LI
Product
Linux
On CISA KEVExploited in the wild
14,734
CVEs
12
On KEV
10.0
Max CVSS
1052
New 30D
Severity mix
Critical 489High 9Medium 2Low 0
Watch
Add Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-64055 | 9.8 | Jul 19 | net: ethernet: cortina: Carry over frag counter Affected: 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before df31e3b64455293df1ea89c7da7d5c9bfbcdd253; 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 7af1fabdee744b7995fe01b30b77dfc397657cb5; 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 75105fcf73f1ce7d9f769aaefec6e6d6645d5ac0; 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 78cf08b3be47c28f07008a76c932bad7cdffa9d8; 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 7123cf481e21b54eb6adc4cb0d8dc2876aeaee41; 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before c373b34877afea61c89e0dd2e38948c624249b9b; +3 more |
| CVE-2026-64047 | 9.8 | Jul 19 | net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring Affected: 9aaaa56845a06aeabdd597cbe19492dc01f281ec before 73963a375885d5ccb7def39fd0b4f542e0f343dd; 9aaaa56845a06aeabdd597cbe19492dc01f281ec before 47110c3a9ac247b688657337f5981efcfcb240dc; 9aaaa56845a06aeabdd597cbe19492dc01f281ec before 84158c2997159df4a0d70cd9c46774512d32a522; 9aaaa56845a06aeabdd597cbe19492dc01f281ec before 131ef12057d92b77b636321b7849c69222405a97; 9aaaa56845a06aeabdd597cbe19492dc01f281ec before 66339b71f105e6f83e0da3b9583d95077534fe1d; 9aaaa56845a06aeabdd597cbe19492dc01f281ec before eca989eab4b2599dcb02f72140a7c08f08838520; +5 more |
| CVE-2026-64046 | 9.8 | Jul 19 | net: tls: prevent chain-after-chain in plain text SG Affected: 9aaaa56845a06aeabdd597cbe19492dc01f281ec before 49a5faaa471ddcd37b6893970c9916eb836e7c31; 9aaaa56845a06aeabdd597cbe19492dc01f281ec before 91359966e247c0244c66d50bbb8e74aefa4321c3; 9aaaa56845a06aeabdd597cbe19492dc01f281ec before 410351158dfef2d67fea6603680b3a6013c6ed9d; 9aaaa56845a06aeabdd597cbe19492dc01f281ec before acdc12b71c9aa4be5dcd2c8062753c6d2033e235; 9aaaa56845a06aeabdd597cbe19492dc01f281ec before 929b1548e63ac72e104c07d8ee8cbbeeba2fa89a; 9aaaa56845a06aeabdd597cbe19492dc01f281ec before af855f4c966afafef74faf8390c7b86568c0d46d; +5 more |
| CVE-2026-64037 | 9.8 | Jul 19 | wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled Affected: d1e879ec600f9b3bdd253167533959facfefb17b before 9e360e610a73f62432e986775023d5382773f045; d1e879ec600f9b3bdd253167533959facfefb17b before cbe1c8245e4469d1aa6e12e5d913611376d23788; d1e879ec600f9b3bdd253167533959facfefb17b before 92cee08dc4f00e77fd1317e4343c5d458b0abab7; 6.15 |
| CVE-2026-64035 | 9.8 | Jul 19 | igc: set tx buffer type for SMD frames Affected: 5422570c0010bb968738f9256eb2bf83e79b4d63 before 1f83545f432d106d5fc71d3997b2d382104ebcc4; 5422570c0010bb968738f9256eb2bf83e79b4d63 before 1c8587bd025244aa52061f5ceecbf5e68a1063d9; 5422570c0010bb968738f9256eb2bf83e79b4d63 before 5acc641e590e008caaed480ed9ffae47cf7ecbdf; 6.16 |
| CVE-2026-64033 | 9.8 | Jul 19 | RDMA/rtrs: Fix use-after-free in path file creation cleanup Affected: bab17b761c8974a869b04462be5d4dd9aad366b4 before 01e42aabaf7632beb4bf235c7238b96c746d4144; ae4c81644e9105d9f7f713bb0d444737bb6a0cf1 before 548f3956e53a7f7bde912d8129010b8986d5e602; ae4c81644e9105d9f7f713bb0d444737bb6a0cf1 before 00904a73272b9f3ef3952fe69a833909dccad1ef; ae4c81644e9105d9f7f713bb0d444737bb6a0cf1 before 92060ab1c5115674cf319175550f85f68405121f; ae4c81644e9105d9f7f713bb0d444737bb6a0cf1 before eae62c5451e67e8b033c1681fd3b85d7e9a9a28f; ae4c81644e9105d9f7f713bb0d444737bb6a0cf1 before b0e9706fb2859064bb6c677554c4d20c713aa8e0; +3 more |
