LI
Product
Linux
On CISA KEVExploited in the wild
11,106
CVEs
12
On KEV
10.0
Max CVSS
1052
New 30D
Severity mix
Critical 489High 9Medium 2Low 0
Watch
Add Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-68388 | 9.8 | Aug 10 | smb/client: handle overlapping allocated ranges in fallocate Affected: c406bb9ece6ef63721daab106f132ff4b4234e81 before aeb58a4eb39a7ff4d7782b4f4ada0fda5e0675d2; 966a3cb7c7db786452a87afdc3b48858fc4d4d6b before 01719883235507b1585e4c51e320d9a7113dc698; 966a3cb7c7db786452a87afdc3b48858fc4d4d6b before f47c7277c03a636fcc3a57969f2dc09567b3c050; 966a3cb7c7db786452a87afdc3b48858fc4d4d6b before 437637f5ff3f573b2edf8571de91fb00a21eb4e6; 966a3cb7c7db786452a87afdc3b48858fc4d4d6b before 377fe3e583e46369ee1004d5cfe12271d6589a68; 966a3cb7c7db786452a87afdc3b48858fc4d4d6b before 7e08ab7a061b17ac1989a225c6afb53f44a86808; +8 more |
| CVE-2026-68385 | 9.8 | Aug 10 | s390/checksum: Fix csum_partial() without vector facility Affected: dcd3e1de9d17dc43dfed87a9fc814b9dec508043 before 5fc0a2a6eeb99cac991242bb48796c7749ce3261; dcd3e1de9d17dc43dfed87a9fc814b9dec508043 before 1d9a2f01b3c4e5c88e06b2db4b5460c2ec884722; dcd3e1de9d17dc43dfed87a9fc814b9dec508043 before 898bb2814f38399108bdd2113f38d97383a7036a; dcd3e1de9d17dc43dfed87a9fc814b9dec508043 before 4bb06b60d982355e22647b3d12d6619419f8c1fa; 6.9 |
| CVE-2026-68381 | 9.8 | Aug 10 | ksmbd: pin conn during async oplock break notification Affected: 09aeab68033161cb54f194da93e51a11aee6144b before 0f72fc9659d7f585460d43c158055df5afdcffb6; a4261bbc33fbf99b99c80aa3a2c5097611802980 before 793e1c7041b93af96ff87e678329bc16aee7ba88; 3aa660c059240e0c795217182cf7df32909dd917 before 6ecb252efa0b413ac3d9979fb4eec247f8fc1258; 3aa660c059240e0c795217182cf7df32909dd917 before 14062c74e5b25c27edcff7a2fe0dc701c930b372; 3aa660c059240e0c795217182cf7df32909dd917 before aa5d8f3f96aa11a4a54ce993c11ce8af11c546f9; f17d1c63a76b0fe8e9c78023a86507a3a6d62cfa; +4 more |
| CVE-2026-68302 | 9.8 | Aug 10 | amt: re-read skb header pointers after every pull Affected: cbc21dc1cfe949e37b2a54c71511579f1899e8d4 before 37ff890f9c18dfbcf57e17199901d4fd1e4c174e; cbc21dc1cfe949e37b2a54c71511579f1899e8d4 before 9005b221cb1f9c3c1a2ef656fb0e8fa80c0a187e; cbc21dc1cfe949e37b2a54c71511579f1899e8d4 before 7746d588d42a4ac0117b68ed8e9b22a9da53dfb7; cbc21dc1cfe949e37b2a54c71511579f1899e8d4 before ca0e8b661957f777591efe874cd9d9a63619cd99; cbc21dc1cfe949e37b2a54c71511579f1899e8d4 before 7f48e3ddad8e97545b25788b8203b3a539df1621; cbc21dc1cfe949e37b2a54c71511579f1899e8d4 before 3656a79f94c471827a08f2cacce5f94ad5e52c24; +1 more |
| CVE-2026-68300 | 9.8 | Aug 10 | sctp: auth: verify auth requirement when auth_chunk is NULL Affected: bbd0d59809f923ea2b540cbd781b32110e249f6e before a129792b3aef15002746c13522781d92ed3522c3; bbd0d59809f923ea2b540cbd781b32110e249f6e before 5a022ac51ad83b4ce6c898f4b9eefc65bd26b247; bbd0d59809f923ea2b540cbd781b32110e249f6e before 6caf0e8590c0bf05a76b0d387726adf3a6f3725c; bbd0d59809f923ea2b540cbd781b32110e249f6e before ec2e157fc9678a9bc411305a25aec3fd337d7efb; bbd0d59809f923ea2b540cbd781b32110e249f6e before 28c5fdce9dd955d2baf5e28987819b6d7cfaf646; bbd0d59809f923ea2b540cbd781b32110e249f6e before 18957373920caf5cdaf5cf32e5d1d7a99ca7700a; +3 more |
| CVE-2026-68170 | 9.8 | Aug 10 | mptcp: fix stale skb->sk reference on subflow close Affected: ee458a3f314e9c669ddd227bf5ab08354d9e75cc before 625fc6060864889fe3d370cdeffbbab762af3cb4; ee458a3f314e9c669ddd227bf5ab08354d9e75cc before bd7aae448f6ee9d82599a4474664de1e6e91a535; 6.19 |
