LI
Product
Linux
On CISA KEVExploited in the wild
12,892
CVEs
12
On KEV
10.0
Max CVSS
1052
New 30D
Severity mix
Critical 489High 9Medium 2Low 0
Watch
Add Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-72249 | 9.8 | Aug 15 | netfilter: flowtable: use dst in this direction when pushing IPIP header Affected: d30301ba4b07ac92eb38353a111833b009003170 before ecb78fbb03d3f86e2e93767875e273308086a424; d30301ba4b07ac92eb38353a111833b009003170 before c328b90c17fc5fa7786503695152880b2afb9326; 6.19 |
| CVE-2026-72248 | 9.8 | Aug 15 | netfilter: flowtable: support IPIP tunnel with direct xmit Affected: d30301ba4b07ac92eb38353a111833b009003170 before 0880c4ed122d0cddc9f29a2b28f055d1f24f0fca; d30301ba4b07ac92eb38353a111833b009003170 before fa7395c02d95e51bad2952325d2d6503bfbad437; 6.19 |
| CVE-2026-72234 | 9.8 | Aug 15 | batman-adv: access unicast_ttvn skb->data only after skb realloc Affected: c018ad3de61a1dc4194879a53e5559e094aa7b1a before aa9558af859934f24717d4bab97d61004f91a736; c018ad3de61a1dc4194879a53e5559e094aa7b1a before 9c2c05629e46c1fd43931506d41c56a885a98eb4; c018ad3de61a1dc4194879a53e5559e094aa7b1a before 7b162b36de750565404cd3b98315706622c6974f; c018ad3de61a1dc4194879a53e5559e094aa7b1a before ed90eb5c68420cdfe67ec1f773324198d2ef6f50; c018ad3de61a1dc4194879a53e5559e094aa7b1a before 979175834a699ccc3c4c0b0ba60ecae0f135a587; c018ad3de61a1dc4194879a53e5559e094aa7b1a before b8afcf799b2cc92c41beebd029e53ed18960184a; +3 more |
| CVE-2026-72226 | 9.8 | Aug 15 | batman-adv: tt: prevent TVLV OOB check overflow Affected: 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b before 0de12a4c4847f571d82a9cd96bc633eded41d7c6; 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b before d6ff4764ff784ede25f5c83a6f5883a74c93a5ea; 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b before 1898273c5dc8148267ef9f97cd2517a2822350e7; 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b before 604bd5042fbcd1ab9f7cd98fd847ec017aeede8a; 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b before 7319c0794f91be2734aac695794e7203606b49f8; 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b before 3256c05d5a9db34346eaf20f52dddde984852d77; +3 more |
| CVE-2026-72222 | 9.8 | Aug 15 | sunrpc: pin svc_xprt across the asynchronous TLS handshake callback Affected: b3cbf98e2fdf3cb147a95161560cd25987284330 before f3b55945dd99f29d83e1965d0141040a35262346; b3cbf98e2fdf3cb147a95161560cd25987284330 before 2d4f97d13fff91e0bc539216be88b884b544d49f; b3cbf98e2fdf3cb147a95161560cd25987284330 before 3f9ee75a97a769be258784c22b89657acb5ed9bd; b3cbf98e2fdf3cb147a95161560cd25987284330 before 083e9c2ec7e8bb13b79c9fd7b337abdd758ecc5f; b3cbf98e2fdf3cb147a95161560cd25987284330 before 4f988f3a2808fb659f3880c282041ff067acad78; 6.4 |
| CVE-2026-72221 | 9.8 | Aug 15 | sunrpc: wait for in-flight TLS handshake callback when cancel loses race Affected: b3cbf98e2fdf3cb147a95161560cd25987284330 before 0d8ceb39884148dc7a2fdf71e1cac5961ed1d2b9; b3cbf98e2fdf3cb147a95161560cd25987284330 before e0f4691d42a54d359d8b64509fd9ab938d4f2a33; b3cbf98e2fdf3cb147a95161560cd25987284330 before 65b23bec1fca6e9ebdc3e6041ebf8c6ab074141b; b3cbf98e2fdf3cb147a95161560cd25987284330 before a4f878e8ecd729ccf2e50993444e217583adeace; b3cbf98e2fdf3cb147a95161560cd25987284330 before d00e32f84ca1a77cb67a3fbf59f58dada95f5a21; 6.4 |