| CVE-2026-64025 | 9.8 | Jul 19 | bpf, skmsg: fix verdict sk_data_ready racing with ktls rx Affected: ef5659280eb13e8ac31c296f58cfdfa1684ac06b before c9ea01768903ae47f210cd457af1dead6de7a9c3; ef5659280eb13e8ac31c296f58cfdfa1684ac06b before 7c8cf21bc4efb4af18d6096db3f8bd06d622251c; ef5659280eb13e8ac31c296f58cfdfa1684ac06b before 1861d369efd62d67796563bf3e01fc22e5626f8b; ef5659280eb13e8ac31c296f58cfdfa1684ac06b before 8a52139560f833c3975032e1f5762611e3a36d71; ef5659280eb13e8ac31c296f58cfdfa1684ac06b before ddf8029623a1af20e984c040e89ff918158397ab; 5.10 |
| CVE-2026-64016 | 9.8 | Jul 19 | ksmbd: fix durable reconnect error path file lifetime Affected: f0ff7f12398e85b3a11745ff7feab6246f3d75c2 before 5e641e4ee0bc1937408d41051a908ad4151be63b; 4db3dcac84c2f14a45ae201efb38de1fb1bfc009 before 478bfaa036bd0c7e179acff8b8484bccdee3b8c7; ce2e164c1c51c3f7813b80f8c926836e896bcbb3 before a1a39f227c80cbf369767badc32cba2b225147d1; 97a0cd55283b4e63fd92804da91c8d9896adcad9 before 6cb0b9385320110fe24a5d5ac0000ade4bb3a3f3; 1baff47b81f94f9231c91236aa511420d0e266b9 before 3515503322f4819277091839eed46b695096aca5; 6.18.33 before 6.18.34; +1 more |
| CVE-2026-64007 | 9.8 | Jul 19 | netfilter: synproxy: refresh tcphdr after skb_ensure_writable Affected: 48b1de4c110a7afa4b85862f6c75af817db26fad before 9902a1058992de5d95656b64a3bd95c077f7ba2c; 48b1de4c110a7afa4b85862f6c75af817db26fad before d3019c61799adc21811af4b521f11f3dc77f8e04; 48b1de4c110a7afa4b85862f6c75af817db26fad before dd206819f210522579010d889d45a9530bb494bc; 48b1de4c110a7afa4b85862f6c75af817db26fad before af2c22ccb1f621aff487ff47a040e38e058541e7; 48b1de4c110a7afa4b85862f6c75af817db26fad before c7f945f7da097245a2f8ed7775ce48421047ee96; 48b1de4c110a7afa4b85862f6c75af817db26fad before f0fea2b6d5453a11ad11713bbf37561b9b3a7edf; +3 more |
| CVE-2026-64000 | 9.8 | Jul 19 | net: hsr: fix potential OOB access in supervision frame handling Affected: eafaa88b3eb7f28aecb222281655473431d3ef2e before 09a37dca090c55ffb1a33f52d8667f1c2367ef48; eafaa88b3eb7f28aecb222281655473431d3ef2e before a4b64f3e9c7b8259f7dd251a0313420ba7c01852; eafaa88b3eb7f28aecb222281655473431d3ef2e before 71c986c0ba45b7dc574fae27c83e7b6671556f37; eafaa88b3eb7f28aecb222281655473431d3ef2e before fbd0662f9c9a66e8cc3df3099cca8ed6d3837cc7; eafaa88b3eb7f28aecb222281655473431d3ef2e before 78607a6854a22a2502f68092202e75a39af4865d; eafaa88b3eb7f28aecb222281655473431d3ef2e before f229426072fc865654a60978bb7fda790a051ff3; +1 more |
| CVE-2026-63994 | 9.8 | Jul 19 | tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() Affected: 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before 95b6d772bfe788331d9742d73eaa12e113b2adc4; 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before 7254aef4d1a7e18e887af9010e2f2dc34806789b; 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before bf8b3f34c37c162357138e7c0942723b8b94fed1; 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before 76cd9398a0470257ab765bdf5f358a2af2e17934; 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before 50750d86a2e5266aba0c295483b3397843198b11; 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before 6dff77899b9e9fe5d854abda3a98ad04e7229ef7; +3 more |
| CVE-2026-63993 | 9.8 | Jul 19 | vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() Affected: 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before 6b8bfce9d2f774d2c2243e0248e03efb99bba6c0; 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before 9257f56ac47ef1976bcd056cf986a9988eeec67a; 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before 8d435d68d71fb875876b722f4136caf74f2f48bd; 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before dc3bfa050f873371e745bdf478b1f5b738e5733d; 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before 609e63312c29aad18026a1d3222e123d4b6b0feb; 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before 5303925e360527243b46a440a04667826bbc72b7; +3 more |