| CVE-2026-68161 | 9.8 | Aug 10 | sctp: close UDP tunnel sockets during netns teardown Affected: 046c052b475e7119b6a30e3483e2888fc606a2f8 before c29affd44e6769e3073235d4b471d9b501fa8166; 046c052b475e7119b6a30e3483e2888fc606a2f8 before c6eb2d615210b80339548ab07c0230edaab9a6c7; 046c052b475e7119b6a30e3483e2888fc606a2f8 before 8ff78591d309c50a4fdab683b68dd8d512a270dd; 046c052b475e7119b6a30e3483e2888fc606a2f8 before 3bf0e349cbb4f975f35eb22753acc346b89c66a0; 046c052b475e7119b6a30e3483e2888fc606a2f8 before 37ff9794be48d0caa37687e04d09675f9c849121; 046c052b475e7119b6a30e3483e2888fc606a2f8 before ffb2bd7ade36ec4da32c46a6eddbf4515316d08c; +1 more |
| CVE-2026-68160 | 9.8 | Aug 10 | ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() Affected: a8599bd821d084d04a3290fffae1071624ec00ea before f913192fc782288e060dafc329b2346934be34cc; a8599bd821d084d04a3290fffae1071624ec00ea before 0c011137194036424e974677e0f1592e22a33d8c; a8599bd821d084d04a3290fffae1071624ec00ea before cc93f68a31c9b831abf2db8647b5f5b10329d793; a8599bd821d084d04a3290fffae1071624ec00ea before 9081c71796724ffe96cba253f68fbe42363c5295; a8599bd821d084d04a3290fffae1071624ec00ea before 03b417afce19ee6b6e61f1bbbbebac924c9f36d1; a8599bd821d084d04a3290fffae1071624ec00ea before a4228b93706fb74a484e6ffb271c1cc2af3a2ddb; +3 more |
| CVE-2026-68159 | 9.8 | Aug 10 | libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE Affected: a303bb0e58345fe9f7ab2f82b90266f2b5036058 before 66eec4af1e080b695229c9a20635648a6d12fedf; a303bb0e58345fe9f7ab2f82b90266f2b5036058 before 4daf06456677177f2a6044729abac59c1b49e87b; a303bb0e58345fe9f7ab2f82b90266f2b5036058 before d5650ddbd4d42c1a916c8fe1a4c4cb573ef810a1; a303bb0e58345fe9f7ab2f82b90266f2b5036058 before 42bc06c67d94d5f2a6b33294b0c4b07d8a47c515; a303bb0e58345fe9f7ab2f82b90266f2b5036058 before ebdf4b4f3b1474079980a2e5cd79ad65fb54db57; a303bb0e58345fe9f7ab2f82b90266f2b5036058 before 590b07ceea138d49c9b64f65d263aa902d3b4730; +3 more |
| CVE-2026-68158 | 9.8 | Aug 10 | libceph: Fix multiplication overflow in decode_new_up_state_weight() Affected: 930c532869774ebf8af9efe9484c597f896a7d46 before 2ceee3b77b83052648c40fef965f836fd7699d26; 930c532869774ebf8af9efe9484c597f896a7d46 before e4473751cc37db41f3f7da25d64a23e0c74570f1; 930c532869774ebf8af9efe9484c597f896a7d46 before f6961070c326bd158c38fa48756cde2bd78c4aaa; 930c532869774ebf8af9efe9484c597f896a7d46 before 05c90e059269f087becfcce23348496085835c29; 930c532869774ebf8af9efe9484c597f896a7d46 before 143ba49ead77ec483c0326f8aaad8649874e99c4; 930c532869774ebf8af9efe9484c597f896a7d46 before 1732d89dfcd74f6fde9ce70900d316c4a151c153; +19 more |
| CVE-2026-68156 | 9.8 | Aug 10 | libceph: refresh auth->authorizer_buf{,_len} after authorizer update Affected: 0bed9b5c523d577378b6f83eab5835fe30c27208 before 2334e9997308305ee4fd508fdfe6086c4150ed60; 0bed9b5c523d577378b6f83eab5835fe30c27208 before 79a273df64238a4ade8b709689a78589f755b8ef; 0bed9b5c523d577378b6f83eab5835fe30c27208 before 26f814187abceee90dbb29a02133adb4786fbb13; 0bed9b5c523d577378b6f83eab5835fe30c27208 before 9d37aec9ffe4e743dabc3f84502e9723e17a30d4; 0bed9b5c523d577378b6f83eab5835fe30c27208 before 75e82e8944ac1efe9fdb88bd2f14d9a031282bdf; 0bed9b5c523d577378b6f83eab5835fe30c27208 before 0060ec912292a550198d8d18ac95b433c92a7091; +7 more |
| CVE-2026-68154 | 9.8 | Aug 10 | libceph: reject zero bucket types in crush_decode Affected: f24e9980eb860d8600cbe5ef3d2fd9295320d229 before 952ca5dc99913d169263f59fd689f586729a13c1; f24e9980eb860d8600cbe5ef3d2fd9295320d229 before 146461f09565afe3665e65b0423d3d6b0fe806c5; f24e9980eb860d8600cbe5ef3d2fd9295320d229 before 80fc40e11cda1b5d990a3f69c6efa344fb5cd987; f24e9980eb860d8600cbe5ef3d2fd9295320d229 before b8a9fb6bf806f9c4891e71ae1beab0c07c23a877; f24e9980eb860d8600cbe5ef3d2fd9295320d229 before 826cd1de5802fd392922785f9b64d76e65d2a100; f24e9980eb860d8600cbe5ef3d2fd9295320d229 before 3b2f1937f5fce8b7dd5432e7693e3cc8b5eece56; +3 more |
