf810fe325f111996496c678fc6e244f; 82cae269cfa953032fbb8980a7d554d60fb00b17 before f3624cc069195001c88df7a291af215f2133ff2c; 82cae269cfa953032fbb8980a7d554d60fb00b17 before 1758a564b6ebe7f4a82f23c9851d1cae15549457; +2 more |
| CVE-2026-72185 | 9.8 | Aug 15 | ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock() Affected: 495e90fa334828d4119061e2726af51d0a0fb4ed before b397b1238a217264bb02f963a1a1eadf71906375; 495e90fa334828d4119061e2726af51d0a0fb4ed before b8d6c528e9d57d263fee1a648409f84a68b2561d; 7.1 |
| CVE-2026-72139 | 9.8 | Aug 15 | tcp: defer md5sig_info kfree past RCU grace period in tcp_connect Affected: 51e547e8c89c661f6fbede4a28b1d33b13625683 before 33a1bee413628378fd036a4f2b17ba86b0bc560c; 51e547e8c89c661f6fbede4a28b1d33b13625683 before da48b9bf1eb95a9cfd09d615ca58cfc2b03de369; 51e547e8c89c661f6fbede4a28b1d33b13625683 before b74cd55038905d5e74c1de109ab78a30b2ea0e1f; 6.18 |
| CVE-2026-72137 | 9.8 | Aug 15 | xfrm: nat_keepalive: avoid double free on send error Affected: f531d13bdfe3f4f084aaa8acae2cb0f02295f5ae before d0a4dc7efa825bce60a8da8f7d43c864a159abde; f531d13bdfe3f4f084aaa8acae2cb0f02295f5ae before 5b0c4c916f202b8fd13d12afb6af62b385622f81; f531d13bdfe3f4f084aaa8acae2cb0f02295f5ae before a8a7e6a9ff8a4c1f067694ddbd44be67fdf36693; f531d13bdfe3f4f084aaa8acae2cb0f02295f5ae before 226f4a490d1a938fc838d8f8c46a4eca864c0d78; 6.11 |
| CVE-2026-72130 | 9.8 | Aug 15 | nvmet-auth: reject short AUTH_RECEIVE buffers Affected: db1312dd95488b5e6ff362ff66fcf953a46b1821 before 584d7d14d9b40b080b1195cec83de86ade63343e; db1312dd95488b5e6ff362ff66fcf953a46b1821 before 80bf7b7f676e3987bbe06af3c359bd56ac91a5a9; db1312dd95488b5e6ff362ff66fcf953a46b1821 before 2eaa3ad450141cfcf187bb43cb8335eb336b5f87; db1312dd95488b5e6ff362ff66fcf953a46b1821 before bc111698b46e43eddd8664cceaa621cd559e99a0; db1312dd95488b5e6ff362ff66fcf953a46b1821 before 779575bc35c687697ba69e904f2cd22e60112534; 6.0 |
| CVE-2026-72129 | 9.8 | Aug 15 | nvmet-rdma: handle inline data with a nonzero offset Affected: 0d5ee2b2ab4f6776c361bc975c2323bc8b5cf349 before c2106ba1b14d644a5203bea1a50dbe25dcad713c; 0d5ee2b2ab4f6776c361bc975c2323bc8b5cf349 before bf8bcc1c137d54a62a428b00051fdbb13660673b; 0d5ee2b2ab4f6776c361bc975c2323bc8b5cf349 before 11401371152b228448a41d79c6de1c938f93049a; 0d5ee2b2ab4f6776c361bc975c2323bc8b5cf349 before 7c96581169c9d9a7d0726e554313acfbead6141c; 0d5ee2b2ab4f6776c361bc975c2323bc8b5cf349 before 42a8ea3acd883f4f210d9e54e0975b1e2292b529; 0d5ee2b2ab4f6776c361bc975c2323bc8b5cf349 before 2944113ad5fbcdf5d349d857c03d2a44b6de75b8; +3 more |
| CVE-2026-72098 | 9.8 | Aug 15 | dm-verity: fix buffer overflow in FEC calculation Affected: a739ff3f543afbb4a041c16cd0182c8e8d366e70 before 374775626c327aec2425c16b4d36706e5f8718b8; a739ff3f543afbb4a041c16cd0182c8e8d366e70 before dc662eed1c432cc2fd4e9314f58d30b3a8cca7cc; a739ff3f543afbb4a041c16cd0182c8e8d366e70 before 5488d3a69d205e28f74f18857b853aa12e778e66; a739ff3f543afbb4a041c16cd0182c8e8d366e70 before f7990c2b0f08b8841fcd2652d1d7002f5994a7a7; a739ff3f543afbb4a041c16cd0182c8e8d366e70 before 31d6e6c0ba8d5a7bd59660035a089307100c5e8e; 4.5 |