| CVE-2026-63984 | 9.8 | Jul 19 | ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() Affected: 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 before 75b3680047bf09af8e7e471a7a6ddf2ce5847f56; 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 before fd238c51b0fa5390cceca9f1ac5a9ffda8063eed; 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 before 3618b34942b76471d044369bfd30d58c39068bf1; 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 before 97e06791368c01f0ad2a4b3269c2abe19485ca32; 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 before de02fc049352af5a9595f015511222d0a85c326b; 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 before 6fe1cb312038516cb4d9fa089d700af7059f1a64; +3 more |
| CVE-2026-63979 | 9.8 | Jul 19 | net/handshake: hand off the pinned file reference to accept_doit Affected: 3b3009ea8abb713b022d94fba95ec270cf6e7eae before b869e3e4ce1996df23b3efdbbe9a64c4ab81d745; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before 2f28dbb30b88eafab8d49aaec94710b4e12dea8e; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before 68eba6519cbd6359fb554a9720f3a3b6b2eba23f; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before c06876d4fac38f35820946ee3b1be7d7da799cd4; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before f4251190e58b209999c1ba9e6d2976136a1be055; 6.4 |
| CVE-2026-63978 | 9.8 | Jul 19 | net/handshake: Drain pending requests at net namespace exit Affected: 3b3009ea8abb713b022d94fba95ec270cf6e7eae before ee4b2ba9d30155f9945811cd3c0c1b06d45787a9; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before 9ec20c9a5a04f2c3f1cf65d21f886d7aaa6189cd; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before 2bf24a7e190aae0ea47c78099938ae056c622e44; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before 8c35539db0ab0bfa1ea44efab00b053261a69469; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before ea5fe6a73ca57e5150b8a38b341aef2636eb72f0; 6.4 |
| CVE-2026-63924 | 9.8 | Jul 19 | ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before b3ac54e5c905f86d22b502eacb5686a282c5659f; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 645b99b1a185c91a79bdac4c5de0f91b212d64f0; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9e883eaa878f4337b5873c706efb5a192364ed18; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before bddaa4dfc7f36e1ee343a0622f69288af2b9ace9; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 72af7beae774e46ed543f3f2f267bf0a141bfcdd; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c512e1c819dfbf6ae95ee7a44b65b9ad98979157; +3 more |
| CVE-2026-63922 | 9.8 | Jul 19 | ipv6: exthdrs: refresh nh after handling HAO option Affected: a831f5bbc89a9978795504be9e1ff412043f8f77 before b3ac54e5c905f86d22b502eacb5686a282c5659f; a831f5bbc89a9978795504be9e1ff412043f8f77 before f8aabed3ff3e986920cf02a2a2785e08e586b234; a831f5bbc89a9978795504be9e1ff412043f8f77 before 1a11eb7431e3d2882f5bd5939c5a9bbc65ccf4d1; a831f5bbc89a9978795504be9e1ff412043f8f77 before 12d957979e4a800167842f1b42be6a606d227ebe; a831f5bbc89a9978795504be9e1ff412043f8f77 before ff375ed1cba81392346c5bfbf0bb7a13b2946f99; a831f5bbc89a9978795504be9e1ff412043f8f77 before 751db1b802a067b7fff25880f4e9f9152a171538; +3 more |
| CVE-2026-63912 | 9.8 | Jul 19 | xfrm: esp: restore combined single-frag length gate Affected: c075c3ea031757f8ea2d34567565b61a868c08d5 before 566295735530ee513326049b0540f32ec050bf2e; a583f2f3c8788bffd7fd7baeb76bd6d80543d7ea before 5d7ab86e2b6bc23054616bf6ac562013bf60af8c; 5bd8baab087dff657e05387aee802e70304cc813 before 36519e3d941fc99d3b52c134dbaf311f987a4708; 5bd8baab087dff657e05387aee802e70304cc813 before 322e48187e0245ab2fff6fec2220b0cae677dbec; 5bd8baab087dff657e05387aee802e70304cc813 before b84091ceddc9f133229dceab3ccc930bf27f9cba; 5bd8baab087dff657e05387aee802e70304cc813 before c093468aea8277f77272a4f199b2e15e19cabb59; +13 more |
