LI
Product
Linux
On CISA KEVExploited in the wild
10,876
CVEs
11
On KEV
10.0
Max CVSS
1052
New 30D
Severity mix
Critical 490High 8Medium 2Low 0
Watch
Add Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-53151 | 9.8 | Jun 25 | rxrpc: Fix the ACK parser to extract the SACK table for parsing Affected: d57a3a151660902091491ac2633134e1be92557f before 5d1ae4e17a3ecd8561cdb4f4f70152f41039c4e1; d57a3a151660902091491ac2633134e1be92557f before 775c5e89272a2615b72bb84f611ba66fa3b7493e; d57a3a151660902091491ac2633134e1be92557f before 566c4c1244de50fbff1f89ff93c9d7b0fc256db4; d57a3a151660902091491ac2633134e1be92557f before 224298450be5c04d2a6ea1c2a94669d7ebf65d00; d57a3a151660902091491ac2633134e1be92557f before 333b6d5bb9f87827ac2639c737bf9613dbae7253; 6.2 |
| CVE-2026-53088 | 9.8 | Jun 24 | net: bcmgenet: fix off-by-one in bcmgenet_put_txcb Affected: 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636 before 14e9f86564fff7bcf7f45c1b69080e837b31d185; 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636 before fb9a3c1f547d0ff024dbfe7b6f327626ddf0a3de; 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636 before 85f34ec320d3881badfd4edc5fee5cd5012bb54d; 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636 before 2a74590170427a3ca7cc4bb8690cdd559129c29c; 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636 before 29394f722f620281f2ee9a47f947734e53d72c90; 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636 before 4cab761fc51c65aef741fcece4a18f3554edbc09; +5 more |
| CVE-2026-53086 | 9.8 | Jun 24 | net: bcmgenet: fix racing timeout handler Affected: 13ea657806cf73b379a0109f7042182f47c351a7 before e85b0c0a12e967930044608311471b665baa315c; 13ea657806cf73b379a0109f7042182f47c351a7 before e8206538cbaf4f4068e99a4cb1138690a1e00499; 13ea657806cf73b379a0109f7042182f47c351a7 before 681fdfe823b4f1036ed50b58b8838c7917ea389c; 13ea657806cf73b379a0109f7042182f47c351a7 before c270e2bec3e55a716d25c35341091339457ac883; 13ea657806cf73b379a0109f7042182f47c351a7 before 7ce1c26aac3b318886a57425f64b522da7389153; 13ea657806cf73b379a0109f7042182f47c351a7 before 5393b2b5bee2ac51a0043dc7f4ac3475f053d08d; +1 more |
| CVE-2026-53055 | 9.8 | Jun 24 | crypto: hisilicon/sec2 - prevent req used-after-free for sec Affected: f0ae287c50455f7be0d8dd45a803d403c7aa4d2e before b375c3c7209cc59e40e97998aa9bc768369cca0e; f0ae287c50455f7be0d8dd45a803d403c7aa4d2e before ad73563f3a1edbfddf2724136c6a15826b354e18; f0ae287c50455f7be0d8dd45a803d403c7aa4d2e before 67b53a660e6bf0da2fa8d8872e897a14d8059eaf; 6.17 |
| CVE-2026-53049 | 9.8 | Jun 24 | gfs2: add some missing log locking Affected: 5e4c7632aae1cce137792647f4fb6f599d1da893 before 3b28eb75afe520972bacc833850c2b30aa0824cd; 5e4c7632aae1cce137792647f4fb6f599d1da893 before ca95342cb1b39062a03c115830286f0a426053d5; 5e4c7632aae1cce137792647f4fb6f599d1da893 before bf5fcd9c37c2546beaf7b401d31aefd89017dc3d; 5e4c7632aae1cce137792647f4fb6f599d1da893 before f2f225cf505ac016132ded21690f3ba0a080a4e8; 5e4c7632aae1cce137792647f4fb6f599d1da893 before 49d9be0722da3a4a893ba905720cba1921834ec3; 5e4c7632aae1cce137792647f4fb6f599d1da893 before 98e8bf249c790d56de1abc4a5f8bd68035a00921; +2 more |
| CVE-2026-53046 | 9.8 | Jun 24 | ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine Affected: e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before 57b47231055b431ed0a1a55f33cac32981564405; e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before cc2da381875d4a67026e4c8feb3dba51a2a2d1bc; e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before 8fcefe840fa8c14ce667768e5b043286ac3bbcbe; e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before 8ef183216feaa24b66b940510d8b68f680eb56e9; e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before 7164b3953cefd540e7ebca828c793bc6869cfbc4; e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before b46aa129fa2807bfe1545fe74d9295d53c51520b; +2 more |