| CVE-2026-72220 | 9.8 | Aug 15 | sunrpc: harden rq_procinfo lifecycle to prevent double-free Affected: d9adbb6e10bf7d4223d3d521ede1b2052903bc5e before 66014ab165cb01bfef5836939412a8ef98d5d5ff; d9adbb6e10bf7d4223d3d521ede1b2052903bc5e before 31ba490c02d476a5e4f90b8845932ac9db8aa71b; d9adbb6e10bf7d4223d3d521ede1b2052903bc5e before 18d216788bef06332ff8901670ecf1ed8f6eb614; 6.18 |
| CVE-2026-72217 | 9.8 | Aug 15 | SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing Affected: 2eb2b93581813b74c7174961126f6ec38eadb5a7 before 4a1148f2739d5089c3ca8ae2e9d1053e219ab5df; 2eb2b93581813b74c7174961126f6ec38eadb5a7 before 6029e711a818bf34d6c4b90cafee24f3afffa110; 2eb2b93581813b74c7174961126f6ec38eadb5a7 before 69e18135e2a004a79505451dbef07314ea16e1eb; 2eb2b93581813b74c7174961126f6ec38eadb5a7 before 98414b42530af65cb984ffc12685096a3b5e179a; 2eb2b93581813b74c7174961126f6ec38eadb5a7 before 42f5b80dda6b86e424054baf1475df686c403d5c; 6.6 |
| CVE-2026-72211 | 9.8 | Aug 15 | ntfs: grow index root value before reparent header update Affected: 0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0 before 38d444271604afc6381ddb5a181e391915c35fae; 0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0 before 0bb508fb3b97e4802ec727fd2af4d608f65dd190; 7.1 |
| CVE-2026-72210 | 9.8 | Aug 15 | ntfs: fix off-by-one in mapping pairs decoding bounds checks Affected: 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before bfe835e535fe0aa5767fdd8116f62e835ba50b55; 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before 18760a74ef7c28df93726445b5595162e62ed341; 7.1 |
| CVE-2026-72209 | 9.8 | Aug 15 | ntfs: validate attribute values on lookup Affected: 6ceb4cc81ef3409ff79dcb959771f9110787397a before e4c36dfac57a7261e9aeb0f3a7f30944a8aefb56; 6ceb4cc81ef3409ff79dcb959771f9110787397a before d5803e3345dae9c6470bb61869885236276b9a35; 7.1 |
| CVE-2026-72208 | 9.8 | Aug 15 | ntfs: add bounds check before accessing EA entries Affected: c451d34ae14201c2bb40652bf74072a79ff82f7d before d9d9925de1d8f233cc60d3dc356e12f232f97c15; c451d34ae14201c2bb40652bf74072a79ff82f7d before 937282f7d15b593d0be765fa2ced164130ec87f7; 7.1 |
| CVE-2026-72207 | 9.8 | Aug 15 | ntfs: not change 0-byte $DATA attribute to non-resident Affected: 495e90fa334828d4119061e2726af51d0a0fb4ed before ceb49c37250125d418410988f2376ed4d57a6706; 495e90fa334828d4119061e2726af51d0a0fb4ed before 0aad21570197973af4a1b25b3fb8ed3aeb9e7670; 7.1 |
| CVE-2026-72206 | 9.8 | Aug 15 | ntfs: validate index block header more strictly Affected: 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before 34a49b3e94a50f45b62c6e6f574f676a079ba23e; 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before 14bc34fe948523dc2b0174691f9af9e74eb4f3fd; 7.1 |
| CVE-2026-72201 | 9.8 | Aug 15 | ntfs: validate index entries on reading Affected: 0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0 before e2b95d3adb558ddd5685f9e072ec8661d57ee3a9; 0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0 before 2221b691d7b2e17f08153f95848dacaa5d87e21d; 7.1 |
| CVE-2026-72200 | 9.8 | Aug 15 | ntfs: detect mapping-pairs LCN accumulator overflow Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6626fb859f4c4772f2f59751d23937716e03f98f; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 7ffa8f3d30236e0ab897c30bdb01224ff1fe1c89; 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before 7fb64788812d137b37f6d8724e1e41c624c1e814; 1e9ea7e04472d4e5e12e58c881eaacfb3e49b669 before ec4f061f2219e0f0c6465d56d0380bf749235a53; 2.6.12; 7.1 |