| CVE-2026-63888 | 9.8 | Jul 19 | scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() Affected: e48354ce078c079996f89d715dfa44814b4eba01 before f7948af0dd03de84079dcd4dc215a69fd6fbb95d; e48354ce078c079996f89d715dfa44814b4eba01 before badf178b76b0690851df00f4ca9cf2eb8eb0f963; e48354ce078c079996f89d715dfa44814b4eba01 before 6e22a1cdcc8277af4acc43710577157b77a02c5d; e48354ce078c079996f89d715dfa44814b4eba01 before d3e9b79aa794f7a23e82de4d710e7d2df610e349; e48354ce078c079996f89d715dfa44814b4eba01 before ec9f19d52074a191ed1756ed4a7d39fff1a2085c; e48354ce078c079996f89d715dfa44814b4eba01 before 89c81d1228c00fa6dd91de6c1c5aa1ef8a7875e3; +3 more |
| CVE-2026-63887 | 9.8 | Jul 19 | scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf Affected: e48354ce078c079996f89d715dfa44814b4eba01 before cb84e974fb172bc71386289f37b78ea679410b39; e48354ce078c079996f89d715dfa44814b4eba01 before b19382dfc6e7dee6d3859ba44b6ca29e97a51627; e48354ce078c079996f89d715dfa44814b4eba01 before efe633e600a0ac68357206fede21b1ac8178f3b8; e48354ce078c079996f89d715dfa44814b4eba01 before 4e9f0c4a645c995bc75c06c7b3644254ffb4c76b; e48354ce078c079996f89d715dfa44814b4eba01 before 30bf335e8fe170322080ee001f05ca29c50680b3; e48354ce078c079996f89d715dfa44814b4eba01 before 594a40360012ce5f94c715d5e3b20fa3af7d525a; +3 more |
| CVE-2026-63886 | 9.8 | Jul 19 | scsi: target: iscsi: Validate CHAP_R length before base64 decode Affected: 1e5733883421495908f3b90d9d807663038b4136 before 82454e6f21e56ea9a0a9de7d0ff7e1dfb83e34d6; 1e5733883421495908f3b90d9d807663038b4136 before edd06675a02376ea8347dba7c29ad982ba5b36ee; 1e5733883421495908f3b90d9d807663038b4136 before bf154c657828ed05399bca5d98cf1611bb048b12; 1e5733883421495908f3b90d9d807663038b4136 before 4a3a19c98a8207ad08bec554703d90f2c34a8cc6; 1e5733883421495908f3b90d9d807663038b4136 before c04e85799356120209b351a148ac2db888d5ffd9; 1e5733883421495908f3b90d9d807663038b4136 before 85db7391310b1304d2dc8ae3b0b12105a9567147; +1 more |
| CVE-2026-63857 | 9.8 | Jul 19 | net: airoha: Do not read uninitialized fragment address in airoha_dev_xmit() Affected: 23020f04932701d5c8363e60756f12b43b8ed752 before dba5f4959653e4c212beb746594952e8645d1115; 23020f04932701d5c8363e60756f12b43b8ed752 before f670fa4b19ceddc6d215dda4997888ccba9bbc61; 23020f04932701d5c8363e60756f12b43b8ed752 before d78c8ab7bd84952e053d0c622b7fc1b4ad8a19a3; 23020f04932701d5c8363e60756f12b43b8ed752 before bde34e84edc8b5571fbde7e941e175a4293ee1eb; 6.11 |
| CVE-2026-63825 | 9.8 | Jul 19 | gcov: use atomic counter updates to fix concurrent access crashes Affected: 2521f2c228ad750701ba4702484e31d876dbc386 before b0f7bd5eeb903a0021a80e9d704814e2a9d3998c; 2521f2c228ad750701ba4702484e31d876dbc386 before 4575852c23a10abc7648d31e4c12cf79d7391637; 2521f2c228ad750701ba4702484e31d876dbc386 before 49d893b9cbcfc5802a32e53a64c6c6956670d65b; 2521f2c228ad750701ba4702484e31d876dbc386 before 5b959c1dbb4522b9e3ac4e26ad638b8784869841; 2521f2c228ad750701ba4702484e31d876dbc386 before 56cb9b7d96b28a1173a510ab25354b6599ad3a33; 2.6.31 |
| CVE-2026-63808 | 9.8 | Jul 19 | exfat: fix potential use-after-free in exfat_find_dir_entry() Affected: ca06197382bde0a3bc20215595d1c9ce20c6e341 before e6f1a11cfb808441a43ffae9b476cc135732cd27; ca06197382bde0a3bc20215595d1c9ce20c6e341 before e48f413c2815787b8cade2795e194e3c4cd782ef; ca06197382bde0a3bc20215595d1c9ce20c6e341 before 06c4e1e9967d332ac33ba38b7819851089ff9359; ca06197382bde0a3bc20215595d1c9ce20c6e341 before 8e0abc17fbd7e305802e84fe98b4950d50f9c433; ca06197382bde0a3bc20215595d1c9ce20c6e341 before 4d101016d5e587f820b3ae2d5bb6770d86342649; ca06197382bde0a3bc20215595d1c9ce20c6e341 before adfacfbaeae2cb760f492357cc36b41f84ef7f86; +3 more |
| CVE-2026-63800 | 9.8 | Jul 19 | pNFS: Fix use-after-free in pnfs_update_layout() Affected: 06f58dbc49a23c99e5c0f246879ed16667f7bf8f before 4ad8b9a85dbf57ca532ee9e65ad7e6498bfbbf98; 2c8d5fc37fe2384a9bdb6965443ab9224d46f704 before 1f24b8302c77dcaf79c64c073877a3b9f4dd25d2; 2c8d5fc37fe2384a9bdb6965443ab9224d46f704 before 9c0fb5c09ae5bd68dc0038692af8127029cb0385; 2c8d5fc37fe2384a9bdb6965443ab9224d46f704 before 7e37e9b3e82ade881e1798e2f4fcc54aff7793c1; 2c8d5fc37fe2384a9bdb6965443ab9224d46f704 before 2883ddd7542b4437a2ab4908fe2773f690e20889; 2c8d5fc37fe2384a9bdb6965443ab9224d46f704 before 200e7637f4d6a1342987045eea72641524f909dc; +6 more |
