LI
Product
Linux
On CISA KEVExploited in the wild
10,407
CVEs
11
On KEV
10.0
Max CVSS
1052
New 30D
Severity mix
Critical 490High 8Medium 2Low 0
Watch
Add Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-31669 | 9.8 | Apr 24 | mptcp: fix slab-use-after-free in __inet_lookup_established Affected: b19bc2945b40b9fd38e835700907ffe8534ef0de before f6e1f25fa5e733570f6d6fe37a4dfed2a0deba47; b19bc2945b40b9fd38e835700907ffe8534ef0de before fb1f54b7d16f393b8b65d328410f78b4beea8fcc; b19bc2945b40b9fd38e835700907ffe8534ef0de before 3fd6547f5b8ac99687be6d937a0321efda760597; b19bc2945b40b9fd38e835700907ffe8534ef0de before eb9c6aeb512f877cf397deb1e4526f646c70e4a7; b19bc2945b40b9fd38e835700907ffe8534ef0de before 15fa9ead4d5e6b6b9c794e84144146c917f2cb62; b19bc2945b40b9fd38e835700907ffe8534ef0de before b313e9037d98c13938740e5ebda7852929366dff; +2 more |
| CVE-2026-31668 | 9.8 | Apr 24 | seg6: separate dst_cache for input and output paths in seg6 lwtunnel Affected: 6c8702c60b88651072460f3f4026c7dfe2521d12 before 1dec91d3b1cefb82635761b7812154af3ef46449; 6c8702c60b88651072460f3f4026c7dfe2521d12 before 750569d6987a0ff46317a4b86eb3907e296287bf; 6c8702c60b88651072460f3f4026c7dfe2521d12 before 57d0374d14fa667dec6952173b93e7e84486d5c9; 6c8702c60b88651072460f3f4026c7dfe2521d12 before 84d458018b147176b259347103fccb7e93abd2b1; 6c8702c60b88651072460f3f4026c7dfe2521d12 before 6305ad032b03d2ea4181b953a66e19a9a6ed053c; 6c8702c60b88651072460f3f4026c7dfe2521d12 before fb56de5d99218de49d5d43ef3a99e062ecd0f9a1; +3 more |
| CVE-2026-31659 | 9.8 | Apr 24 | batman-adv: reject oversized global TT response buffers Affected: 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b before 7e5d007e0df946bffb8542fb112e0044014a5897; 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b before 2997f4bd1f982e7013709946e00be89b507693fa; 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b before 95c71365a2222908441b54d6f2c315e0c79fcec3; 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b before 69d61639bc7e963c3b645e570279d731e7c89062; 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b before f970646b9a39539d1bac86822ac78b5915455ea9; 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b before de6c1dc3c7d01a152607e6fcecee4d5288283f10; +3 more |
| CVE-2026-31657 | 9.8 | Apr 24 | batman-adv: hold claim backbone gateways by reference Affected: 23721387c409087fd3b97e274f34d3ddc0970b74 before 5202f071b367ffbc8e279fc7a00db14f5e587f52; 23721387c409087fd3b97e274f34d3ddc0970b74 before 69d1ce9c72eca91203ffdb8d08bacd511100aec6; 23721387c409087fd3b97e274f34d3ddc0970b74 before f4858832ddef2f39f21e30b7226bbcd3c4b2bc96; 23721387c409087fd3b97e274f34d3ddc0970b74 before 2f55b58b5a0bbed192d60c444a45a49cdf1b545f; 23721387c409087fd3b97e274f34d3ddc0970b74 before 7962b522222628596ca9ecc8722efc95367aadbd; 23721387c409087fd3b97e274f34d3ddc0970b74 before 4dee4c0688443aaf5bbec74aa203c851d1d53c35; +3 more |