| CVE-2026-72199 | 9.8 | Aug 15 | ntfs: validate resident index root values on lookup Affected: 0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0 before bfb01dd319b6b4c3e79756de7b75ccf0b9a0a247; 0a8ac0c1fa0b99a5b29002bc7f232ed7eafddef0 before fcf5bf0e8570798970e3ae8c95d04765ba2c5b97; 7.1 |
| CVE-2026-72194 | 9.8 | Aug 15 | fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow Affected: 82cae269cfa953032fbb8980a7d554d60fb00b17 before 99031d4f63c785d2a985b6a4c64c4256f7117052; 82cae269cfa953032fbb8980a7d554d60fb00b17 before 65357a81f64cb3fbe13b4b937586755e4b3a072f; 82cae269cfa953032fbb8980a7d554d60fb00b17 before 96fb64f9da86fd2dbd78fbe9d9e41ae27e12ce34; 82cae269cfa953032fbb8980a7d554d60fb00b17 before 78612f478f9fadcec4f9b3b089970da67ffb47e9; 82cae269cfa953032fbb8980a7d554d60fb00b17 before 908c9243ba309997b73cbda3e4c563d0fb345ee9; 82cae269cfa953032fbb8980a7d554d60fb00b17 before fdf50c788e0991e42a187ff75479a0df7fb752f1; +2 more |
| CVE-2026-72192 | 9.8 | Aug 15 | ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head Affected: 82cae269cfa953032fbb8980a7d554d60fb00b17 before 0af83b8155cc848e9f5d2c36e20a70d024214649; 82cae269cfa953032fbb8980a7d554d60fb00b17 before cb3161deebcaf8d36d3115abf452c633f2180fc1; 82cae269cfa953032fbb8980a7d554d60fb00b17 before 53c5f3b2da3774b41534728aba295c098c9efa19; 82cae269cfa953032fbb8980a7d554d60fb00b17 before 194b00c99ba971fa7cf6acd747a36032c6de54eb; 82cae269cfa953032fbb8980a7d554d60fb00b17 before aaa1f956c0fc41089a4a534da7df91552a08a47c; 82cae269cfa953032fbb8980a7d554d60fb00b17 before d240f5f9d036b8180224954d9873f172b6be4dd8; +2 more |
| CVE-2026-72191 | 9.8 | Aug 15 | ntfs3: validate split-point offset in indx_insert_into_buffer Affected: 82cae269cfa953032fbb8980a7d554d60fb00b17 before 8e4ba5a38c155bb3c1c11e63cd285b178cdb099e; 82cae269cfa953032fbb8980a7d554d60fb00b17 before 4c2f648139a0a86f4486170f72e24fedd4fae74e; 82cae269cfa953032fbb8980a7d554d60fb00b17 before b232eb5c9fe11ec2368e9b565db69c724c35fbd2; 82cae269cfa953032fbb8980a7d554d60fb00b17 before 7bf74e6baf810fe325f111996496c678fc6e244f; 82cae269cfa953032fbb8980a7d554d60fb00b17 before f3624cc069195001c88df7a291af215f2133ff2c; 82cae269cfa953032fbb8980a7d554d60fb00b17 before 1758a564b6ebe7f4a82f23c9851d1cae15549457; +2 more |
| CVE-2026-72185 | 9.8 | Aug 15 | ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock() Affected: 495e90fa334828d4119061e2726af51d0a0fb4ed before b397b1238a217264bb02f963a1a1eadf71906375; 495e90fa334828d4119061e2726af51d0a0fb4ed before b8d6c528e9d57d263fee1a648409f84a68b2561d; 7.1 |
| CVE-2026-72139 | 9.8 | Aug 15 | tcp: defer md5sig_info kfree past RCU grace period in tcp_connect Affected: 51e547e8c89c661f6fbede4a28b1d33b13625683 before 33a1bee413628378fd036a4f2b17ba86b0bc560c; 51e547e8c89c661f6fbede4a28b1d33b13625683 before da48b9bf1eb95a9cfd09d615ca58cfc2b03de369; 51e547e8c89c661f6fbede4a28b1d33b13625683 before b74cd55038905d5e74c1de109ab78a30b2ea0e1f; 6.18 |
| CVE-2026-72137 | 9.8 | Aug 15 | xfrm: nat_keepalive: avoid double free on send error Affected: f531d13bdfe3f4f084aaa8acae2cb0f02295f5ae before d0a4dc7efa825bce60a8da8f7d43c864a159abde; f531d13bdfe3f4f084aaa8acae2cb0f02295f5ae before 5b0c4c916f202b8fd13d12afb6af62b385622f81; f531d13bdfe3f4f084aaa8acae2cb0f02295f5ae before a8a7e6a9ff8a4c1f067694ddbd44be67fdf36693; f531d13bdfe3f4f084aaa8acae2cb0f02295f5ae before 226f4a490d1a938fc838d8f8c46a4eca864c0d78; 6.11 |