| CVE-2026-53399 | 9.8 | Jul 19 | nfsd: release layout stid on setlease failure Affected: c5c707f96fc9a6e5a57ca5baac892673270abe3d before d788ef40a7517d22c97ab01700e4ae4c611b6f2f; c5c707f96fc9a6e5a57ca5baac892673270abe3d before 2e0a5d6d62600b8c614d1b55e50ef94035d6adf9; c5c707f96fc9a6e5a57ca5baac892673270abe3d before 7bbb7ce74051c8be4b69ff44ce3db370600dae61; c5c707f96fc9a6e5a57ca5baac892673270abe3d before 48a586e382e4db1dbf958d44b63e081df5f8ed04; c5c707f96fc9a6e5a57ca5baac892673270abe3d before d369e5edfaaf83a448016e2f1da392b2174be801; c5c707f96fc9a6e5a57ca5baac892673270abe3d before 8dee7c278f1c2b5bb80e17a6281c3812fc8b0cdd; +3 more |
| CVE-2026-53398 | 9.8 | Jul 19 | NFSD: Fix SECINFO_NO_NAME decode error cleanup Affected: 5e76b25d7cc82c148d391c0c43b884e6427cb302 before 8836405abdc53ca3dd5fc68b2cf6f8f012fad011; 07b68ff5c71cf4ed5443016d8eb116863c0a4d88 before 49de5d31dd8fdebf78bdeaf196b0ca5cd5c75439; 3fdc546462348b8a497c72bc894e0cde9f10fc40 before 5ec37edcb534f3fc92304be236d37f08e6545585; 3fdc546462348b8a497c72bc894e0cde9f10fc40 before 1e04be34cafae119e82bcaccd6d28a20f72a3647; 3fdc546462348b8a497c72bc894e0cde9f10fc40 before 161d1aaeb04d620d3692639700512bb5038c1e10; 3fdc546462348b8a497c72bc894e0cde9f10fc40 before c8a24effd96d4779e2ad779654682304491c55a5; +5 more |
| CVE-2026-53384 | 9.8 | Jul 19 | serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails Affected: 57f83e5dd6a33c4696699954784f8fee789b1d0c before ccdf4510a3873b14e5e348cdb038717996f09fda; 57f83e5dd6a33c4696699954784f8fee789b1d0c before 511d2b92f8d20de04acafab676150d26fb5c67f4; 57f83e5dd6a33c4696699954784f8fee789b1d0c before 07ffe414a708ae60551401cec5d727ed156b8caf; 57f83e5dd6a33c4696699954784f8fee789b1d0c before 3d205fe80f2181f0109150ad1fa06ee5bc046935; 57f83e5dd6a33c4696699954784f8fee789b1d0c before d72650a4f334581b23a1892b888a4cb1be142f76; 57f83e5dd6a33c4696699954784f8fee789b1d0c before 778b9dda4b24005a27bcd9c35c110bf8d7f259ca; +2 more |
| CVE-2026-53363 | 9.8 | Jul 10 | xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags() Affected: b96ba312e21c9b7ac1526829b9640ddc06695c0b before dd66f7f6e360ee82cd905517726f8e9091265de5; b96ba312e21c9b7ac1526829b9640ddc06695c0b before c885d111ed9f5a0a1f3cc4e87a50db6518abaa6c; b96ba312e21c9b7ac1526829b9640ddc06695c0b before e9096a5a170e7ecd6467bc2e08668ec39897cda7; 6.14 |
| CVE-2026-53355 | 9.8 | Jul 1 | net: rds: clear i_sends on setup unwind Affected: 3b12f73a5c2977153f28a224392fd4729b50d1dc before 66cccec111421a10efdc2c74499d15b93e7acae5; 3b12f73a5c2977153f28a224392fd4729b50d1dc before 2c5e5e4a5970c41f16e3ad801a78719ed5d5c71b; 3b12f73a5c2977153f28a224392fd4729b50d1dc before 29d940026dce39e3018dab6f67c9427249321270; 3b12f73a5c2977153f28a224392fd4729b50d1dc before e7cf30aa5f1fc6c2a86df65df8b731df20e44d79; 3b12f73a5c2977153f28a224392fd4729b50d1dc before f16ad421a4e3e7db2d14bdf3b16f583bc4f3b30a; 3b12f73a5c2977153f28a224392fd4729b50d1dc before 1d4ec754ee3871f7e3670c67bb0298c9c5760926; +11 more |
| CVE-2026-53309 | 9.8 | Jun 26 | ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison Affected: ea2034416b54700e30371f2ad6517cbb94674083 before 760ab35040aca8399021fdb9ff1db1089feb7194; ea2034416b54700e30371f2ad6517cbb94674083 before c60a2710b73838d250cda57344c049b89abc5d52; ea2034416b54700e30371f2ad6517cbb94674083 before 2a0673836f019e7c032acbf48d022d5ccf02a845; ea2034416b54700e30371f2ad6517cbb94674083 before 819d8ebad3200a53de99bd7e297bc428e41ced54; ea2034416b54700e30371f2ad6517cbb94674083 before d5403ae28085761d58b555645bc7d5feadb10073; ea2034416b54700e30371f2ad6517cbb94674083 before 1fb7f356547d9688822315cd2b205ff0bd5429b4; +3 more |