| CVE-2026-53045 | 9.8 | Jun 24 | memory: tegra124-emc: Fix dll_change check Affected: 73a7f0a90641b09300d47308682b674c570dd6a2 before a85967331144fde9300be38bb44d2558eb6b742e; 73a7f0a90641b09300d47308682b674c570dd6a2 before db0ae80865b515cc0b705c85877ec00f7eebe9fe; 73a7f0a90641b09300d47308682b674c570dd6a2 before 2369b1831161356e1bcb51385d3e532dc4fe2771; 73a7f0a90641b09300d47308682b674c570dd6a2 before 7e19e72f306484996c52ff96cc92f69b78ed5435; 73a7f0a90641b09300d47308682b674c570dd6a2 before 05f138fc7e27ee8e7a83ccf966c3fa26cda44dda; 73a7f0a90641b09300d47308682b674c570dd6a2 before 1793249c067a4b28e1aba0ad0e4d73aa9f9e165a; +3 more |
| CVE-2026-53010 | 9.8 | Jun 24 | ksmbd: fix use-after-free in smb2_open during durable reconnect Affected: 8df4bcdb0a4232192b2445256c39b787d58ef14d before f0ff7f12398e85b3a11745ff7feab6246f3d75c2; c8efcc786146a951091588e5fa7e3c754850cb3c before 4db3dcac84c2f14a45ae201efb38de1fb1bfc009; c8efcc786146a951091588e5fa7e3c754850cb3c before ce2e164c1c51c3f7813b80f8c926836e896bcbb3; c8efcc786146a951091588e5fa7e3c754850cb3c before 97a0cd55283b4e63fd92804da91c8d9896adcad9; c8efcc786146a951091588e5fa7e3c754850cb3c before 1baff47b81f94f9231c91236aa511420d0e266b9; 6.6.32 before 6.6.157; +1 more |
| CVE-2026-53006 | 9.8 | Jun 24 | ipv6: fix possible UAF in icmpv6_rcv() Affected: 4b3418fba0fe819197e3359d5ddbef84ba2c59de before 7bff2c8fe5c35ae58bf73104f53db3676e6e5d94; 4b3418fba0fe819197e3359d5ddbef84ba2c59de before aff0f28f5be803de2452ce702631c021fcd9ce8a; 4b3418fba0fe819197e3359d5ddbef84ba2c59de before 38bdbc897c0d83a3e2b925a51b69420f1feba29a; 4b3418fba0fe819197e3359d5ddbef84ba2c59de before 0069813e6ca9309eca78022bcb3aeb1e9ef90a12; 4b3418fba0fe819197e3359d5ddbef84ba2c59de before 1e1f0f89ee4692a64be3f3707ff8ac1ae57b03e7; 4b3418fba0fe819197e3359d5ddbef84ba2c59de before 7c66b368c6ff453f99cb39d84af93e908e51eef2; +3 more |
| CVE-2026-53002 | 9.8 | Jun 24 | netfilter: conntrack: remove sprintf usage Affected: 9fafcd7b203229c3f3893a475741afc27e276306 before 2f793ba78470a99f40389b7dc60a81d9f5ad3956; 9fafcd7b203229c3f3893a475741afc27e276306 before 6bbf829b4c1b44c941c47dd0d710f1393258f3d5; 9fafcd7b203229c3f3893a475741afc27e276306 before ab64e61c9323fa6de21bd20da1ddb29a0fb65d34; 9fafcd7b203229c3f3893a475741afc27e276306 before 1c9fb8aeed06790d42cdcd00f6c3ce0b9e926c1e; 9fafcd7b203229c3f3893a475741afc27e276306 before a8e0a32a23d3f34862af3b4da792ecb3a891a9a3; 9fafcd7b203229c3f3893a475741afc27e276306 before 8e3be0d12615a173fe260cd42753ca7a001acbf2; +3 more |
| CVE-2026-52993 | 9.8 | Jun 24 | tipc: fix double-free in tipc_buf_append() Affected: d618d09a68e4eed7a435beb2e355250f6f40664a before a438975a6dcdbd70865978c021650d1485586f0b; d618d09a68e4eed7a435beb2e355250f6f40664a before 4ee4deadaae7cb2e3d53af0fc889cf92a73413c0; d618d09a68e4eed7a435beb2e355250f6f40664a before d3556656c6daebf8def751c7e71d11dd0a180d24; d618d09a68e4eed7a435beb2e355250f6f40664a before 0274f24485fc38032d4093e463dc3ff5c7a667c9; d618d09a68e4eed7a435beb2e355250f6f40664a before 4d104882bc815d4ec666ace9155f5f52715879a6; d618d09a68e4eed7a435beb2e355250f6f40664a before 1d5e589055880fae229e229e1929e087dbe08cf3; +3 more |
| CVE-2026-52989 | 9.8 | Jun 24 | nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers Affected: 1385be357e8acd09b36e026567f3a9d5c61139de before 3df42a854686fa06484e37ac1a3931c8e3e3453c; dca1a6ba0da9f472ef040525fab10fd9956db59f before d7c8f95f599b3b38a717d2e771c3f8c174f657c3; 19672ae68d52ff75347ebe2420dde1b07adca09f before f9204a2b78dd18374d3bcf9bf93d9021ce22de1b; ab200d71553bdcf4de554a5985b05b2dd606bc57 before c2a11441538bdbbc5aa003f190995eba93a89b88; 52a0a98549344ca20ad81a4176d68d28e3c05a5c before 046fa5c72d15cd8e2d592e275697ea399d8f76b0; 52a0a98549344ca20ad81a4176d68d28e3c05a5c before ea8e356acb165cb1fd75537a52e1f66e5e76c538; +9 more |