| CVE-2026-72130 | 9.8 | Aug 15 | nvmet-auth: reject short AUTH_RECEIVE buffers Affected: db1312dd95488b5e6ff362ff66fcf953a46b1821 before 584d7d14d9b40b080b1195cec83de86ade63343e; db1312dd95488b5e6ff362ff66fcf953a46b1821 before 80bf7b7f676e3987bbe06af3c359bd56ac91a5a9; db1312dd95488b5e6ff362ff66fcf953a46b1821 before 2eaa3ad450141cfcf187bb43cb8335eb336b5f87; db1312dd95488b5e6ff362ff66fcf953a46b1821 before bc111698b46e43eddd8664cceaa621cd559e99a0; db1312dd95488b5e6ff362ff66fcf953a46b1821 before 779575bc35c687697ba69e904f2cd22e60112534; 6.0 |
| CVE-2026-72129 | 9.8 | Aug 15 | nvmet-rdma: handle inline data with a nonzero offset Affected: 0d5ee2b2ab4f6776c361bc975c2323bc8b5cf349 before c2106ba1b14d644a5203bea1a50dbe25dcad713c; 0d5ee2b2ab4f6776c361bc975c2323bc8b5cf349 before bf8bcc1c137d54a62a428b00051fdbb13660673b; 0d5ee2b2ab4f6776c361bc975c2323bc8b5cf349 before 11401371152b228448a41d79c6de1c938f93049a; 0d5ee2b2ab4f6776c361bc975c2323bc8b5cf349 before 7c96581169c9d9a7d0726e554313acfbead6141c; 0d5ee2b2ab4f6776c361bc975c2323bc8b5cf349 before 42a8ea3acd883f4f210d9e54e0975b1e2292b529; 0d5ee2b2ab4f6776c361bc975c2323bc8b5cf349 before 2944113ad5fbcdf5d349d857c03d2a44b6de75b8; +3 more |
| CVE-2026-72098 | 9.8 | Aug 15 | dm-verity: fix buffer overflow in FEC calculation Affected: a739ff3f543afbb4a041c16cd0182c8e8d366e70 before 374775626c327aec2425c16b4d36706e5f8718b8; a739ff3f543afbb4a041c16cd0182c8e8d366e70 before dc662eed1c432cc2fd4e9314f58d30b3a8cca7cc; a739ff3f543afbb4a041c16cd0182c8e8d366e70 before 5488d3a69d205e28f74f18857b853aa12e778e66; a739ff3f543afbb4a041c16cd0182c8e8d366e70 before f7990c2b0f08b8841fcd2652d1d7002f5994a7a7; a739ff3f543afbb4a041c16cd0182c8e8d366e70 before 31d6e6c0ba8d5a7bd59660035a089307100c5e8e; 4.5 |
| CVE-2026-72084 | 9.8 | Aug 15 | scsi: target: Bound PR-OUT TransportID parsing to the received buffer Affected: c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 before 88c67c3de914e19172e1d878a7625c5b06c20ec5; c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 before 842248047ef28dbf3b3f7f49a0ec315054d4dab8; c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 before 03fbc7de8d5e85fc8420e57e8304c855efd453ab; c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 before 6ca5de8782e67573a61a6736b6dc0ffe58dcdf59; c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 before 9298078a8f7d8181a04614a34ab655ccdf038204; c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 before 004ccd2d3b4ac36a300e05e01df152e5c02a5a82; +3 more |
| CVE-2026-72083 | 9.8 | Aug 15 | scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE Affected: 4949314c7283ea4f9ade182ca599583b89f7edd6 before 7d56f5c868d92c9d504a34a3ea450bce481c7f63; 4949314c7283ea4f9ade182ca599583b89f7edd6 before 59a2a5a37dc49a641ad6bc64aee34e5a61025ffd; 4949314c7283ea4f9ade182ca599583b89f7edd6 before 9f8076cc73dfa6b10155978c160587e986b22169; 4949314c7283ea4f9ade182ca599583b89f7edd6 before a040004846f1fbe687f6ec76d9ccc27b4ead42e4; 4949314c7283ea4f9ade182ca599583b89f7edd6 before 05b3e37433cf2eaf8867f1c16528aa347bb212ab; 4949314c7283ea4f9ade182ca599583b89f7edd6 before cb7bdae7fba404852ade34b0c1445fbaf3e54fbb; +5 more |