| CVE-2026-53260 | 9.8 | Jun 25 | tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req(). Affected: d2d6422f8bd17c6bb205133e290625a564194496 before 889fc99967007e2493833515a645cb2d800f6742; d2d6422f8bd17c6bb205133e290625a564194496 before de5a46f3b2c8d3cd20afa158bd3a725e3e3d6fd3; d2d6422f8bd17c6bb205133e290625a564194496 before b183215ff714efb747d9d5a429322ba6404b5401; d2d6422f8bd17c6bb205133e290625a564194496 before e10902df24488ca722303133acfc82490f7d59ad; 6.12 |
| CVE-2026-53247 | 9.8 | Jun 25 | net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown Affected: 2d7605a729062bb554f03c5983d8cfb8c0b42e9c before 72775977e89c25c99ee84d2c5baa3f86a8ba5cb4; 2d7605a729062bb554f03c5983d8cfb8c0b42e9c before 459c6f35c58cf0fd5247e55d73ddaa29571d9b7e; 2d7605a729062bb554f03c5983d8cfb8c0b42e9c before e634408d2b0cd939cfe019398a21fb47b7a8ffe3; 2d7605a729062bb554f03c5983d8cfb8c0b42e9c before 2d86aeb46d5f69c704065a8c69822582787272a1; 2d7605a729062bb554f03c5983d8cfb8c0b42e9c before 80df409e1a483676826a6c66e693dba6ac507751; 6.2 |
| CVE-2026-53246 | 9.8 | Jun 25 | sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before cc272185c9a9a4b7febc2de52eeaa3d00f19091e; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before edccbf3d63b0a3362bc916ea72edacc1e1ca456a; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 0861615c28de668669d748ef4eb913ea9262d13b; 2.6.12 |
| CVE-2026-53228 | 9.8 | Jun 25 | ipv6: sit: reload inner IPv6 header after GSO offloads Affected: 14909664e4e192f4c6f6fcdccd9919af7cf783ab before fddd41445a0537b093e6b3f6232c9933cad1e48b; 14909664e4e192f4c6f6fcdccd9919af7cf783ab before 1132e5edc2866c3530be17622153a597095f0e43; 14909664e4e192f4c6f6fcdccd9919af7cf783ab before 9c67b44edb3598d234efae6e44649eb993c03da5; 14909664e4e192f4c6f6fcdccd9919af7cf783ab before 0bfa7bba1f41aaf5f0604dc712bb4701493e3aa0; 14909664e4e192f4c6f6fcdccd9919af7cf783ab before 59f80c919713250fe5d25a4d9aea4e49580fa1d4; 14909664e4e192f4c6f6fcdccd9919af7cf783ab before 2fa49b2715e1bad12ce3b0fa64e234d9582c8193; +3 more |
| CVE-2026-53221 | 9.8 | Jun 25 | ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() Affected: fbe68ee87522f6eaa10f9076c0a7117e1613f2f7 before c327fa4fca31415431202e063767a7ae342e19c6; fbe68ee87522f6eaa10f9076c0a7117e1613f2f7 before fc657ac0767c49839b3ef0b08dc0953ca30883f8; fbe68ee87522f6eaa10f9076c0a7117e1613f2f7 before 47fb3c2b4203556308e64354b3e78f2ce221d646; fbe68ee87522f6eaa10f9076c0a7117e1613f2f7 before f513f308cc4bdb4530d033431592ffbc29b7fca1; fbe68ee87522f6eaa10f9076c0a7117e1613f2f7 before 90fd4513315ca07da99cfd8549d3e553a7160f0d; fbe68ee87522f6eaa10f9076c0a7117e1613f2f7 before 2abfb19bbb81958714ad1d43ebeb65b30394184b; +3 more |
| CVE-2026-53216 | 9.8 | Jun 25 | net: mvpp2: limit XDP frame size to the RX buffer Affected: 07dd0a7aae7f72af7cec18909581c2bb570edddc before a3ee9231ccec6ec3be2de89c56f897055fd9eab1; 07dd0a7aae7f72af7cec18909581c2bb570edddc before ec8e1e5842bc0dbd4c272761f4db3651eecd0339; 07dd0a7aae7f72af7cec18909581c2bb570edddc before 3b8b0c3631b19faee53f0d15a49924129b063eec; 07dd0a7aae7f72af7cec18909581c2bb570edddc before 994bd2b58d2bd08aa97ec0836cc813cfcb00d749; 07dd0a7aae7f72af7cec18909581c2bb570edddc before 910617a4e67dbdd5fdb39d9dc6a51e491e1b2c3e; 07dd0a7aae7f72af7cec18909581c2bb570edddc before 9545cc5ef18ca22d031f2f47c157192460652359; +2 more |
| CVE-2026-53215 | 9.8 | Jun 25 | net: mvpp2: refill RX buffers before XDP or skb use Affected: 07dd0a7aae7f72af7cec18909581c2bb570edddc before a88b3293b556f4d8fba11db9a8061a6b0d3b69e6; 07dd0a7aae7f72af7cec18909581c2bb570edddc before a03cdcedb2cbcc42551dc3e4746929e93c5352d5; 07dd0a7aae7f72af7cec18909581c2bb570edddc before 580f92f27cb8724bcc4be98ee89890eab524a2ae; 07dd0a7aae7f72af7cec18909581c2bb570edddc before d0c8c4fbd22d260fe28530260656c5fb3c20ce84; 07dd0a7aae7f72af7cec18909581c2bb570edddc before 8a2126c5afe89f8ceeb60a3afb9f075b736194cd; 07dd0a7aae7f72af7cec18909581c2bb570edddc before 02e1b5c4d3b4c658b72c145427cded1bba613fc1; +6 more |