| CVE-2026-72084 | 9.8 | Aug 15 | scsi: target: Bound PR-OUT TransportID parsing to the received buffer Affected: c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 before 88c67c3de914e19172e1d878a7625c5b06c20ec5; c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 before 842248047ef28dbf3b3f7f49a0ec315054d4dab8; c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 before 03fbc7de8d5e85fc8420e57e8304c855efd453ab; c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 before 6ca5de8782e67573a61a6736b6dc0ffe58dcdf59; c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 before 9298078a8f7d8181a04614a34ab655ccdf038204; c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 before 004ccd2d3b4ac36a300e05e01df152e5c02a5a82; +3 more |
| CVE-2026-72083 | 9.8 | Aug 15 | scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE Affected: 4949314c7283ea4f9ade182ca599583b89f7edd6 before 7d56f5c868d92c9d504a34a3ea450bce481c7f63; 4949314c7283ea4f9ade182ca599583b89f7edd6 before 59a2a5a37dc49a641ad6bc64aee34e5a61025ffd; 4949314c7283ea4f9ade182ca599583b89f7edd6 before 9f8076cc73dfa6b10155978c160587e986b22169; 4949314c7283ea4f9ade182ca599583b89f7edd6 before a040004846f1fbe687f6ec76d9ccc27b4ead42e4; 4949314c7283ea4f9ade182ca599583b89f7edd6 before 05b3e37433cf2eaf8867f1c16528aa347bb212ab; 4949314c7283ea4f9ade182ca599583b89f7edd6 before cb7bdae7fba404852ade34b0c1445fbaf3e54fbb; +5 more |
| CVE-2026-72069 | 9.8 | Aug 15 | locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() Affected: 0f383b6dc96e976dfbf2721b0bf10bd96103b341 before af28d801cd2db4cc7378554499bd4a5d84a5517e; 0f383b6dc96e976dfbf2721b0bf10bd96103b341 before 9d1fcd64ab81200e02b7a6db5eb1da8e244e8289; 0f383b6dc96e976dfbf2721b0bf10bd96103b341 before 3cfaac77b3c32ac3940df28866de263c3f45d24c; 0f383b6dc96e976dfbf2721b0bf10bd96103b341 before 1f0d56d3f1e88f20f6e46109402f8c15d59bac37; 0f383b6dc96e976dfbf2721b0bf10bd96103b341 before 633cadbc0b8323f5cc140a285d2432089dbb534e; 0f383b6dc96e976dfbf2721b0bf10bd96103b341 before 83f9fb561c1c3917e19f95523dd933c7d30291aa; +2 more |
| CVE-2026-72065 | 9.8 | Aug 15 | net: mana: Validate the packet length reported by the NIC Affected: ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f before a631f82f89c76084ad5b2b9c043d3b391ffa56d8; ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f before d2568e64d01f480200063fadd67d6938f676c66f; ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f before 2e276b14b6d378372bf0152df89286cbe7632fb0; ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f before 6080189291d958604dcefe513a13900835ac982f; ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f before 6d13eaa13341a8f80aaf86f78591e1b1d393711d; ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f before 282c5214ca4eb3799158c76782646e86d2945d1b; +2 more |