| CVE-2026-68144 | 9.8 | Aug 10 | phonet: pep: fix use-after-free in pep_get_sb() Affected: 9641458d3ec42def729fde64669abf07f3220cd5 before c4a52cb4da8d57d060b1d52085d25147a238dac2; 9641458d3ec42def729fde64669abf07f3220cd5 before df198743859fefba2f824115f8151dd62d7ad6d8; 9641458d3ec42def729fde64669abf07f3220cd5 before 1d81e19fc57a5ee55b4497d01bc0510d76fb9578; 9641458d3ec42def729fde64669abf07f3220cd5 before 8d931a75a38b9bb584a4071f5ebbd52755fc35ee; 9641458d3ec42def729fde64669abf07f3220cd5 before 17f78c0c0d41d738ee236eb6e841e39395188054; 9641458d3ec42def729fde64669abf07f3220cd5 before a48a889b60f73edb0399a8b08284a2ab0bd0295f; +3 more |
| CVE-2026-68137 | 9.8 | Aug 10 | net/x25: fix use-after-free in x25_kill_by_neigh() Affected: 5c94b6205e87411dbe9dc1ca088eb36b8837fb47 before db6b04f6d65549bb1c7bc8e64a92e7b7d03be676; 409570a619c1cda2e0fde6018a256b9e3d3ba0ee before 5e8a754ac2009a88a7b99ab61eab6296eed360f3; 7781607938c8371d4c2b243527430241c62e39c2 before c98a454d1a9e1bd09d5fd55a7aa589b199340b88; 7781607938c8371d4c2b243527430241c62e39c2 before 3f4fe26c20c30bd5a2e2583e80685def0b27858c; 7781607938c8371d4c2b243527430241c62e39c2 before 610678d4be94b619c751572e8a58de705592cd07; 7781607938c8371d4c2b243527430241c62e39c2 before ec6d91a1bf2ebd767d3d43f6d249ee0ed3f4558a; +17 more |
| CVE-2026-68136 | 9.8 | Aug 10 | net: gro: fix double aggregation of flush-marked skbs Affected: 3a1296a38d0cf62bffb9a03c585cbd5dbf15d596 before 7fc7e35212cf58c134310fb47566a844297ceae9; 3a1296a38d0cf62bffb9a03c585cbd5dbf15d596 before d1fb23f8f794ac4683127bd49a6422bd87e0ac02; 3a1296a38d0cf62bffb9a03c585cbd5dbf15d596 before db3e82da616f52e2b27e25e7be3fde2f2a5e54d6; 3a1296a38d0cf62bffb9a03c585cbd5dbf15d596 before 107e1a469f53a2a70874f3f12bf6fcd23925da1d; 3a1296a38d0cf62bffb9a03c585cbd5dbf15d596 before a4dfd46cc8f08a29c6183794790547d0945f3d45; 3a1296a38d0cf62bffb9a03c585cbd5dbf15d596 before fc0c0f7a207f0cd2d2aa725696c907f7d03af9e0; +2 more |
| CVE-2026-68127 | 9.8 | Aug 10 | ila: reload IPv6 header after pskb_may_pull in checksum adjust Affected: 33f11d16142b06588eedfc1dd8cf93790979a712 before e451a904606c571f731ef7a06b3398619dce5300; 33f11d16142b06588eedfc1dd8cf93790979a712 before 1eadcb43893b897ade85ac5bf5c618054bc3c655; 33f11d16142b06588eedfc1dd8cf93790979a712 before ba353caafb06ccee57b78d3254e3cebf1dea4a93; 33f11d16142b06588eedfc1dd8cf93790979a712 before 896a9512d0d83c2a4b357e5585b7b62a8e3f95c1; 33f11d16142b06588eedfc1dd8cf93790979a712 before 7097a0280b178237265681be66d1bef11d15894b; 33f11d16142b06588eedfc1dd8cf93790979a712 before 472aba2603ca74c4f7722cb0c0296942b0776b8d; +3 more |
| CVE-2026-68123 | 9.8 | Aug 10 | openvswitch: fix GSO userspace truncation underflow Affected: f2a4d086ed4c588d32fe9b7aa67fead7280e7bf1 before 50a6a85f3d6b1d22d8436848606cdef5d2c490b4; f2a4d086ed4c588d32fe9b7aa67fead7280e7bf1 before 2623c48cc3a8da9a1886fd8f65c0e348f4406fd6; f2a4d086ed4c588d32fe9b7aa67fead7280e7bf1 before e211b081901ffca76674082c73eeaed53524c369; f2a4d086ed4c588d32fe9b7aa67fead7280e7bf1 before a16eaaf7c0b0ccdef6166707d90ffbc6eebf6855; f2a4d086ed4c588d32fe9b7aa67fead7280e7bf1 before fbfa3ad2ad6f3a5624aba5211c46290fb98cc9dc; f2a4d086ed4c588d32fe9b7aa67fead7280e7bf1 before 100a23b1613e9218e0af654ef102352c713f0263; +3 more |