| CVE-2026-72069 | 9.8 | Aug 15 | locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() Affected: 0f383b6dc96e976dfbf2721b0bf10bd96103b341 before af28d801cd2db4cc7378554499bd4a5d84a5517e; 0f383b6dc96e976dfbf2721b0bf10bd96103b341 before 9d1fcd64ab81200e02b7a6db5eb1da8e244e8289; 0f383b6dc96e976dfbf2721b0bf10bd96103b341 before 3cfaac77b3c32ac3940df28866de263c3f45d24c; 0f383b6dc96e976dfbf2721b0bf10bd96103b341 before 1f0d56d3f1e88f20f6e46109402f8c15d59bac37; 0f383b6dc96e976dfbf2721b0bf10bd96103b341 before 633cadbc0b8323f5cc140a285d2432089dbb534e; 0f383b6dc96e976dfbf2721b0bf10bd96103b341 before 83f9fb561c1c3917e19f95523dd933c7d30291aa; +2 more |
| CVE-2026-72065 | 9.8 | Aug 15 | net: mana: Validate the packet length reported by the NIC Affected: ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f before a631f82f89c76084ad5b2b9c043d3b391ffa56d8; ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f before d2568e64d01f480200063fadd67d6938f676c66f; ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f before 2e276b14b6d378372bf0152df89286cbe7632fb0; ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f before 6080189291d958604dcefe513a13900835ac982f; ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f before 6d13eaa13341a8f80aaf86f78591e1b1d393711d; ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f before 282c5214ca4eb3799158c76782646e86d2945d1b; +2 more |
| CVE-2026-72064 | 9.8 | Aug 15 | net: mana: Sync page pool RX frags for CPU Affected: 730ff06d3f5cc2ce0348414b78c10528b767d4a3 before 845c959178ccab020b67bed7f4eae3058135ec80; 730ff06d3f5cc2ce0348414b78c10528b767d4a3 before bc650dd5ce6434286b96e2b26a41af81f679cc7c; 730ff06d3f5cc2ce0348414b78c10528b767d4a3 before c72a0f09c57f92113df69f9b902d11c9e4b132f5; 6.18 |
| CVE-2026-72046 | 9.8 | Aug 15 | gve: fix header buffer corruption with header-split and HW-GRO Affected: 5e37d8254e7f551dda62e7590e819d69c7491845 before 84d3753d4bf284ef770ead6dee2270aaabb3ef41; 5e37d8254e7f551dda62e7590e819d69c7491845 before 35267819b25074084130b6a7be18bbaf44d3ae74; 5e37d8254e7f551dda62e7590e819d69c7491845 before 9f8e7f59b0c2f466be74bd923726b0f5496c27ad; 5e37d8254e7f551dda62e7590e819d69c7491845 before d676c9a73bdcd8237425dbb826f2bd1a25c36e40; 6.9 |
| CVE-2026-72041 | 9.8 | Aug 15 | espintcp: use sk_msg_free_partial to fix partial send Affected: e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 before 518dcb84b997dff461800b079e5f2596389f766a; e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 before 4ea8c051b4bd7feec7749a980f2f70e1782b84d7; e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 before a977f78adce40b39d90d9567e7987bb110102810; e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 before 54d73f18f8919735f4d04d6f43374f75756c0180; e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 before 14c0b42c8a2cd9b5361bbff45b52f69c62c6a286; e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 before a66d45e0ce6d73cd79962d422388e61bfaf0cb50; +3 more |
| CVE-2026-72033 | 9.8 | Aug 15 | orangefs: keep the readdir entry size 64-bit in fill_from_part() Affected: 480e3e532e31666a18520a7964bb4095d7a16b9a before 1679780f482feeb82acb5995587d4fb1d1fe82fd; 480e3e532e31666a18520a7964bb4095d7a16b9a before a72bbb43689591c9d36e3bb45c2d4e688cf92682; 480e3e532e31666a18520a7964bb4095d7a16b9a before 36723b28e3293047f087f4501f1ef4ead418dd84; 480e3e532e31666a18520a7964bb4095d7a16b9a before 07c05601a9a8e5d4481b2a4a16dc0e3c5bc63ad9; 480e3e532e31666a18520a7964bb4095d7a16b9a before fdf06a1b66ff39664b01c6bb6a2aa98d81e8ebe1; 480e3e532e31666a18520a7964bb4095d7a16b9a before 82fc886e244c76fadf05ef1958aaf8815478ccde; +3 more |