| CVE-2026-72064 | 9.8 | Aug 15 | net: mana: Sync page pool RX frags for CPU Affected: 730ff06d3f5cc2ce0348414b78c10528b767d4a3 before 845c959178ccab020b67bed7f4eae3058135ec80; 730ff06d3f5cc2ce0348414b78c10528b767d4a3 before bc650dd5ce6434286b96e2b26a41af81f679cc7c; 730ff06d3f5cc2ce0348414b78c10528b767d4a3 before c72a0f09c57f92113df69f9b902d11c9e4b132f5; 6.18 |
| CVE-2026-72046 | 9.8 | Aug 15 | gve: fix header buffer corruption with header-split and HW-GRO Affected: 5e37d8254e7f551dda62e7590e819d69c7491845 before 84d3753d4bf284ef770ead6dee2270aaabb3ef41; 5e37d8254e7f551dda62e7590e819d69c7491845 before 35267819b25074084130b6a7be18bbaf44d3ae74; 5e37d8254e7f551dda62e7590e819d69c7491845 before 9f8e7f59b0c2f466be74bd923726b0f5496c27ad; 5e37d8254e7f551dda62e7590e819d69c7491845 before d676c9a73bdcd8237425dbb826f2bd1a25c36e40; 6.9 |
| CVE-2026-72041 | 9.8 | Aug 15 | espintcp: use sk_msg_free_partial to fix partial send Affected: e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 before 518dcb84b997dff461800b079e5f2596389f766a; e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 before 4ea8c051b4bd7feec7749a980f2f70e1782b84d7; e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 before a977f78adce40b39d90d9567e7987bb110102810; e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 before 54d73f18f8919735f4d04d6f43374f75756c0180; e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 before 14c0b42c8a2cd9b5361bbff45b52f69c62c6a286; e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 before a66d45e0ce6d73cd79962d422388e61bfaf0cb50; +3 more |
| CVE-2026-72033 | 9.8 | Aug 15 | orangefs: keep the readdir entry size 64-bit in fill_from_part() Affected: 480e3e532e31666a18520a7964bb4095d7a16b9a before 1679780f482feeb82acb5995587d4fb1d1fe82fd; 480e3e532e31666a18520a7964bb4095d7a16b9a before a72bbb43689591c9d36e3bb45c2d4e688cf92682; 480e3e532e31666a18520a7964bb4095d7a16b9a before 36723b28e3293047f087f4501f1ef4ead418dd84; 480e3e532e31666a18520a7964bb4095d7a16b9a before 07c05601a9a8e5d4481b2a4a16dc0e3c5bc63ad9; 480e3e532e31666a18520a7964bb4095d7a16b9a before fdf06a1b66ff39664b01c6bb6a2aa98d81e8ebe1; 480e3e532e31666a18520a7964bb4095d7a16b9a before 82fc886e244c76fadf05ef1958aaf8815478ccde; +3 more |
| CVE-2026-72020 | 9.8 | Aug 15 | ipvs: reset full ip_vs_seq structs in ip_vs_conn_new Affected: 9a05475cebdd6341884b5901e53870be26e65158 before 3bf9a260188b2a5449cbddc032a749ab433fe328; 9a05475cebdd6341884b5901e53870be26e65158 before 6378c5cb360eb1750f88839d7c3613ea92ac1816; 9a05475cebdd6341884b5901e53870be26e65158 before 32c299e28b8eea6cbbd23b97dc61401e9ef9c445; 9a05475cebdd6341884b5901e53870be26e65158 before 9e36602cbec552286f7e691cfd366525c565ee74; 9a05475cebdd6341884b5901e53870be26e65158 before d0eed7177e822cab83141e5c44b2aa345c7fd379; 9a05475cebdd6341884b5901e53870be26e65158 before 83fb4c2c5344f02eac929f66de3c9d1adfcde04c; +3 more |