| CVE-2026-52986 | 9.8 | Jun 24 | netfilter: nf_conntrack_sip: don't use simple_strtoul Affected: 05e3ced297fe755093140e7487e292fb7603316e before 8cd0358379570003659186706e077929d6930c40; 05e3ced297fe755093140e7487e292fb7603316e before 9c6afcb1c3cbb2c0da65b8515ac14d7273872f84; 05e3ced297fe755093140e7487e292fb7603316e before b3264c977e79d8a25778d4fd11520f00fea1329c; 05e3ced297fe755093140e7487e292fb7603316e before ea2ecd29b8f4433e52607192ca91084f95787ca0; 05e3ced297fe755093140e7487e292fb7603316e before 9f69c323ae0ab517e595c2cc74e0ae0d9d085611; 05e3ced297fe755093140e7487e292fb7603316e before 7df9863bf538a626e8a684e59cb2c43eac0ef3c8; +3 more |
| CVE-2026-52982 | 9.8 | Jun 24 | net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 5af290c86fa81ddbc86a08d54229af5daa40c6a4; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 24831b0b2ada9fef18d1f486b7b7c444ee5ba637; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 423b5b86e14e190f6e3161eb5f2ea5f908295ba7; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 5db090ca07b28a63fb1499690cf19a3f3adafacb; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 30cf9829d09ca958279c937af8e35495cd2f1e09; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6999d70e0eda39af029fa1891c48f0a8832b09d5; +3 more |
| CVE-2026-52955 | 9.8 | Jun 24 | libceph: Fix potential out-of-bounds access in crush_decode() Affected: f24e9980eb860d8600cbe5ef3d2fd9295320d229 before 6e70ef53e818c53eab28d7b0026b7fd03dddaba5; f24e9980eb860d8600cbe5ef3d2fd9295320d229 before ebe76d58a48a48031b98543d86c4cd30a825b622; f24e9980eb860d8600cbe5ef3d2fd9295320d229 before 3f42508191e129ee6b5ea96578d5cab14f2a013a; f24e9980eb860d8600cbe5ef3d2fd9295320d229 before ea0d42137f0c06da71e37ffc647aab4c5309599a; f24e9980eb860d8600cbe5ef3d2fd9295320d229 before cceb10023e76bc89f3fe9238ebd0ccab0fc7c7c5; f24e9980eb860d8600cbe5ef3d2fd9295320d229 before 0f3604cbe4df14c5e58288ac9f57511e726a222d; +3 more |
| CVE-2026-52931 | 9.8 | Jun 24 | batman-adv: tp_meter: avoid use of uninit sender vars Affected: 33a3bb4a3345bb511f9c69c913da95d4693e2a4e before 0e388af04b3958b178a1b979527f93eb46ea1fee; 33a3bb4a3345bb511f9c69c913da95d4693e2a4e before 1a21c055f66e78973712a4a1be2a554f1ee2e4f4; 33a3bb4a3345bb511f9c69c913da95d4693e2a4e before 9884c9c02d3c90e9215db3c5128f59045d20ae91; 33a3bb4a3345bb511f9c69c913da95d4693e2a4e before 53f931e0146ae5bdab4cba302646827d06b3794b; 33a3bb4a3345bb511f9c69c913da95d4693e2a4e before ecdaa3e4d91040206afe21bc8a0d1198a0971ff3; 33a3bb4a3345bb511f9c69c913da95d4693e2a4e before dc2ae5fbd2dadc26735092f140b246841d969a11; +3 more |
| CVE-2026-52924 | 9.8 | Jun 24 | sctp: purge outqueue on stale COOKIE-ECHO handling Affected: 5bbbbe32a43199c2b9ea5ea66fab6241c64beb51 before 84b7a319105db2f917ccdcf502bdc866082b1285; 5bbbbe32a43199c2b9ea5ea66fab6241c64beb51 before f46e1d1a758878f0d22c4fbbd1bf42bb7165d1e8; 5bbbbe32a43199c2b9ea5ea66fab6241c64beb51 before 3c0741a441a7df7099d7ca6a64a6a0de09c677c8; 5bbbbe32a43199c2b9ea5ea66fab6241c64beb51 before 2afc9e684dc7fecf73db1edc937ebbc47b4b68dc; 5bbbbe32a43199c2b9ea5ea66fab6241c64beb51 before 1d4652f677906a64487c13f9ace54b0eb263b5d0; 5bbbbe32a43199c2b9ea5ea66fab6241c64beb51 before a6207349e703cfc04756a4d16dec9176135813a5; +3 more |
| CVE-2026-52914 | 9.8 | Jun 24 | batman-adv: fix fragment reassembly length accounting Affected: 610bfc6bc99bc83680d190ebc69359a05fc7f605 before e4f3f6b818aa6a678bc54a2d4e0bece2303c6a64; 610bfc6bc99bc83680d190ebc69359a05fc7f605 before 37be61825b15534a16ff9cfc9546de155b6df982; 610bfc6bc99bc83680d190ebc69359a05fc7f605 before 975563c5de1123dde1ec7946bf5556d20c89d74e; 610bfc6bc99bc83680d190ebc69359a05fc7f605 before f653b040dad1af70fa5cd4fe085e4758925480c9; 610bfc6bc99bc83680d190ebc69359a05fc7f605 before e910dbf509125fe51ad68e4fa74dc8ab0a8e787a; 610bfc6bc99bc83680d190ebc69359a05fc7f605 before 3eb8bcb823391bd58997831b3c9c152a4ba8e255; +3 more |