| CVE-2026-72020 | 9.8 | Aug 15 | ipvs: reset full ip_vs_seq structs in ip_vs_conn_new Affected: 9a05475cebdd6341884b5901e53870be26e65158 before 3bf9a260188b2a5449cbddc032a749ab433fe328; 9a05475cebdd6341884b5901e53870be26e65158 before 6378c5cb360eb1750f88839d7c3613ea92ac1816; 9a05475cebdd6341884b5901e53870be26e65158 before 32c299e28b8eea6cbbd23b97dc61401e9ef9c445; 9a05475cebdd6341884b5901e53870be26e65158 before 9e36602cbec552286f7e691cfd366525c565ee74; 9a05475cebdd6341884b5901e53870be26e65158 before d0eed7177e822cab83141e5c44b2aa345c7fd379; 9a05475cebdd6341884b5901e53870be26e65158 before 83fb4c2c5344f02eac929f66de3c9d1adfcde04c; +3 more |
| CVE-2026-72014 | 9.8 | Aug 15 | drbd: reject data replies with an out-of-range payload size Affected: b411b3637fa71fce9cf2acf0639009500f5892fe before bca33f5442c3094511719d9db792ce3165d87e76; b411b3637fa71fce9cf2acf0639009500f5892fe before 741a682535deffe9ab7e5c89caf83571efbc9dd9; b411b3637fa71fce9cf2acf0639009500f5892fe before f14e87d7b166490bceb9603b39310e51595d05b9; b411b3637fa71fce9cf2acf0639009500f5892fe before f16866c62656865854106b79bcf6e4ca97a51a92; b411b3637fa71fce9cf2acf0639009500f5892fe before 5f59a8142000f0b8f75c432209ead73c424a745d; b411b3637fa71fce9cf2acf0639009500f5892fe before 38cc4867540ae8beedfe41a1a1a6ed37052c77d6; +3 more |
| CVE-2026-68477 | 9.8 | Aug 15 | ipvs: fix more places with wrong ipv6 transport offsets Affected: 2a3b791e6e1169f374224d164738e9f7be703d77 before 613ce63711b8d431bba90781f133c39a21684f87; 2a3b791e6e1169f374224d164738e9f7be703d77 before 95d4511d81b2b37e5d2bdde5d912e48243eae517; 2a3b791e6e1169f374224d164738e9f7be703d77 before 3a9dc9b55b53d94613a587604b77d3b20024090c; 2a3b791e6e1169f374224d164738e9f7be703d77 before a3f0d5b605cd5da5c95279969fb8cea4e55cee5b; 2a3b791e6e1169f374224d164738e9f7be703d77 before 7350eb7ead172ae8024897d4b0f2e15c5318279c; 2a3b791e6e1169f374224d164738e9f7be703d77 before d4ec18f48ce78a3bf7c999ac908691007375fe99; +3 more |
| CVE-2026-68476 | 9.8 | Aug 15 | ipvs: reload ip header after head reallocation Affected: 8d8e20e2d7bba8c50e64e0eca1cb83956f468e49 before 4f2d1151421520d7ae16ca8d367d0ca09f5dfbd7; 8d8e20e2d7bba8c50e64e0eca1cb83956f468e49 before 657118cad620172dfd8f6ed5717fd75c0d1f7a5a; 8d8e20e2d7bba8c50e64e0eca1cb83956f468e49 before a10f5080afbed242640f2984328de25f84557da1; 8d8e20e2d7bba8c50e64e0eca1cb83956f468e49 before ac6ac3d35bfc0ade9d17d354c84e503a946ebdab; 8d8e20e2d7bba8c50e64e0eca1cb83956f468e49 before e51687fc56c2e39ea6e9532925f1aabd4d529f61; 8d8e20e2d7bba8c50e64e0eca1cb83956f468e49 before 3fb7edd2018bb1ad0a68157383d9b9dac33dd645; +3 more |
| CVE-2026-68426 | 9.8 | Aug 10 | xfrm: fix stale skb->prev after async crypto steals a GSO segment Affected: f53c723902d1ac5f0b0a11d7c9dcbff748dde74e before 4927ab8a8acc8db4fad33e803d1d35e0b16cef83; f53c723902d1ac5f0b0a11d7c9dcbff748dde74e before b58731e0570bfd3989999fc2baf9ee4fecd5bec6; f53c723902d1ac5f0b0a11d7c9dcbff748dde74e before 33e1b0d25ca0d2818c635ff80e6aa0d295e08a98; f53c723902d1ac5f0b0a11d7c9dcbff748dde74e before bbca7cc3b2b4b10afbfee99b81d9ee78f5423046; f53c723902d1ac5f0b0a11d7c9dcbff748dde74e before 3f4c3919baf0944ad96580467c302bc6c7758b00; 4.16 |