| CVE-2026-31649 | 9.8 | Apr 24 | net: stmmac: fix integer underflow in chain mode Affected: 286a837217204b1ef105e3a554d0757e4fdfaac1 before 513e06735f5be575b409d195822195348b164e48; 286a837217204b1ef105e3a554d0757e4fdfaac1 before 275bdf762e82082f064e60a92448fa2ac43cf95b; 286a837217204b1ef105e3a554d0757e4fdfaac1 before a2b68a9a476b9544ff31f1fbcd5d80867a8a5e2f; 286a837217204b1ef105e3a554d0757e4fdfaac1 before b7b8012193fd98236d7ae05d4b553f010a77b2ef; 286a837217204b1ef105e3a554d0757e4fdfaac1 before 2c91b39912278d0878f9ba60ba04d2518b18a08d; 286a837217204b1ef105e3a554d0757e4fdfaac1 before 6fca757c20396dc2e604dcc61922264e9e3dc803; +3 more |
| CVE-2026-31637 | 9.8 | Apr 24 | rxrpc: reject undecryptable rxkad response tickets Affected: 17926a79320afa9b95df6b977b40cca6d8713cea before 252157d939d179b5d767cb860ff8fa7f8723b67a; 17926a79320afa9b95df6b977b40cca6d8713cea before a75b3b361dd481d942c5f259a82d59718a41092c; 17926a79320afa9b95df6b977b40cca6d8713cea before b3a808cd0790b5075aaa2bc3588edf02cd71d352; 17926a79320afa9b95df6b977b40cca6d8713cea before 47073aab8a3a5a7b41c9bd37d2a3dcbeeccd6c8a; 17926a79320afa9b95df6b977b40cca6d8713cea before a149dcae23309df9de1c3b6b5d468610ef5ab7de; 17926a79320afa9b95df6b977b40cca6d8713cea before 22f6258e7b31dba9bf88dce4e3ee7f0f20072e60; +3 more |
| CVE-2026-31633 | 9.8 | Apr 24 | rxrpc: Fix integer overflow in rxgk_verify_response() Affected: 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a before 1f864d9daaf622aeaa774404fd51e7d6a435b046; 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a before c1e242beb6b1efc3c286f617e8d940c8fbf2ed41; 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a before 699e52180f4231c257821c037ed5c99d5eb0edb8; 6.16 |
| CVE-2026-31609 | 9.8 | Apr 24 | smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() Affected: cca0526ef2344cab6944d7f441fc24e152da031b before a9940dcbe5cb92482c04efc7341039ddf7dbf607; 37b5c06956183b65e6808b509cf637632016cdf7 before 22b7c1c619d808aec4cad3dc42103345e370d107; 21538121efe6c8c5b51c742fa02cbe820bc48714 before f9a162c2bbcd0ac85bd07c5b37cf20286048b65c; 21538121efe6c8c5b51c742fa02cbe820bc48714 before 27b7c3e916218b5eb2ee350211140e961bfc49be; 6.18.11 before 6.18.24; 6.19.1 before 6.19.14; +1 more |
| CVE-2026-31608 | 9.8 | Apr 24 | smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() Affected: 5ef18a2e66f2f33fdac64437bddfb9fe6389fdc7 before 6968c91fab05b8fc4d6700e0cf34472bb422df25; 79242e7b6bc63efec28b7c235bc320806afce6c0 before 2ba03f46132b0d1a7bafb86e1ef61951a2254023; 34abd408c8ba24d7c97bd02ba874d8c714f49db1 before 830de6eeb9db4cb7e758201fb99328ef4ca4b032; 34abd408c8ba24d7c97bd02ba874d8c714f49db1 before 84ff995ae826aa6bbcc6c7b9ea569ff67c021d72; 6.18.11 before 6.18.24; 6.19.1 before 6.19.14; +1 more |
| CVE-2026-31607 | 9.8 | Apr 24 | usbip: validate number_of_packets in usbip_pack_ret_submit() Affected: 1325f85fa49f57df034869de430f7c302ae23109 before 324262c38438255bf6bdbf6342ca47c0badaab76; 1325f85fa49f57df034869de430f7c302ae23109 before 973f2c250289f5bf6cc146b98aa6fdde11fe50d6; 1325f85fa49f57df034869de430f7c302ae23109 before ce744264b06b97069b3722511ab355738311fee0; 1325f85fa49f57df034869de430f7c302ae23109 before 885c8591784da6314f9aa82fa460ac69f9f79e5f; 1325f85fa49f57df034869de430f7c302ae23109 before 8d155e2d1c4102f74f82a2bf9c016164bb0f7384; 1325f85fa49f57df034869de430f7c302ae23109 before 906f16a836de13fe61f49cdce2f66f2dbd14caf4; +14 more |