| CVE-2026-68117 | 9.8 | Aug 10 | tipc: clear sock->sk on the failed-insert path in tipc_sk_create() Affected: efa78f2ae363428525fb4981bb63c555ee79f3c7 before efebc23e9b29e3e5a9e2127dd066929f7f0d315e; 833ecd0eae76eadf81d6d747bb5bc992d1151867 before 8d6f26d48e61ef34f1921289401dbf36b10816af; 00aff3590fc0a73bddd3b743863c14e76fd35c0c before 82f59aa27f33bd014a7d8739371ab5712d15e33b; 00aff3590fc0a73bddd3b743863c14e76fd35c0c before b07d87b31631edb6529e6cdcca790a7489d1250d; 00aff3590fc0a73bddd3b743863c14e76fd35c0c before dd29891ed840f6b8d020b759d0dc4a00b1d6e4ea; 00aff3590fc0a73bddd3b743863c14e76fd35c0c before 5f5a41a48dbf9eda57b67ce23e548602cf7195a6; +15 more |
| CVE-2026-68082 | 9.8 | Aug 8 | libceph: fix two unsafe bare decodes in decode_lockers() Affected: d4ed4a530562881cc5225050e42d96034f405aae before c8ade01170a27d8ede0d761c255268af81e417f8; d4ed4a530562881cc5225050e42d96034f405aae before 001835c599899ef1bd3506a815110a6374451554; d4ed4a530562881cc5225050e42d96034f405aae before 7c422364acd93d7da1dfc27d6b54635a269653a1; d4ed4a530562881cc5225050e42d96034f405aae before 02430f6f729b297e803d0605871f0a670b4eafd6; d4ed4a530562881cc5225050e42d96034f405aae before 57ba829804fe6d34bbac3b826c4b15c1caa54862; d4ed4a530562881cc5225050e42d96034f405aae before 89df5d71f83f8e2781286798fd8ae5e42cf5f1a7; +3 more |
| CVE-2026-64597 | 9.8 | Aug 6 | smb: client: fix double-free in SMB2_close() replay Affected: 433042a91f9373241307725b52de573933ffedbf before 037511726228aaf165c7067ff2bfc88eaecdf1f3; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before 0aa97edf7c347c0f54e7e60c4740574b8120c66a; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before d15d83125007f673aec4323e1bbbaaffbe87ea13; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before b18ed621dbfceecea5539848cddcb9272c9a61e1; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before f96e1cdcb63ed3321142ff2fcdf784e32cda8fee; 6.6.32 before 6.6.145; +1 more |
| CVE-2026-64566 | 9.8 | Aug 5 | xfrm: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_frags() Affected: 5f2b6a9095743a6bf1f34c43c4fe78fa8bdf5ad7 before d8aaf06b29f5a0b6186cf68d21c7d63678ee3891; 5f2b6a9095743a6bf1f34c43c4fe78fa8bdf5ad7 before ffd64e0717efd83fbf3396ab4e5ac6d795dac4d0; 5f2b6a9095743a6bf1f34c43c4fe78fa8bdf5ad7 before 430ea57d6daf765e88f90046afbfd1e071cb7200; 6.14 |
| CVE-2026-64564 | 9.8 | Aug 4 | sctp: don't free the ASCONF's own transport in DEL-IP processing Affected: 42e30bf3463cd37d73839376662cb79b4d5c416c before a9ce31be4cb1a5dd82b3e0a1d0c3e7cbdcd31293; 42e30bf3463cd37d73839376662cb79b4d5c416c before a63afa1f9b12d5293cbe0b77fd45dc0632533a13; 42e30bf3463cd37d73839376662cb79b4d5c416c before 2b324ba3494ae958cba16a453e3e71489b4de7fc; 42e30bf3463cd37d73839376662cb79b4d5c416c before fedeb4468987bcaff85fe3061de5ae052d414740; 42e30bf3463cd37d73839376662cb79b4d5c416c before 74e8f3e7114f0e26d1b2c4c048044db9fcc27603; 42e30bf3463cd37d73839376662cb79b4d5c416c before 85aca407c560aba81b5ce9d3d6cf94c74077d19b; +3 more |
| CVE-2026-64541 | 9.8 | Jul 27 | net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket Affected: d7b0e37c1ac152905b18a5b9506179091a35b0b6 before 8de4f665d0febfb92803dece377791a563fc7041; d7b0e37c1ac152905b18a5b9506179091a35b0b6 before 8145b432136285e01091815b48ceb2dae261f262; d7b0e37c1ac152905b18a5b9506179091a35b0b6 before 1951bffbc6493ec34cff3956b29d4bc6606904a6; d7b0e37c1ac152905b18a5b9506179091a35b0b6 before 647b19e5cc145a2f1f685ae8ff3805a17356888c; d7b0e37c1ac152905b18a5b9506179091a35b0b6 before 472e9d7c0d5b03be3ff91ff941f57da822b031bc; d7b0e37c1ac152905b18a5b9506179091a35b0b6 before 3bfb96d9bc6a7ed0b99c7db329cc2e22a28d84bb; +3 more |