| CVE-2026-68388 | 9.8 | Aug 10 | smb/client: handle overlapping allocated ranges in fallocate Affected: c406bb9ece6ef63721daab106f132ff4b4234e81 before aeb58a4eb39a7ff4d7782b4f4ada0fda5e0675d2; 966a3cb7c7db786452a87afdc3b48858fc4d4d6b before 01719883235507b1585e4c51e320d9a7113dc698; 966a3cb7c7db786452a87afdc3b48858fc4d4d6b before f47c7277c03a636fcc3a57969f2dc09567b3c050; 966a3cb7c7db786452a87afdc3b48858fc4d4d6b before 437637f5ff3f573b2edf8571de91fb00a21eb4e6; 966a3cb7c7db786452a87afdc3b48858fc4d4d6b before 377fe3e583e46369ee1004d5cfe12271d6589a68; 966a3cb7c7db786452a87afdc3b48858fc4d4d6b before 7e08ab7a061b17ac1989a225c6afb53f44a86808; +8 more |
| CVE-2026-68385 | 9.8 | Aug 10 | s390/checksum: Fix csum_partial() without vector facility Affected: dcd3e1de9d17dc43dfed87a9fc814b9dec508043 before 5fc0a2a6eeb99cac991242bb48796c7749ce3261; dcd3e1de9d17dc43dfed87a9fc814b9dec508043 before 1d9a2f01b3c4e5c88e06b2db4b5460c2ec884722; dcd3e1de9d17dc43dfed87a9fc814b9dec508043 before 898bb2814f38399108bdd2113f38d97383a7036a; dcd3e1de9d17dc43dfed87a9fc814b9dec508043 before 4bb06b60d982355e22647b3d12d6619419f8c1fa; 6.9 |
| CVE-2026-68381 | 9.8 | Aug 10 | ksmbd: pin conn during async oplock break notification Affected: 09aeab68033161cb54f194da93e51a11aee6144b before 0f72fc9659d7f585460d43c158055df5afdcffb6; a4261bbc33fbf99b99c80aa3a2c5097611802980 before 793e1c7041b93af96ff87e678329bc16aee7ba88; 3aa660c059240e0c795217182cf7df32909dd917 before 6ecb252efa0b413ac3d9979fb4eec247f8fc1258; 3aa660c059240e0c795217182cf7df32909dd917 before 14062c74e5b25c27edcff7a2fe0dc701c930b372; 3aa660c059240e0c795217182cf7df32909dd917 before aa5d8f3f96aa11a4a54ce993c11ce8af11c546f9; f17d1c63a76b0fe8e9c78023a86507a3a6d62cfa; +4 more |
| CVE-2026-68302 | 9.8 | Aug 10 | amt: re-read skb header pointers after every pull Affected: cbc21dc1cfe949e37b2a54c71511579f1899e8d4 before 37ff890f9c18dfbcf57e17199901d4fd1e4c174e; cbc21dc1cfe949e37b2a54c71511579f1899e8d4 before 9005b221cb1f9c3c1a2ef656fb0e8fa80c0a187e; cbc21dc1cfe949e37b2a54c71511579f1899e8d4 before 7746d588d42a4ac0117b68ed8e9b22a9da53dfb7; cbc21dc1cfe949e37b2a54c71511579f1899e8d4 before ca0e8b661957f777591efe874cd9d9a63619cd99; cbc21dc1cfe949e37b2a54c71511579f1899e8d4 before 7f48e3ddad8e97545b25788b8203b3a539df1621; cbc21dc1cfe949e37b2a54c71511579f1899e8d4 before 3656a79f94c471827a08f2cacce5f94ad5e52c24; +1 more |
| CVE-2026-68300 | 9.8 | Aug 10 | sctp: auth: verify auth requirement when auth_chunk is NULL Affected: bbd0d59809f923ea2b540cbd781b32110e249f6e before a129792b3aef15002746c13522781d92ed3522c3; bbd0d59809f923ea2b540cbd781b32110e249f6e before 5a022ac51ad83b4ce6c898f4b9eefc65bd26b247; bbd0d59809f923ea2b540cbd781b32110e249f6e before 6caf0e8590c0bf05a76b0d387726adf3a6f3725c; bbd0d59809f923ea2b540cbd781b32110e249f6e before ec2e157fc9678a9bc411305a25aec3fd337d7efb; bbd0d59809f923ea2b540cbd781b32110e249f6e before 28c5fdce9dd955d2baf5e28987819b6d7cfaf646; bbd0d59809f923ea2b540cbd781b32110e249f6e before 18957373920caf5cdaf5cf32e5d1d7a99ca7700a; +3 more |
| CVE-2026-68170 | 9.8 | Aug 10 | mptcp: fix stale skb->sk reference on subflow close Affected: ee458a3f314e9c669ddd227bf5ab08354d9e75cc before 625fc6060864889fe3d370cdeffbbab762af3cb4; ee458a3f314e9c669ddd227bf5ab08354d9e75cc before bd7aae448f6ee9d82599a4474664de1e6e91a535; 6.19 |