| CVE-2026-46325 | 9.8 | Jun 9 | RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE Affected: 592627ccbdff0ec6fff00fc761142a76db750dd4 before e327021bd73b134c18167e2cd2a52eb5597fcba6; 592627ccbdff0ec6fff00fc761142a76db750dd4 before 2a585a08a43c568ed6e9f27a97fd3d95106b9e68; 592627ccbdff0ec6fff00fc761142a76db750dd4 before 409c2c5508f3d30627bea576f8676de523cb906e; 592627ccbdff0ec6fff00fc761142a76db750dd4 before 836f6c13c9674027793f720be3f15ecd2b90b6ca; 592627ccbdff0ec6fff00fc761142a76db750dd4 before 12985e5915a0b8354796efadaaeb201eed115377; 0e443760b8b7b1e6723f4408afa056b2bc4fea12; +2 more |
| CVE-2026-46289 | 9.8 | Jun 8 | lib/scatterlist: fix length calculations in extract_kvec_to_sg Affected: 0185846975339a5c348373aa450a977f5242366b before 3f17500e86d730c76db638bb3ae52f9b5e496c76; 0185846975339a5c348373aa450a977f5242366b before e5e22fc9963469e678c4f4bb38d26adcec107f1e; 0185846975339a5c348373aa450a977f5242366b before 8fbba6829057979149d1b37d65690c037f3ddf4d; 0185846975339a5c348373aa450a977f5242366b before 9d38756d0a93b66163554219fa9c3365f40c4035; 0185846975339a5c348373aa450a977f5242366b before 07b7d66e65d9cfe6b9c2c34aa22cfcaac37a5c45; 6.3 |
| CVE-2026-46195 | 9.8 | May 28 | smb: client: validate dacloffset before building DACL pointers Affected: bc3e9dd9d104ca1b75644eab87b38ce8a924aef4 before 5de2665e913a10ad70aaeecf736b97276e83d995; bc3e9dd9d104ca1b75644eab87b38ce8a924aef4 before f9dc3be8f403c1216df73e57221f44b045e7ee0b; bc3e9dd9d104ca1b75644eab87b38ce8a924aef4 before ba7f71b6161c0943dafc367565e5843d16b7d505; bc3e9dd9d104ca1b75644eab87b38ce8a924aef4 before 3b1ddba19e77ee35241cd27f16dc3e8d14e08db7; bc3e9dd9d104ca1b75644eab87b38ce8a924aef4 before c688f3ed73d31943334ad2139cb02ec49664322a; bc3e9dd9d104ca1b75644eab87b38ce8a924aef4 before 8bd07e417b6bda67e317920584e48cb6ee442a8a; +2 more |
| CVE-2026-46137 | 9.8 | May 28 | mptcp: pm: ADD_ADDR rtx: fix potential data-race Affected: 00cfd77b9063dcdf3628a7087faba60de85a9cc8 before d9b272a85fe6b8f993e37915311e4038c814a533; 00cfd77b9063dcdf3628a7087faba60de85a9cc8 before 23079e0b7742ec114d3507c3e3aad01b7b69e4af; 00cfd77b9063dcdf3628a7087faba60de85a9cc8 before b35605e1f1e877038c8c9d499babbc891cdd234f; 00cfd77b9063dcdf3628a7087faba60de85a9cc8 before 013dcdc1961543b9a3433466bc8c79a2f4ca75b5; 00cfd77b9063dcdf3628a7087faba60de85a9cc8 before 6e4710d7d8782cb61af29a7e7111ddfc38b9e1a3; 00cfd77b9063dcdf3628a7087faba60de85a9cc8 before 2ad56e434199ca24a812bb353667aa1c3860f513; +3 more |
| CVE-2026-46135 | 9.8 | May 28 | nvmet-tcp: fix race between ICReq handling and queue teardown Affected: 872d26a391da92ed8f0c0f5cb5fef428067b7f30 before b7dd4d27aa70bd98bb10572310e913668baf6a65; 872d26a391da92ed8f0c0f5cb5fef428067b7f30 before 9c63cf80895a70eb4fcfcaa725bb1ac9ae76f02b; 872d26a391da92ed8f0c0f5cb5fef428067b7f30 before 6f96dea4819d122737b217ea16660d255abbf8c6; 872d26a391da92ed8f0c0f5cb5fef428067b7f30 before 5f0b95ef68ab9afba75b20eebf436130f80c161a; 872d26a391da92ed8f0c0f5cb5fef428067b7f30 before 49891c8fe0cb43fbbe480da1cdccfbbaeb820cb3; 872d26a391da92ed8f0c0f5cb5fef428067b7f30 before 67e1aaf93b495c2f10bc8a5fbba575fbb7f449b6; +3 more |
| CVE-2026-46115 | 9.8 | May 28 | block: add pgmap check to biovec_phys_mergeable Affected: 49580e690755d0e51ed7aa2c33225dd884fa738a before 3d2ecbd444b01d6500671d1a582b7393943cf539; 49580e690755d0e51ed7aa2c33225dd884fa738a before a7f3aa8c9df3905fe820ae36b67ba56b81587574; 49580e690755d0e51ed7aa2c33225dd884fa738a before f17d521075325b8afc42d1baa1c28a5e9aca111f; 49580e690755d0e51ed7aa2c33225dd884fa738a before f632dab4b841554cd6416058c61886d7db176581; 49580e690755d0e51ed7aa2c33225dd884fa738a before 13920e4b7b784b40cf4519ff1f0f3e513476a499; 6.2 |