| CVE-2026-72014 | 9.8 | Aug 15 | drbd: reject data replies with an out-of-range payload size Affected: b411b3637fa71fce9cf2acf0639009500f5892fe before bca33f5442c3094511719d9db792ce3165d87e76; b411b3637fa71fce9cf2acf0639009500f5892fe before 741a682535deffe9ab7e5c89caf83571efbc9dd9; b411b3637fa71fce9cf2acf0639009500f5892fe before f14e87d7b166490bceb9603b39310e51595d05b9; b411b3637fa71fce9cf2acf0639009500f5892fe before f16866c62656865854106b79bcf6e4ca97a51a92; b411b3637fa71fce9cf2acf0639009500f5892fe before 5f59a8142000f0b8f75c432209ead73c424a745d; b411b3637fa71fce9cf2acf0639009500f5892fe before 38cc4867540ae8beedfe41a1a1a6ed37052c77d6; +3 more |
| CVE-2026-68477 | 9.8 | Aug 15 | ipvs: fix more places with wrong ipv6 transport offsets Affected: 2a3b791e6e1169f374224d164738e9f7be703d77 before 613ce63711b8d431bba90781f133c39a21684f87; 2a3b791e6e1169f374224d164738e9f7be703d77 before 95d4511d81b2b37e5d2bdde5d912e48243eae517; 2a3b791e6e1169f374224d164738e9f7be703d77 before 3a9dc9b55b53d94613a587604b77d3b20024090c; 2a3b791e6e1169f374224d164738e9f7be703d77 before a3f0d5b605cd5da5c95279969fb8cea4e55cee5b; 2a3b791e6e1169f374224d164738e9f7be703d77 before 7350eb7ead172ae8024897d4b0f2e15c5318279c; 2a3b791e6e1169f374224d164738e9f7be703d77 before d4ec18f48ce78a3bf7c999ac908691007375fe99; +3 more |
| CVE-2026-68476 | 9.8 | Aug 15 | ipvs: reload ip header after head reallocation Affected: 8d8e20e2d7bba8c50e64e0eca1cb83956f468e49 before 4f2d1151421520d7ae16ca8d367d0ca09f5dfbd7; 8d8e20e2d7bba8c50e64e0eca1cb83956f468e49 before 657118cad620172dfd8f6ed5717fd75c0d1f7a5a; 8d8e20e2d7bba8c50e64e0eca1cb83956f468e49 before a10f5080afbed242640f2984328de25f84557da1; 8d8e20e2d7bba8c50e64e0eca1cb83956f468e49 before ac6ac3d35bfc0ade9d17d354c84e503a946ebdab; 8d8e20e2d7bba8c50e64e0eca1cb83956f468e49 before e51687fc56c2e39ea6e9532925f1aabd4d529f61; 8d8e20e2d7bba8c50e64e0eca1cb83956f468e49 before 3fb7edd2018bb1ad0a68157383d9b9dac33dd645; +3 more |
| CVE-2026-68426 | 9.8 | Aug 10 | xfrm: fix stale skb->prev after async crypto steals a GSO segment Affected: f53c723902d1ac5f0b0a11d7c9dcbff748dde74e before 4927ab8a8acc8db4fad33e803d1d35e0b16cef83; f53c723902d1ac5f0b0a11d7c9dcbff748dde74e before b58731e0570bfd3989999fc2baf9ee4fecd5bec6; f53c723902d1ac5f0b0a11d7c9dcbff748dde74e before 33e1b0d25ca0d2818c635ff80e6aa0d295e08a98; f53c723902d1ac5f0b0a11d7c9dcbff748dde74e before bbca7cc3b2b4b10afbfee99b81d9ee78f5423046; f53c723902d1ac5f0b0a11d7c9dcbff748dde74e before 3f4c3919baf0944ad96580467c302bc6c7758b00; 4.16 |
| CVE-2026-68388 | 9.8 | Aug 10 | smb/client: handle overlapping allocated ranges in fallocate Affected: c406bb9ece6ef63721daab106f132ff4b4234e81 before aeb58a4eb39a7ff4d7782b4f4ada0fda5e0675d2; 966a3cb7c7db786452a87afdc3b48858fc4d4d6b before 01719883235507b1585e4c51e320d9a7113dc698; 966a3cb7c7db786452a87afdc3b48858fc4d4d6b before f47c7277c03a636fcc3a57969f2dc09567b3c050; 966a3cb7c7db786452a87afdc3b48858fc4d4d6b before 437637f5ff3f573b2edf8571de91fb00a21eb4e6; 966a3cb7c7db786452a87afdc3b48858fc4d4d6b before 377fe3e583e46369ee1004d5cfe12271d6589a68; 966a3cb7c7db786452a87afdc3b48858fc4d4d6b before 7e08ab7a061b17ac1989a225c6afb53f44a86808; +8 more |
The 500 most important CVEs for this product (exploited first, then by severity)