| CVE-2026-53176 | 9.8 | Jun 25 | IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN Affected: b8d26b3be8b33682cf163274ed07479a70554633 before 75ee6e4aa096aa9e7b2dd5c8ff98356e30aceefb; b8d26b3be8b33682cf163274ed07479a70554633 before e8a013c0c3ca2f6708341a56612a3f6d6921620a; b8d26b3be8b33682cf163274ed07479a70554633 before bd22740d7f14cb1c0289444cfd2c8d2938667c1d; b8d26b3be8b33682cf163274ed07479a70554633 before c1234229399f4af12c553b1b0ffd978eeba65548; b8d26b3be8b33682cf163274ed07479a70554633 before c5584e089b5af7b3bf8bd5e8ca0560cbf32b0a47; b8d26b3be8b33682cf163274ed07479a70554633 before df422fd273c96c2ee5beb80fc21adc8c70c29260; +3 more |
| CVE-2026-53175 | 9.8 | Jun 25 | inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush Affected: 22ee4010866da81aeee08e1ea3fddbe418feb212 before 0e823ca0e7391630784ae7dd0981b7ad170a93d9; 543555954b1ee8d1903a7020324efb41b0c97428 before c22599cc90e1cd5f8129c8670bd68a02ff7177b4; c70df25214ac9b32b53e18e6ae3b8f073ffa6903 before 89b909e9704587bfecc1aab1d37e98faee03b9f9; 006a5035b495dec008805df249f92c22c89c3d2e before 010c3313a4d178dc2d3ce958d2e5cb055e2864c1; 006a5035b495dec008805df249f92c22c89c3d2e before 32594b09854970d7ba83eb2dc8c69a2edd158c8e; 6.12.93 before 6.12.94; +2 more |
| CVE-2026-53151 | 9.8 | Jun 25 | rxrpc: Fix the ACK parser to extract the SACK table for parsing Affected: d57a3a151660902091491ac2633134e1be92557f before 5d1ae4e17a3ecd8561cdb4f4f70152f41039c4e1; d57a3a151660902091491ac2633134e1be92557f before 775c5e89272a2615b72bb84f611ba66fa3b7493e; d57a3a151660902091491ac2633134e1be92557f before 566c4c1244de50fbff1f89ff93c9d7b0fc256db4; d57a3a151660902091491ac2633134e1be92557f before 224298450be5c04d2a6ea1c2a94669d7ebf65d00; d57a3a151660902091491ac2633134e1be92557f before 333b6d5bb9f87827ac2639c737bf9613dbae7253; 6.2 |
| CVE-2026-53088 | 9.8 | Jun 24 | net: bcmgenet: fix off-by-one in bcmgenet_put_txcb Affected: 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636 before 14e9f86564fff7bcf7f45c1b69080e837b31d185; 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636 before fb9a3c1f547d0ff024dbfe7b6f327626ddf0a3de; 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636 before 85f34ec320d3881badfd4edc5fee5cd5012bb54d; 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636 before 2a74590170427a3ca7cc4bb8690cdd559129c29c; 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636 before 29394f722f620281f2ee9a47f947734e53d72c90; 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636 before 4cab761fc51c65aef741fcece4a18f3554edbc09; +5 more |
| CVE-2026-53086 | 9.8 | Jun 24 | net: bcmgenet: fix racing timeout handler Affected: 13ea657806cf73b379a0109f7042182f47c351a7 before e85b0c0a12e967930044608311471b665baa315c; 13ea657806cf73b379a0109f7042182f47c351a7 before e8206538cbaf4f4068e99a4cb1138690a1e00499; 13ea657806cf73b379a0109f7042182f47c351a7 before 681fdfe823b4f1036ed50b58b8838c7917ea389c; 13ea657806cf73b379a0109f7042182f47c351a7 before c270e2bec3e55a716d25c35341091339457ac883; 13ea657806cf73b379a0109f7042182f47c351a7 before 7ce1c26aac3b318886a57425f64b522da7389153; 13ea657806cf73b379a0109f7042182f47c351a7 before 5393b2b5bee2ac51a0043dc7f4ac3475f053d08d; +1 more |
| CVE-2026-53055 | 9.8 | Jun 24 | crypto: hisilicon/sec2 - prevent req used-after-free for sec Affected: f0ae287c50455f7be0d8dd45a803d403c7aa4d2e before b375c3c7209cc59e40e97998aa9bc768369cca0e; f0ae287c50455f7be0d8dd45a803d403c7aa4d2e before ad73563f3a1edbfddf2724136c6a15826b354e18; f0ae287c50455f7be0d8dd45a803d403c7aa4d2e before 67b53a660e6bf0da2fa8d8872e897a14d8059eaf; 6.17 |