| CVE-2026-31589 | 9.8 | Apr 24 | mm: call ->free_folio() directly in folio_unmap_invalidate() Affected: fb7d3bc4149395c1ae99029c852eab6c28fc3c88 before efc52947247a21bbf79059539bbbd40f4ea76f00; fb7d3bc4149395c1ae99029c852eab6c28fc3c88 before b667df39d98a7a24be7c2a40ff0863dac1ad2cd7; fb7d3bc4149395c1ae99029c852eab6c28fc3c88 before c330e65ea59c4805d6ab6757c4ddfe8c63acef31; fb7d3bc4149395c1ae99029c852eab6c28fc3c88 before 615d9bb2ccad42f9e21d837431e401db2e471195; 6.14 |
| CVE-2026-31536 | 9.8 | Apr 24 | smb: server: let send_done handle a completion without IB_SEND_SIGNALED Affected: 0626e6641f6b467447c81dd7678a69c66f7746cf before 24082642654f3e5149913946e89c00a297a8868f; 0626e6641f6b467447c81dd7678a69c66f7746cf before e38b415c024bc3b6321bf8650dbf3f4aab8e74b3; 0626e6641f6b467447c81dd7678a69c66f7746cf before 9da82dc73cb03e85d716a2609364572367a5ff47; 5.15 |
| CVE-2026-31533 | 9.8 | Apr 23 | net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption Affected: 3ade391adc584f17b5570fd205de3ad029090368 before 414fc5e5a5aff776c150f1b86770e0a25a35df3a; cd1bbca03f3c1d845ce274c0d0a66de8e5929f72 before 02f3ecadb23558bbe068e6504118f1b712d4ece0; 13eca403876bbea3716e82cdfe6f1e6febb38754 before 0e43e0a3c94044acc74b8e0927c27972eb5a59e8; 8590541473188741055d27b955db0777569438e3 before aa9facde6c5005205874c37db3fd25799d741baf; 8590541473188741055d27b955db0777569438e3 before 5d70eb25b41e9b010828cd12818b06a0c3b04412; 8590541473188741055d27b955db0777569438e3 before 2694d408b0e595024e0fc1d64ff9db0358580f74; +7 more |
| CVE-2026-31501 | 9.8 | Apr 22 | net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path Affected: 46eeb90f03e03d5e8f7f9f1f0eb0792104fc5f86 before c516c2e06fe580b8d38de60cd407072a5de81506; 46eeb90f03e03d5e8f7f9f1f0eb0792104fc5f86 before d5827316debcb677679bb014885d7be92c410e11; 46eeb90f03e03d5e8f7f9f1f0eb0792104fc5f86 before eb8c426c9803beb171f89d15fea17505eb517714; 6.15 |
| CVE-2026-31478 | 9.8 | Apr 22 | ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() Affected: f2283680a80571ca82d710bc6ecd8f8beac67d63 before 70b4c414889492c522b6e4331562360f49be2361; 9f297df20d93411c0b4ddad7f88ba04a7cd36e77 before 9a7166f0ef8cbb7bb48dd05e2471d995566003f5; e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d before c3a89e3ec1ccf64fa6a34e391e1581ebbcba8683; e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d before 6aef1765d6807e0f027cd87f6ac973eb0879a46d; e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d before 80824c7e527b70cf9039534e60aff592e8f209d1; e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d before 4cb537ae4f37d7d0f617815ed4bed7173fb50861; +4 more |
| CVE-2026-31463 | 9.8 | Apr 22 | iomap: fix invalid folio access when i_blkbits differs from I/O granularity Affected: b2f35ac4146d32d4424aaa941bbc681f12c1b9e6 before 4a927f670cdb0def226f9f85f42a9f19d9e09c88; b2f35ac4146d32d4424aaa941bbc681f12c1b9e6 before bd71fb3fea9945987053968f028a948997cba8cc; 6.19 |
| CVE-2026-31444 | 9.8 | Apr 22 | ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() Affected: 302fef75512b2c8329a3f5efab1ae7ba2562387a before 9e785f004cbc56390479b77375726ea9b0d1a8a6; 08aa9f3c8cf4d0bee44df540dfe34e8d64069f2c before 7de55bba69cbf0f9280daaea385daf08bc076121; 1d6abf145615dbfe267ce3b0a271f95e3780e18e before a5c6f6d6ceefed2d5210ee420fb75f8362461f46; ce8507ee82c888126d8e7565e27c016308d24cde before 6d7e5a918c1d0aad06db0e17677b66fc9a471021; 1dfd062caa165ec9d7ee0823087930f3ab8a6294 before 48623ec358c1c600fa1e38368746f933e0f1a617; 6.6.130 before 6.6.131; +3 more |