| CVE-2026-64535 | 9.8 | Jul 27 | nvmet-tcp: Fix potential UAF when ddgst mismatch Affected: 91edfca6f8b364d60cde3ddefaf7d03ddf35774b before dfb902462bca478f050224ec7a7195aafa7643b1; fda871c0ba5d2eed2cd1c881573168129da70058 before 7e558308eba14c8136cb1e615f0c850f76d1fc0a; fda871c0ba5d2eed2cd1c881573168129da70058 before 96fe2513df590e74b04253a45089cae75569570e; fda871c0ba5d2eed2cd1c881573168129da70058 before e091ff83d962f9ed00d9bd70443676de9fe98bdc; fda871c0ba5d2eed2cd1c881573168129da70058 before 6f9442983a3e4227afd1c83a5251ddbca585ea21; fda871c0ba5d2eed2cd1c881573168129da70058 before 088ee46c18d99baef453afd74181dd40ade044ad; +5 more |
| CVE-2026-64534 | 9.8 | Jul 27 | nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path Affected: 91edfca6f8b364d60cde3ddefaf7d03ddf35774b before 22ec7a9fe9153d2737ee9b2fa6d2e43a1491decf; fda871c0ba5d2eed2cd1c881573168129da70058 before ba35b1c674ca3841c0dfadd698f2c1b3ec542d4e; fda871c0ba5d2eed2cd1c881573168129da70058 before c7874dad84b20433c0fe3919f291a762d40de08b; fda871c0ba5d2eed2cd1c881573168129da70058 before e602c93b25bda4a9d0ff1791a4bdbfdcbb074af1; fda871c0ba5d2eed2cd1c881573168129da70058 before d306da8833e75f669d93424fd84940236f3850bc; fda871c0ba5d2eed2cd1c881573168129da70058 before 2ed3c9d955e8cd6361f130623baa664a75fb345f; +5 more |
| CVE-2026-64530 | 9.8 | Jul 26 | net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle Affected: 172ba7d46c202e679f3ccb10264c67416aaeb1c4 before 5ed3d6f85991656667059d3fa5a1d683ac58c447; 0b5b831122fc3789fff75be433ba3e4dd7b779d4 before f42e8134a3a1074b834a574d404352f867ba994a; 73f7da5fd124f2cda9161e2e46114915e6e82e97 before 447d493034a9cf7bf13a2abac86d0573d907ec2f; 3f14b377d01d8357eba032b4cabc8c1149b458b6 before e1270e69dcf2c3512c453484178f2e9dc0db3f05; 3f14b377d01d8357eba032b4cabc8c1149b458b6 before 2140c2f3f2e7b066e1ae616ede8856cafd8015e9; 3f14b377d01d8357eba032b4cabc8c1149b458b6 before e28aedab9488343924d227b5a896faed67ce84d5; +7 more |
| CVE-2026-64523 | 9.8 | Jul 25 | net/handshake: Take a long-lived file reference at submit Affected: 3b3009ea8abb713b022d94fba95ec270cf6e7eae before 22e371a93563c30ebebc576db049785e0d7fc617; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before 685b10dd0e32c7782cead16c8cf055c609678583; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before b913801ad9b9a51437d84d030ec6843e08976bd6; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before 16eaba5aa89c04eea125905bb8f988c1897f4f29; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before 09dba37eee70d0596e26645015f1aa95a9848e9d; 6.4 |
| CVE-2026-64459 | 9.8 | Jul 25 | tcp: restore RCU grace period in tcp_ao_destroy_sock Affected: 51e547e8c89c661f6fbede4a28b1d33b13625683 before 657646c08c94ef7b9dbe468fe7828032216f9841; 51e547e8c89c661f6fbede4a28b1d33b13625683 before 4caf12c778fed3dc3824cf36263be5e2c491fbd0; 51e547e8c89c661f6fbede4a28b1d33b13625683 before 8bc4d43bccbd60efe85d0a44d5bf41762f2f0c30; 6.18 |
| CVE-2026-64439 | 9.8 | Jul 25 | crypto: krb5 - filter out async aead implementations at alloc Affected: 00244da40f7821b242c4612428d4192230dba27f before ef6feb77e2d91761427c5b773edc9c97e1b706ad; 00244da40f7821b242c4612428d4192230dba27f before 2b7bd6dccff14b8b632c5244f1fd506918077221; 00244da40f7821b242c4612428d4192230dba27f before 6c9dddeb582fde005360f4fe02c760d45ca05fb5; 6.15 |
| CVE-2026-64410 | 9.8 | Jul 25 | netfilter: flowtable: IPIP tunnel hardware offload is not yet support Affected: ab427db17885814069bae891834f20842f0ac3a4 before 9efe838c13133acb70c78d04c49e8362fe533566; ab427db17885814069bae891834f20842f0ac3a4 before 6c5dcab95f4cd42a1648739ec9300fbb4b1a021f; 6.19 |
| CVE-2026-64399 | 9.8 | Jul 25 | ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE Affected: eb817368f50c1cbe1bd07044124aad7db6330e3a before bf460ad5958d506492de4524a656439da3f99c51; eb817368f50c1cbe1bd07044124aad7db6330e3a before 620d133d469295ee7c017ca6aafac335f65c4a5a; eb817368f50c1cbe1bd07044124aad7db6330e3a before 9b9cf7e65cbeaae1b6636144bacee611cdd7a5d6; eb817368f50c1cbe1bd07044124aad7db6330e3a before baae7b39673ec21073a25e3d14f8feaada01d5df; eb817368f50c1cbe1bd07044124aad7db6330e3a before c917e4522d251071dde9871b9142d8ea1186ebfe; eb817368f50c1cbe1bd07044124aad7db6330e3a before 388e4139db27a9e3612c9d356b826f5b1ff6a9e3; +1 more |