| CVE-2026-46039 | 9.8 | May 27 | rxgk: Fix potential integer overflow in length check Affected: 2429a197648178cd4dc930a9d87c13c547460564 before 43222ac484f93b3ec2d240a7575e1cedd31f5fa4; 2429a197648178cd4dc930a9d87c13c547460564 before 183d37f12d1c8ed24a5bfc7addad05510da22a94; 2429a197648178cd4dc930a9d87c13c547460564 before 6929350080f4da292d111a3b33e53138fee51cec; 71571e187106631a8127f2dde780f35caa358d33; 6.16.9 before 6.17; 6.17 |
| CVE-2026-45988 | 9.8 | May 27 | rxrpc: Fix re-decryption of RESPONSE packets Affected: 17926a79320afa9b95df6b977b40cca6d8713cea before d61482be4aae1835b78875761206241835a7510e; 17926a79320afa9b95df6b977b40cca6d8713cea before 7b89868305052b94a91b708c462bc2281fa42a4a; 17926a79320afa9b95df6b977b40cca6d8713cea before 76cb9a2d252274adfae6e293a292434631a7d472; 17926a79320afa9b95df6b977b40cca6d8713cea before f55b383070170e988e4dec28be2af1714d258521; 17926a79320afa9b95df6b977b40cca6d8713cea before 0422e7a4883f25101903f3e8105c0808aa5f4ce9; 2.6.22 |
| CVE-2026-45972 | 9.8 | May 27 | smb: client: fix potential UAF and double free in smb2_open_file() Affected: 743f70406264348c0830f38409eb6c40a42fb2db before 96e53bb3ee2f354cf6b4ab07bcc56e500f8b3f74; 3a6d6b332f92990958602c1e35ce0173e2dd62e9 before 7425453ea16dbc3bbb0f6cac4d60b537e5e4d151; b64e3b5d8d759dd4333992e4ba4dadf9359952c8 before 4d339b219004869e96c4ce56b8891f83a38da4c0; 9ee608a64e37cea5b4b13e436c559dd0fb2ad1b5 before e66dcf7bb9c4df5582c82bc3582725abcbfbea73; e3a43633023e3cacaca60d4b8972d084a2b06236 before 639deb962986ef2f5e2a6d5a600c66f922471e81; e3a43633023e3cacaca60d4b8972d084a2b06236 before ebbbc4bfad4cb355d17c671223d0814ee3ef4eda; +5 more |
| CVE-2026-45898 | 9.8 | May 27 | RDMA/iwcm: Fix workqueue list corruption by removing work_list Affected: e1168f09b3314992f1c5251f3793102035da7237 before 38c5b49fffa1b760959af74f11806eeb3ef4706d; e1168f09b3314992f1c5251f3793102035da7237 before eb715133e0ae12514bba4d2d5ce1dee774476056; e1168f09b3314992f1c5251f3793102035da7237 before a6b9e793e74e372daa266fd0d58b751305877897; e1168f09b3314992f1c5251f3793102035da7237 before 7874eeacfa42177565c01d5198726671acf7adf2; 6.11 |
| CVE-2026-43501 | 9.8 | May 21 | ipv6: rpl: reserve mac_len headroom when recompressed SRH grows Affected: 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 before bde199c72d319a4e207f88daabc888317504e2fb; 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 before be1fa0aa9b4fdd5a8b7a61ba520a690a68391e6e; 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 before 0a9e8053f1f8a8e1bfc1dd61ffe67be6c1180402; 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 before 8e8be63465a5e80394c70324603dfea1bfdad48f; 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 before 4babc2d9fda2df43823b85d08a0180b68f1b0854; 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 before c261d07a80576dc8ccf394ef8f074f8c67a06b37; +3 more |
| CVE-2026-43493 | 9.8 | May 19 | crypto: pcrypt - Fix handling of MAY_BACKLOG requests Affected: 5a1436beec5744029f3ac90b6fe71a698dcd6155 before ae7e95638d956d556d74b9abb9e780d3bd3dcd9e; 5a1436beec5744029f3ac90b6fe71a698dcd6155 before 1d7f07df450bac3301938fbc4251f2611be4084e; 5a1436beec5744029f3ac90b6fe71a698dcd6155 before 76641449b28979ebd6c02e9598367e119e385236; 5a1436beec5744029f3ac90b6fe71a698dcd6155 before 9f1cbca178c03188e201ed175251372149bb25f2; 5a1436beec5744029f3ac90b6fe71a698dcd6155 before eb34e243df57e32f4c08fa191f3602ea19076276; 5a1436beec5744029f3ac90b6fe71a698dcd6155 before 77d55bc8675ee851ed639dc9be77325a8024cf67; +3 more |
| CVE-2026-43465 | 9.8 | May 8 | net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ Affected: 8b051d7f530e8a5237da242fbeafef02fec6b813 before 6451ea47d60a8ca3524dfe370c013cd01063c7d3; cb9edd583e23979ee546981be963ad5f217e8b18 before f0a850677a7b7589208ce11480e6958f516c8386; 87bcef158ac1faca1bd7e0104588e8e2956d10be before 7d7342a18fadcdb70a63b3c930dc63528ce51832; 87bcef158ac1faca1bd7e0104588e8e2956d10be before 043bd62f748bc9fd98154037aa598cffbd3c667c; 87bcef158ac1faca1bd7e0104588e8e2956d10be before db25c42c2e1f9c0d136420fff5e5700f7e771a6f; f2557d7fa38e9475b38588f5c124476091480f53; +4 more |