| CVE-2026-31436 | 9.8 | Apr 22 | dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() Affected: aa8d18becc0c14aa3eb46d6d1b81450446e11b87 before e21da2ad8844585040fe4b82be1ad2fe99d40074; aa8d18becc0c14aa3eb46d6d1b81450446e11b87 before 82656e8daf8de00935ae91b91bed43f4d6e0d644; aa8d18becc0c14aa3eb46d6d1b81450446e11b87 before 0e4f43779d550e559be13a5cdb763bad92c4cc99; aa8d18becc0c14aa3eb46d6d1b81450446e11b87 before e1c9866173c5f8521f2d0768547a01508cb9ff27; 6.8 |
| CVE-2026-31414 | 9.8 | Apr 13 | netfilter: nf_conntrack_expect: use expect->helper Affected: ea781f197d6a835cbb93a0bf88ee1696296ed8aa before 847cb7fe26c5ce5dce0d1a41fac1ea488b7f1781; ea781f197d6a835cbb93a0bf88ee1696296ed8aa before e7ccaa0a62a8ff2be5d521299ce79390c318d306; ea781f197d6a835cbb93a0bf88ee1696296ed8aa before 4bd1b3d839172724b33d8d02c5a4ff6a1c775417; ea781f197d6a835cbb93a0bf88ee1696296ed8aa before b53294bff19e56ada2f230ceb8b1ffde61cc3817; ea781f197d6a835cbb93a0bf88ee1696296ed8aa before 3dfd3f7712b5a800f2ba632179e9b738076a51f0; ea781f197d6a835cbb93a0bf88ee1696296ed8aa before f01794106042ee27e54af6fdf5b319a2fe3df94d; +1 more |
| CVE-2026-31405 | 9.8 | Apr 6 | media: dvb-net: fix OOB access in ULE extension header tables Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before e51238718217c4abdb3ccc3b0c0cde265c7ec629; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before b2bd2ee73b697c177157bba534e1b1064c2e66a0; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 29ef43ceb121d67b87f4cbb08439e4e9e732eff8; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 1a6da3dbb9985d00743073a1cc1f96e59f5abc30; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 145e50c2c700fa52b840df7bab206043997dd18e; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 8bde543d2a5f935ba2a6a6325a2e02f8a9256fbe; +3 more |
| CVE-2026-31402 | 9.8 | Apr 3 | nfsd: fix heap overflow in NFSv4.0 LOCK replay cache Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before f9fcb4441f6c02bb20c2eb340101e27dfe23607c; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 2665887a69437a8a4f552f69509eecfb73d4aa19; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c9452c0797c95cf2378170df96cf4f4b3bca7eff; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 8afb437ea1f70cacb4bbdf11771fb5c4d720b965; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before dad0c3c0a8e5d1d6eb0fc455694ce3e25e6c57d0; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 0f0e2a54a31a7f9ad2915db99156114872317388; +3 more |
| CVE-2026-23450 | 9.8 | Apr 3 | net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() Affected: ebfee3e153f67c8b38eb94a7062ee94aa6f92708 before f315277856caeafcd996c2611afc085ca2d53275; 8270d9c21041470f58348248b9d9dcf3bf79592e before 1e4f873879e075bbd4eb1c644d6933303ac5eba4; 8270d9c21041470f58348248b9d9dcf3bf79592e before f00fc26c8a06442b225a350fe000c0a11483e6a3; 8270d9c21041470f58348248b9d9dcf3bf79592e before cadf3da46c15523fba90d80c9955f536ee3b4023; 8270d9c21041470f58348248b9d9dcf3bf79592e before fd7579f0a2c84ba8a7d4f206201b50dc8ddf90c2; 8270d9c21041470f58348248b9d9dcf3bf79592e before 1fab5ece76fb42a761178dcd0ebcbf578377b0dd; +3 more |