| CVE-2026-64397 | 9.8 | Jul 25 | ksmbd: serialize QUERY_DIRECTORY requests per file Affected: e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before 1426fd79102539bc0ab5c8fced047ad4313b9908; e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before 2a64dbf9c739ddf7a25a066507597bf89f8f73d2; e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before 64dac2d486ec1eb18dc00968b16a230b6b75ec24; e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before a1d5d31cad593ea5e1b637f2f39c9ef6d09d1199; e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before fd22b039a5a05bc1d6818e9dcd1001fb432a829d; e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before be6d26bf27499977c746abc163659915082348d8; +1 more |
| CVE-2026-64391 | 9.8 | Jul 25 | ksmbd: use opener credentials for ADS I/O Affected: f44158485826c076335d6860d35872271a83791d before 2ad5509dd576ae16d252d4698daf03002f9e0234; f44158485826c076335d6860d35872271a83791d before a8f5d39971bbad9340d49cd41b0e2da9452a649d; f44158485826c076335d6860d35872271a83791d before 2b4592cea214683de0f2ce6f8c22c097fb0ea1ab; f44158485826c076335d6860d35872271a83791d before 52a56cf53ec834c44ac1b4d16d585f26613ee5ce; f44158485826c076335d6860d35872271a83791d before baa5e094886fffa7e6272edcb5e08be5ce28262c; 5.15 |
| CVE-2026-64387 | 9.8 | Jul 25 | smb: client: fix query directory replay double-free Affected: 433042a91f9373241307725b52de573933ffedbf before 3409aedf3c81a810243da94164f6621c9d205c98; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before 1665f25b1dea30bf2d02e16245d203a944c9d994; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before 00b0fa425941438b664950a8ee65dfba2def4336; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before 3317a5d015fca976475aa71df224056777316fde; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before 9647492b5e41954be59d5157eddbcd4cdc1656f7; 6.6.32 before 6.6.145; +1 more |
| CVE-2026-64386 | 9.8 | Jul 25 | smb: client: fix query_info() replay double-free Affected: 433042a91f9373241307725b52de573933ffedbf before 100fb7c455fa86d248b8bd7bb9de757c192870b4; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before 3c81dda84799f76b42aec598564316e2964440db; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before f1add4acb656f5a82806a1ab0e63fed3d8b1bfca; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before 89234773e8348918111aa15f6922b58cf3843364; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before 2a88561d66eb855813cf004a0abe648bbb17de5e; 6.6.32 before 6.6.145; +1 more |
| CVE-2026-64385 | 9.8 | Jul 25 | smb: client: fix double-free in SMB2_ioctl() replay Affected: 433042a91f9373241307725b52de573933ffedbf before 0be4bc64882edaefaaee8d1e27d083643eb778e6; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before 96fcfc8ae7359346156e492ca610e830d2649ad6; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before 276c8efbc49f9303ac76d0d4deab7128581b0f3b; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before fc65ffb4ef1bf540da16b17c225ae51091e07d72; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before f9bbadb6c94583e3b4af1afc449bfceb1d1ddec9; 6.6.32 before 6.6.145; +1 more |