| CVE-2026-43414 | 9.8 | May 8 | scsi: qla2xxx: Completely fix fcport double free Affected: ef23850940d9a52c39936d27254824ccf5e9b6bd before baabbd29191514391ca81594e43261bd17c6795a; 4895009c4bb72f71f2e682f1e7d2c2d96e482087 before 7172f41786dc08144da4627483e405de57bf8d2c; 4895009c4bb72f71f2e682f1e7d2c2d96e482087 before 4097a2afe8acc6038b71aab825430f1403decf20; 4895009c4bb72f71f2e682f1e7d2c2d96e482087 before d48ea85463f5b34f7b92ea0a13eddf1ab993da7b; 4895009c4bb72f71f2e682f1e7d2c2d96e482087 before c0b7da13a04bd70ef6070bfb9ea85f582294560a; 7861213201838480dc222634c56fb6db113d010d; +14 more |
| CVE-2026-43402 | 9.8 | May 8 | kthread: consolidate kthread exit paths to prevent use-after-free Affected: 4d13f4304fa43471bfea101658a11feec7b28ac0 before 4729c7b00a347fd37d0cbc265b85f2884c3e06b6; 4d13f4304fa43471bfea101658a11feec7b28ac0 before 5a591d7a5e48d30100943940a30a6ab41b15c672; 4d13f4304fa43471bfea101658a11feec7b28ac0 before 28aaa9c39945b7925a1cc1d513c8f21ed38f5e4f; 6.14 |
| CVE-2026-43384 | 9.8 | May 8 | net/tcp-ao: Fix MAC comparison to be constant-time Affected: 0a3a809089eb1d4a0a2fd0c16b520d603988c859 before 8be6ed64966da48b6c4726918f106c18742a5125; 0a3a809089eb1d4a0a2fd0c16b520d603988c859 before a269cbdc442f8658bca35383e34b9d0b0ff95a1c; 0a3a809089eb1d4a0a2fd0c16b520d603988c859 before 080b0e210088296dd50d6637c06c1db14246adfe; 0a3a809089eb1d4a0a2fd0c16b520d603988c859 before 67edfec516d30d3e62925c397be4a1e5185802fc; 6.7 |
| CVE-2026-43379 | 9.8 | May 8 | ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() Affected: 27b40b7bfcd121fe13a150ffe11957630cf49246 before bf4d66d72e4a9e268c1012c331ce9eaedb5e2086; 5fb282ba4fef8985a5acf2b32681f2ec07732561 before 960699317d39f46611f4ebeb69edc567c1f4e6b6; 5fb282ba4fef8985a5acf2b32681f2ec07732561 before dbbd328cf58261ca239756fe1c0d10c9518d3399; 5fb282ba4fef8985a5acf2b32681f2ec07732561 before b3568347c51c46e2cabc356bc34676df98296619; 5fb282ba4fef8985a5acf2b32681f2ec07732561 before eac3361e3d5dd8067b3258c69615888eb45e9f25; 6.6.32 before 6.6.130; +1 more |
| CVE-2026-43376 | 9.8 | May 8 | ksmbd: fix use-after-free by using call_rcu() for oplock_info Affected: 296cb5457cc6f4a754c4ae29855f8a253d52bcc6 before 302fef75512b2c8329a3f5efab1ae7ba2562387a; d54ab1520d43e95f9b2e22d7a05fc9614192e5a5 before 08aa9f3c8cf4d0bee44df540dfe34e8d64069f2c; 18b4fac5ef17f77fed9417d22210ceafd6525fc7 before 1d6abf145615dbfe267ce3b0a271f95e3780e18e; 18b4fac5ef17f77fed9417d22210ceafd6525fc7 before ce8507ee82c888126d8e7565e27c016308d24cde; 18b4fac5ef17f77fed9417d22210ceafd6525fc7 before 1dfd062caa165ec9d7ee0823087930f3ab8a6294; d73686367ad68534257cd88a36ca3c52cb8b81d8; +4 more |
| CVE-2026-43341 | 9.8 | May 8 | net/ipv6: ioam6: prevent schema length wraparound in trace fill Affected: 8c6f6fa6772696be0c047a711858084b38763728 before d3a1fb2ca323d7a4e10ab3afbfa25e6d8921e4f2; 8c6f6fa6772696be0c047a711858084b38763728 before e96d48b37708d53cbdc47f6f60b0714fc4a5f596; 8c6f6fa6772696be0c047a711858084b38763728 before d1b041080086e91d3733a5438a8c51ad5d3d8e09; 8c6f6fa6772696be0c047a711858084b38763728 before 77695a69baca9b99d95fad09fc78c2318736604f; 8c6f6fa6772696be0c047a711858084b38763728 before 184d2e9db27c0f76226b5cad16fe29510a5d2280; 8c6f6fa6772696be0c047a711858084b38763728 before d6e1c9b02d85a4f1f4ba6d68e916d9b610a3ed7d; +2 more |