| CVE-2026-68161 | 9.8 | Aug 10 | sctp: close UDP tunnel sockets during netns teardown Affected: 046c052b475e7119b6a30e3483e2888fc606a2f8 before c29affd44e6769e3073235d4b471d9b501fa8166; 046c052b475e7119b6a30e3483e2888fc606a2f8 before c6eb2d615210b80339548ab07c0230edaab9a6c7; 046c052b475e7119b6a30e3483e2888fc606a2f8 before 8ff78591d309c50a4fdab683b68dd8d512a270dd; 046c052b475e7119b6a30e3483e2888fc606a2f8 before 3bf0e349cbb4f975f35eb22753acc346b89c66a0; 046c052b475e7119b6a30e3483e2888fc606a2f8 before 37ff9794be48d0caa37687e04d09675f9c849121; 046c052b475e7119b6a30e3483e2888fc606a2f8 before ffb2bd7ade36ec4da32c46a6eddbf4515316d08c; +1 more |
| CVE-2026-68160 | 9.8 | Aug 10 | ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() Affected: a8599bd821d084d04a3290fffae1071624ec00ea before f913192fc782288e060dafc329b2346934be34cc; a8599bd821d084d04a3290fffae1071624ec00ea before 0c011137194036424e974677e0f1592e22a33d8c; a8599bd821d084d04a3290fffae1071624ec00ea before cc93f68a31c9b831abf2db8647b5f5b10329d793; a8599bd821d084d04a3290fffae1071624ec00ea before 9081c71796724ffe96cba253f68fbe42363c5295; a8599bd821d084d04a3290fffae1071624ec00ea before 03b417afce19ee6b6e61f1bbbbebac924c9f36d1; a8599bd821d084d04a3290fffae1071624ec00ea before a4228b93706fb74a484e6ffb271c1cc2af3a2ddb; +3 more |
| CVE-2026-68159 | 9.8 | Aug 10 | libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE Affected: a303bb0e58345fe9f7ab2f82b90266f2b5036058 before 66eec4af1e080b695229c9a20635648a6d12fedf; a303bb0e58345fe9f7ab2f82b90266f2b5036058 before 4daf06456677177f2a6044729abac59c1b49e87b; a303bb0e58345fe9f7ab2f82b90266f2b5036058 before d5650ddbd4d42c1a916c8fe1a4c4cb573ef810a1; a303bb0e58345fe9f7ab2f82b90266f2b5036058 before 42bc06c67d94d5f2a6b33294b0c4b07d8a47c515; a303bb0e58345fe9f7ab2f82b90266f2b5036058 before ebdf4b4f3b1474079980a2e5cd79ad65fb54db57; a303bb0e58345fe9f7ab2f82b90266f2b5036058 before 590b07ceea138d49c9b64f65d263aa902d3b4730; +3 more |
| CVE-2026-68158 | 9.8 | Aug 10 | libceph: Fix multiplication overflow in decode_new_up_state_weight() Affected: 930c532869774ebf8af9efe9484c597f896a7d46 before 2ceee3b77b83052648c40fef965f836fd7699d26; 930c532869774ebf8af9efe9484c597f896a7d46 before e4473751cc37db41f3f7da25d64a23e0c74570f1; 930c532869774ebf8af9efe9484c597f896a7d46 before f6961070c326bd158c38fa48756cde2bd78c4aaa; 930c532869774ebf8af9efe9484c597f896a7d46 before 05c90e059269f087becfcce23348496085835c29; 930c532869774ebf8af9efe9484c597f896a7d46 before 143ba49ead77ec483c0326f8aaad8649874e99c4; 930c532869774ebf8af9efe9484c597f896a7d46 before 1732d89dfcd74f6fde9ce70900d316c4a151c153; +19 more |
| CVE-2026-68156 | 9.8 | Aug 10 | libceph: refresh auth->authorizer_buf{,_len} after authorizer update Affected: 0bed9b5c523d577378b6f83eab5835fe30c27208 before 2334e9997308305ee4fd508fdfe6086c4150ed60; 0bed9b5c523d577378b6f83eab5835fe30c27208 before 79a273df64238a4ade8b709689a78589f755b8ef; 0bed9b5c523d577378b6f83eab5835fe30c27208 before 26f814187abceee90dbb29a02133adb4786fbb13; 0bed9b5c523d577378b6f83eab5835fe30c27208 before 9d37aec9ffe4e743dabc3f84502e9723e17a30d4; 0bed9b5c523d577378b6f83eab5835fe30c27208 before 75e82e8944ac1efe9fdb88bd2f14d9a031282bdf; 0bed9b5c523d577378b6f83eab5835fe30c27208 before 0060ec912292a550198d8d18ac95b433c92a7091; +7 more |
The 500 most important CVEs for this product (exploited first, then by severity)