| CVE-2026-64384 | 9.8 | Jul 25 | smb: client: fix change notify replay double-free Affected: 433042a91f9373241307725b52de573933ffedbf before 5821f9dbb8b5b24391850a13418e633edd0fb003; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before d684f4134998085702009b94c35c2003fc9e72d3; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before 52af1975f0dfae990c5a0e85872cc41be0e88a68; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before 901891513951bc8322ece754863909ea45af95c6; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before 145f820dcbb2cced374f2532f8a61a44dce4a615; 6.6.32 before 6.6.145; +1 more |
| CVE-2026-64383 | 9.8 | Jul 25 | smb: client: fix double-free in SMB2_flush() replay Affected: 433042a91f9373241307725b52de573933ffedbf before 6e27f40b682a5e42a2daae3ce6d96f0e0e16dedb; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before 878757163eea684750107a31ea134c103863515d; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before 3407240cde132a4b72d6429a2625a09a2f78adaf; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before 013a9a3da46c5dabcf18f65ea6a47874ba12a15d; 4f1fffa2376922f3d1d506e49c0fd445b023a28e before 4be31c943a3a27a5a0251dbb8f5cb89059ec3d5a; 6.6.32 before 6.6.145; +1 more |
| CVE-2026-64355 | 9.8 | Jul 25 | bpf: Reject fragmented frames in devmap Affected: e624d4ed4aa8cc3c69d1359b0aaea539203ed266 before 47baddc856ae7e93a565dd9deeb797999b179466; e624d4ed4aa8cc3c69d1359b0aaea539203ed266 before 07a4c11ee8ef4abcb39d922e9e410ae269671cdf; e624d4ed4aa8cc3c69d1359b0aaea539203ed266 before bccbab36ff228e0825eb85d9b0f9b8434cd0a399; e624d4ed4aa8cc3c69d1359b0aaea539203ed266 before c5b4f5efcb55c1af3fe44ff712d31b7fb098a831; e624d4ed4aa8cc3c69d1359b0aaea539203ed266 before a9bb2d9c798cb62a4050a991c27b752770c33afe; e624d4ed4aa8cc3c69d1359b0aaea539203ed266 before 51d07c12ca411e692c424ecdabf077f1e61a61be; +2 more |
| CVE-2026-64303 | 9.8 | Jul 25 | spi: fsl-lpspi: terminate the RX channel on TX prepare failure path Affected: 09c04466ce7ea494993c0635ba5edb6d2222a806 before ad370d1c7a9a832f77b2341513cd31188c9443af; 09c04466ce7ea494993c0635ba5edb6d2222a806 before cce2063404b2341e7b2bbf85eddfcd70a31a0033; 09c04466ce7ea494993c0635ba5edb6d2222a806 before af39a2698f69b584d14a00cffe0f51a2caa15337; 09c04466ce7ea494993c0635ba5edb6d2222a806 before e65505d91fa036a238968e4c10744244d1b968c4; 09c04466ce7ea494993c0635ba5edb6d2222a806 before d5c1060218a3749c8a18b36f8169d910fce20639; 09c04466ce7ea494993c0635ba5edb6d2222a806 before 808033d80d5c9f8adf7e8de9317389270ce13430; +3 more |
| CVE-2026-64268 | 9.8 | Jul 25 | RDMA/siw: bound Read Response placement to the RREAD length Affected: 8b6a361b8c482f22ac99c3273285ff16b23fba91 before a31b6d18ded3cc32d9ee85a6ff0726d4274887b2; 8b6a361b8c482f22ac99c3273285ff16b23fba91 before 595e6537ad1a210da32cbb9a7f91aa73090915ba; 8b6a361b8c482f22ac99c3273285ff16b23fba91 before 3ef7e052cbd05a8b13a51a07b185a39ec93ee1cf; 8b6a361b8c482f22ac99c3273285ff16b23fba91 before b2e26c955f8dd7e8d3f16c858db05245ea4fa817; 8b6a361b8c482f22ac99c3273285ff16b23fba91 before 6bc89f34a4597f9f6d41f7a60c67a3153bfe8851; 8b6a361b8c482f22ac99c3273285ff16b23fba91 before 423a78ff7928c2601013f73ec6d896f5597d0df5; +3 more |
| CVE-2026-64232 | 9.8 | Jul 24 | block: recompute nr_integrity_segments in blk_insert_cloned_request Affected: 76c313f658d2752e8527610677164aa7094ef7a5 before 53a01bcc0242590eda4c452a5bd996f62457113b; 76c313f658d2752e8527610677164aa7094ef7a5 before 0943f81e1b3176f27dbaf6db268fc69d8a94f0ba; 76c313f658d2752e8527610677164aa7094ef7a5 before 42929c98d044f126508baf54a65b0f87f932fa75; 76c313f658d2752e8527610677164aa7094ef7a5 before 2c6e6a18a37b905cb584eb0dda3ae482162a81ca; 6.12 |