| CVE-2026-43304 | 9.8 | May 8 | libceph: define and enforce CEPH_MAX_KEY_LEN Affected: cd1a677cad994021b19665ed476aea63f5d54f31 before 6405e8c680974bb74e2c98d5249fb52c7b12a6c6; cd1a677cad994021b19665ed476aea63f5d54f31 before 8d745d38c88ecbed95f6b2b39857bf89f35a3244; cd1a677cad994021b19665ed476aea63f5d54f31 before e1dc45d97975f9db65694d234fbddf1915176e16; cd1a677cad994021b19665ed476aea63f5d54f31 before 1b275bd49e58752efb83767a5d1aed41356c5e64; cd1a677cad994021b19665ed476aea63f5d54f31 before c1a0f5f1e5e7e98c36a362ec3d1fcfd9932931ed; cd1a677cad994021b19665ed476aea63f5d54f31 before d82467c07b03a27c3c5469b62bb3b726305a80bb; +2 more |
| CVE-2026-43208 | 9.8 | May 6 | net: do not pass flow_id to set_rps_cpu() Affected: 48aa30443e52c9666d5cd5e67532e475f212337e before 5455a232edea6b946b99449f15ca771a8874a5a6; 48aa30443e52c9666d5cd5e67532e475f212337e before ed712dc0d64dee5f0d05e4d8ca57711f8a9c850c; 48aa30443e52c9666d5cd5e67532e475f212337e before 8a8a9fac9efa6423fd74938b940cb7d731780718; 6.18 |
| CVE-2026-43198 | 9.8 | May 6 | tcp: fix potential race in tcp_v6_syn_recv_sock() Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before aef4a9ae95d1bc4f7897065011e6261026719aeb; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before dad1fe7db6c6519138430ac8f5e589c18f83bfc9; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before a7e761ba55efaa9c49e0afdd304bb78167af3429; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before cd644e6dc72eec8d9d988717ea1c54f8668ded69; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9ed654e340f4c73bc6f0af2fbc90ac293e645ce0; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before fe89b2f05b854847784f91127319172945c1fadd; +3 more |
| CVE-2026-43186 | 9.8 | May 6 | ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() Affected: 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 before f4d9d4b8fd839719d564651671e24c62c545c23b; 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 before fb3c662fafebc5b9d74417ed1de8759f6bb72143; 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 before 632d233cf2e64a46865ae2c064ae3c9df7c8864f; 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 before 0591d6509c2ff13f09ea2998434aba0c0472e978; 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 before e90346a2f1e8917d5760a44a1f61c44e3b36d96b; 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 before ea3632aefc04205436868541638e26f4a74d5637; +2 more |
| CVE-2026-43185 | 9.8 | May 6 | ksmbd: fix signededness bug in smb_direct_prepare_negotiation() Affected: 0626e6641f6b467447c81dd7678a69c66f7746cf before 56eab82fa6fb5ca024b0514e249d40d9b23ee5a7; 0626e6641f6b467447c81dd7678a69c66f7746cf before a110dbe928561d440e9e117d17331139a0bedace; 0626e6641f6b467447c81dd7678a69c66f7746cf before ceae058eb707ddd0d68f0872f9d9f23b7c30c37b; 0626e6641f6b467447c81dd7678a69c66f7746cf before 55abc475d096da4a5356b6efb0cfdc6156bc1550; 0626e6641f6b467447c81dd7678a69c66f7746cf before 6b4f875aac344cdd52a1f34cc70ed2f874a65757; 5.15 |
| CVE-2026-43125 | 9.8 | May 6 | dlm: validate length in dlm_search_rsb_tree Affected: 7210cb7a72a22303cdb225bd1aea28697a17bbae before 2deafd015ea9a0e75ee5764e20eb1e16bd73efd8; 7210cb7a72a22303cdb225bd1aea28697a17bbae before 67288113c5e6cf9e659b4065c0ed6f16100e0c71; 7210cb7a72a22303cdb225bd1aea28697a17bbae before 082083c9fbd99422a0370fe2102144a231c9f5d6; 7210cb7a72a22303cdb225bd1aea28697a17bbae before 5f053a2e7209d326cbbc07738fa6d6893d307438; 7210cb7a72a22303cdb225bd1aea28697a17bbae before 080e5563f878c64e697b89e7439d730d0daad882; 3.4 |
| CVE-2026-43067 | 9.8 | May 5 | ext4: handle wraparound when searching for blocks for indirect mapped blocks Affected: 9d89b9d55e25cb340c5b4b769876edc551b7a9ff before f89bba144938921a2249237ad04a0183ff3f8930; 1b0edd6022a3f44ce87fea9959a9310f4628fbea before 83170a05908b6cf2fb3235d3065bf613ff866f3c; 9eea2f57d11b30049ff996ac3eff6e0dc8089e5f before 4bec4a498ce86314d470ae6144120461f2138c29; 34c803edc0b3365a42efcf9815acab63b4cf54e0 before 12624c5b724a81e14e532972b40d863b0de3b7d1; 321ed8d559c951e71ad2d2d69a4cf0445644e865 before 2a368ccddfc492a0aa951e2caef2985f20e96503; 4865c768b563deff1b6a6384e74a62f143427b42 before bb81702370fad22c06ca12b6e1648754dbc37e0f; +7 more |