| CVE-2026-53049 | 9.8 | Jun 24 | gfs2: add some missing log locking Affected: 5e4c7632aae1cce137792647f4fb6f599d1da893 before 3b28eb75afe520972bacc833850c2b30aa0824cd; 5e4c7632aae1cce137792647f4fb6f599d1da893 before ca95342cb1b39062a03c115830286f0a426053d5; 5e4c7632aae1cce137792647f4fb6f599d1da893 before bf5fcd9c37c2546beaf7b401d31aefd89017dc3d; 5e4c7632aae1cce137792647f4fb6f599d1da893 before f2f225cf505ac016132ded21690f3ba0a080a4e8; 5e4c7632aae1cce137792647f4fb6f599d1da893 before 49d9be0722da3a4a893ba905720cba1921834ec3; 5e4c7632aae1cce137792647f4fb6f599d1da893 before 98e8bf249c790d56de1abc4a5f8bd68035a00921; +2 more |
| CVE-2026-53046 | 9.8 | Jun 24 | ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine Affected: e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before 57b47231055b431ed0a1a55f33cac32981564405; e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before cc2da381875d4a67026e4c8feb3dba51a2a2d1bc; e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before 8fcefe840fa8c14ce667768e5b043286ac3bbcbe; e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before 8ef183216feaa24b66b940510d8b68f680eb56e9; e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before 7164b3953cefd540e7ebca828c793bc6869cfbc4; e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before b46aa129fa2807bfe1545fe74d9295d53c51520b; +2 more |
| CVE-2026-53045 | 9.8 | Jun 24 | memory: tegra124-emc: Fix dll_change check Affected: 73a7f0a90641b09300d47308682b674c570dd6a2 before a85967331144fde9300be38bb44d2558eb6b742e; 73a7f0a90641b09300d47308682b674c570dd6a2 before db0ae80865b515cc0b705c85877ec00f7eebe9fe; 73a7f0a90641b09300d47308682b674c570dd6a2 before 2369b1831161356e1bcb51385d3e532dc4fe2771; 73a7f0a90641b09300d47308682b674c570dd6a2 before 7e19e72f306484996c52ff96cc92f69b78ed5435; 73a7f0a90641b09300d47308682b674c570dd6a2 before 05f138fc7e27ee8e7a83ccf966c3fa26cda44dda; 73a7f0a90641b09300d47308682b674c570dd6a2 before 1793249c067a4b28e1aba0ad0e4d73aa9f9e165a; +3 more |
| CVE-2026-53010 | 9.8 | Jun 24 | ksmbd: fix use-after-free in smb2_open during durable reconnect Affected: 8df4bcdb0a4232192b2445256c39b787d58ef14d before f0ff7f12398e85b3a11745ff7feab6246f3d75c2; c8efcc786146a951091588e5fa7e3c754850cb3c before 4db3dcac84c2f14a45ae201efb38de1fb1bfc009; c8efcc786146a951091588e5fa7e3c754850cb3c before ce2e164c1c51c3f7813b80f8c926836e896bcbb3; c8efcc786146a951091588e5fa7e3c754850cb3c before 97a0cd55283b4e63fd92804da91c8d9896adcad9; c8efcc786146a951091588e5fa7e3c754850cb3c before 1baff47b81f94f9231c91236aa511420d0e266b9; 6.6.32 before 6.6.157; +1 more |
| CVE-2026-53006 | 9.8 | Jun 24 | ipv6: fix possible UAF in icmpv6_rcv() Affected: 4b3418fba0fe819197e3359d5ddbef84ba2c59de before 7bff2c8fe5c35ae58bf73104f53db3676e6e5d94; 4b3418fba0fe819197e3359d5ddbef84ba2c59de before aff0f28f5be803de2452ce702631c021fcd9ce8a; 4b3418fba0fe819197e3359d5ddbef84ba2c59de before 38bdbc897c0d83a3e2b925a51b69420f1feba29a; 4b3418fba0fe819197e3359d5ddbef84ba2c59de before 0069813e6ca9309eca78022bcb3aeb1e9ef90a12; 4b3418fba0fe819197e3359d5ddbef84ba2c59de before 1e1f0f89ee4692a64be3f3707ff8ac1ae57b03e7; 4b3418fba0fe819197e3359d5ddbef84ba2c59de before 7c66b368c6ff453f99cb39d84af93e908e51eef2; +3 more |
| CVE-2026-53002 | 9.8 | Jun 24 | netfilter: conntrack: remove sprintf usage Affected: 9fafcd7b203229c3f3893a475741afc27e276306 before 2f793ba78470a99f40389b7dc60a81d9f5ad3956; 9fafcd7b203229c3f3893a475741afc27e276306 before 6bbf829b4c1b44c941c47dd0d710f1393258f3d5; 9fafcd7b203229c3f3893a475741afc27e276306 before ab64e61c9323fa6de21bd20da1ddb29a0fb65d34; 9fafcd7b203229c3f3893a475741afc27e276306 before 1c9fb8aeed06790d42cdcd00f6c3ce0b9e926c1e; 9fafcd7b203229c3f3893a475741afc27e276306 before a8e0a32a23d3f34862af3b4da792ecb3a891a9a3; 9fafcd7b203229c3f3893a475741afc27e276306 before 8e3be0d12615a173fe260cd42753ca7a001acbf2; +3 more |
The 500 most important CVEs for this product (exploited first, then by severity)