| CVE-2026-64216 | 9.8 | Jul 24 | netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() Affected: ee4cdf7ba857a894ad1650d6ab77669cbbfa329e before d4ae8dba90b89e7bb4d1045d1cb26afbaf13ee5c; ee4cdf7ba857a894ad1650d6ab77669cbbfa329e before 6080fa3ecfbb4448a3b47368629534c09b6ec750; ee4cdf7ba857a894ad1650d6ab77669cbbfa329e before 3866d015f33aeedf81338dd99154703bef33faef; ee4cdf7ba857a894ad1650d6ab77669cbbfa329e before dbe556972100fabb8e5a1b3d2163831ff07b1e8e; 6.12 |
| CVE-2026-64162 | 9.8 | Jul 19 | idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() Affected: 5cb8805d2366b20ee4d7afff586d8acf17649330 before eb5991d4c8ba2e8153dfcda3e66a9608377b7dce; 5cb8805d2366b20ee4d7afff586d8acf17649330 before 3122d70b7c0101d897fb795658a7b93f854935f2; 5cb8805d2366b20ee4d7afff586d8acf17649330 before da4f76b6a84ede14a71282ef841768299ead0221; 6.16 |
| CVE-2026-64160 | 9.8 | Jul 19 | netfs: Fix potential for tearing in ->remote_i_size and ->zero_point Affected: 4058f742105ecfcbdf99e1139e6c1f74fb8e6db9 before 55970f238d495517edc961d55c44c772594d0969; 4058f742105ecfcbdf99e1139e6c1f74fb8e6db9 before 2c8f4742bb76117d735f92a3932d85239b16c494; 5.18 |
| CVE-2026-64150 | 9.8 | Jul 19 | netfilter: nft_inner: release local_lock before re-enabling softirqs Affected: ba36fada9ab487634f61f92769c95bc148aa8f49 before df19b6af171695a1352314597c9a4311d48d5171; ba36fada9ab487634f61f92769c95bc148aa8f49 before 6fecd39c6401134b58505bc4eb1adc8a0e2fe992; ba36fada9ab487634f61f92769c95bc148aa8f49 before a6cb3ff979855f7f0ee9450a947fe8f96c2ba37a; 6.16 |
| CVE-2026-64142 | 9.8 | Jul 19 | ksmbd: close durable scavenger races against m_fp_list lookups Affected: 7f0cb478703cbeaddfe5c9101c5c73cd975d1073 before 3a436932eb397e909d0607d76a8325abd9d85a35; d484d621d40f4a8b8959008802d79bef3609641b before 95f072ef934ca00711d510676b8792cbf59a5aae; d484d621d40f4a8b8959008802d79bef3609641b before 5da69a65b282d2276de22e5194ba0f88c836170c; d484d621d40f4a8b8959008802d79bef3609641b before 1f8f3246d55f89350a1a67bdf3744b7241048e4e; d484d621d40f4a8b8959008802d79bef3609641b before bf736184d063da1a552ffeff0481813599a182cc; 6.11 |
| CVE-2026-64136 | 9.8 | Jul 19 | smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Affected: 953953abb66e52c224057ab91e404284fefeab62 before 7df1df6f40c0720d30206aa35c0343b962350e0d; 601dd3b79769b38d30b693c40afdb2a4b7edf9d0 before 13fb413ae22a37c69341918a6d651d19a9b0b9b7; 3969db6b22e3d90d8c5f22ac1a7fe0350a94c136 before bf4ebdb19ff9b3cdf992b50715fe61633327416a; 96c4af418586ee9a6aab61738644366426e05316 before e374f4e496fef8168784f93a4477d67be34485fd; 96c4af418586ee9a6aab61738644366426e05316 before 4d8690dace005a38e6dbde9ecce2da3ad85c7c41; 8c59eeeeffa1524ef57e173a89a1a3ff539888d5; +5 more |
| CVE-2026-64132 | 9.8 | Jul 19 | ipv6: ioam: refresh hdr pointer before ioam6_event() Affected: f655c78d6225f585ef60a9d93ffb79d507ff3ad3 before 769723124b7c3b2bfea4cf68ad292698b87c8d01; f655c78d6225f585ef60a9d93ffb79d507ff3ad3 before 24de676da63c1122d2c13b0d546238b66d1b4e62; f655c78d6225f585ef60a9d93ffb79d507ff3ad3 before 5af905aa8e91ff8d94572a1e089558f21dcf24ed; f655c78d6225f585ef60a9d93ffb79d507ff3ad3 before e46e6bc97fb1f339730ff1ba74267fbf48e7a422; 6.9 |
| CVE-2026-64125 | 9.8 | Jul 19 | net: bcmgenet: keep RBUF EEE/PM disabled Affected: 6ef398ea60d931b97d69ed080bd0bd00fac38ec6 before 2040eb83f6ada148fb32dd98b943a498005d79f2; 6ef398ea60d931b97d69ed080bd0bd00fac38ec6 before f2782ddac82c70df313012da5f71f1f06b5553ca; 6ef398ea60d931b97d69ed080bd0bd00fac38ec6 before b579f3a73da7a7e74213558f4cc3d865c30aaa78; 6ef398ea60d931b97d69ed080bd0bd00fac38ec6 before 289499907399c5a9f2ed82cb34df49112bb8488f; 6ef398ea60d931b97d69ed080bd0bd00fac38ec6 before a212fc08f5c48a16a94092bf0a9a8b7cf4483b11; 6ef398ea60d931b97d69ed080bd0bd00fac38ec6 before 3d4ef05266ab16d8ef7dd21658a557801eb78704; +3 more |
The 500 most important CVEs for this product (exploited first, then by severity)