| CVE-2026-43039 | 9.8 | May 1 | net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch Affected: 7a64bb388df3cf091afdd047c701039a13acd3b4 before a968438d4fc17ee1dcdc3cfa490dcb5e7709cf76; 7a64bb388df3cf091afdd047c701039a13acd3b4 before 5597dd284ff8c556c0b00f6a34473677426e3f81; 6.19 |
| CVE-2026-43038 | 9.8 | May 1 | ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Affected: ca15a078bd907df5fc1c009477869c5cbde3b753 before c438ba010171b70bad22fc18b1d5bdc3627476e8; ca15a078bd907df5fc1c009477869c5cbde3b753 before 0452b6526b2f54b2413b9cb4ff1ea2ac542c99c7; ca15a078bd907df5fc1c009477869c5cbde3b753 before a4437faf135da293d16fcc4cc607316742bd0ebb; ca15a078bd907df5fc1c009477869c5cbde3b753 before 3d5127d998de617b130aae96b138dba22ac6a8a7; ca15a078bd907df5fc1c009477869c5cbde3b753 before e41953e7d118e2702bcb217879c173d9d1d3cd4e; ca15a078bd907df5fc1c009477869c5cbde3b753 before a2edbb6393972a02114b6003953a5cef3104fada; +3 more |
| CVE-2026-43037 | 9.8 | May 1 | ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Affected: c4d3efafcc933fd2ffd169d7dc4f980393a13796 before ea9f65b27c8404e164848ebff1443310fd187629; c4d3efafcc933fd2ffd169d7dc4f980393a13796 before d6621f60192fe10c047a4487be42a6f4c150707f; c4d3efafcc933fd2ffd169d7dc4f980393a13796 before 2cc6e3b0fe0f0242d1f530a93a4924f48ab85ba5; c4d3efafcc933fd2ffd169d7dc4f980393a13796 before a0c4ce9900a108eaf55d0f3b399cb55999647d39; c4d3efafcc933fd2ffd169d7dc4f980393a13796 before 1063515ce15ff31065c4e7f8265f4c2fd3c54876; c4d3efafcc933fd2ffd169d7dc4f980393a13796 before 590f622669b97eaf7b57a1de7b0a6e68c5d8b2c3; +3 more |
| CVE-2026-43011 | 9.8 | May 1 | net/x25: Fix potential double free of skb Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 5d0aa038a90b30c9bedde0c41c1fdcd98ecb16e9; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 3f5e3005984645bf5bd129c6b13149879580b1fb; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before f782dd382203b2a8c4552a628431b7de65a19a7b; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 143d4fa68ae9efb83b0c55b12cc7f0d03732a2b1; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 524371398d8463ea7e101fce2cbf3915645d1730; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before fa1dbc93530b34fab0da9862426fe9c918c74dc0; +3 more |
| CVE-2026-31718 | 9.8 | May 1 | ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger Affected: 8df4bcdb0a4232192b2445256c39b787d58ef14d before 0000a7780e0e446a28a273572f6ea8f7f582f694; c8efcc786146a951091588e5fa7e3c754850cb3c before e33c65f011980b4ad4abfd93585ec2079856368f; c8efcc786146a951091588e5fa7e3c754850cb3c before 3d6682726c2d3a46d31dae88b8166786b09b03ad; c8efcc786146a951091588e5fa7e3c754850cb3c before b34fc42cfe922e551f7a27d3ac3bb016e41d7dd9; c8efcc786146a951091588e5fa7e3c754850cb3c before 235e32320a470fcd3998fb3774f2290a0eb302a1; 6.6.32 before 6.6.140; +1 more |
| CVE-2026-31705 | 9.8 | May 1 | ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment Affected: 9f297df20d93411c0b4ddad7f88ba04a7cd36e77 before ddbbc8b2a09dd2cfed90871313e3691ae1db08a2; e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d before ffbce350c6fd1e99116ea57383b9031717e36d3b; e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d before 98f3de6ef4efbd899348d333f0902dc4ff14380c; e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d before 790304c02bf9bd7b8171feda4294d6e62d32ae8f; e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d before 922d48fe8c19f388ffa2f709f33acaae4e408de2; e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d before 30010c952077a1c89ecdd71fc4d574c75a8f5617; +4 more |
The 500 most important CVEs for this product (exploited first, then by severity)