| CVE-2026-23240 | 9.8 | Mar 10 | tls: Fix race condition in tls_sw_cancel_work_tx() Affected: f87e62d45e51b12d48d2cb46b5cde8f83b866bc4 before a5de36d6cee74a92c1a21b260bc507e64bc451de; f87e62d45e51b12d48d2cb46b5cde8f83b866bc4 before 854cd32bc74fe573353095e90958490e4e4d641b; f87e62d45e51b12d48d2cb46b5cde8f83b866bc4 before 17153f154f80be2b47ebf52840f2d8f724eb2f3b; f87e62d45e51b12d48d2cb46b5cde8f83b866bc4 before 7bb09315f93dce6acc54bf59e5a95ba7365c2be4; 5.3 |
| CVE-2026-23112 | 9.8 | Feb 13 | nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec Affected: 872d26a391da92ed8f0c0f5cb5fef428067b7f30 before 0b9981751be14b59b4473383c731c833738aebdb; 872d26a391da92ed8f0c0f5cb5fef428067b7f30 before 42afe8ed8ad2de9c19457156244ef3e1eca94b5d; 872d26a391da92ed8f0c0f5cb5fef428067b7f30 before 1385be357e8acd09b36e026567f3a9d5c61139de; 872d26a391da92ed8f0c0f5cb5fef428067b7f30 before dca1a6ba0da9f472ef040525fab10fd9956db59f; 872d26a391da92ed8f0c0f5cb5fef428067b7f30 before 19672ae68d52ff75347ebe2420dde1b07adca09f; 872d26a391da92ed8f0c0f5cb5fef428067b7f30 before ab200d71553bdcf4de554a5985b05b2dd606bc57; +2 more |
| CVE-2025-68811 | 9.8 | Jan 13 | svcrdma: use rc_pageoff for memcpy byte offset Affected: 8e122582680c6f8acd686a5a2af9c0e46fe90f2d before e8623e9c451e23d84b870811f42fd872b4089ef6; 8e122582680c6f8acd686a5a2af9c0e46fe90f2d before 2a77c8dd49bccf0ca232be7c836cec1209abb8da; 8e122582680c6f8acd686a5a2af9c0e46fe90f2d before a8ee9099f30654917aa68f55d707b5627e1dbf77; 6.8 |
| CVE-2025-68794 | 9.8 | Jan 13 | iomap: adjust read range correctly for non-block-aligned positions Affected: 9dc55f1389f9569acf9659e58dd836a9c70df217 before ce20f49ac9194cf81a77f01d1c316d7c17ae753c; 9dc55f1389f9569acf9659e58dd836a9c70df217 before 275b37a1e5c2c8abd313e8075f6aec9a349f291b; 9dc55f1389f9569acf9659e58dd836a9c70df217 before b8c9f25fd84328c5fcc4f70c6d1e8f1d4787eaac; 9dc55f1389f9569acf9659e58dd836a9c70df217 before 82b60ffbb532d919959702768dca04c3c0500ae5; 9dc55f1389f9569acf9659e58dd836a9c70df217 before 12053695c8ef5410e8cc6c9ed4c0db9cd9c82b3e; 9dc55f1389f9569acf9659e58dd836a9c70df217 before 142194fb21afe964d2d194cab1fc357cbf87e899; +2 more |
| CVE-2025-68775 | 9.8 | Jan 13 | net/handshake: duplicate handshake cancellations leak socket Affected: 3b3009ea8abb713b022d94fba95ec270cf6e7eae before 011ae80c49d9bfa5b4336f8bd387cd25c7593663; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before e1641177e7fb48a0a5a06658d4aab51da6656659; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before 3c330f1dee3cd92b57e19b9d21dc8ce5970b09be; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before 15564bd67e2975002f2a8e9defee33e321d3183f; 6.4 |
| CVE-2023-54292 | 9.8 | Dec 30 | RDMA/irdma: Fix data race on CQP request done Affected: 915cc7ac0f8e2a23675ee896e87f17c7d3c47089 before c5b5dbcbf91f769b8eb25f88e32a1522f920f37a; 915cc7ac0f8e2a23675ee896e87f17c7d3c47089 before 5986e96be7d0b82e50a9c6b019ea3f1926fd8764; 915cc7ac0f8e2a23675ee896e87f17c7d3c47089 before b8b90ba636e3861665aef9a3eab5fcf92839a2c5; 915cc7ac0f8e2a23675ee896e87f17c7d3c47089 before f0842bb3d38863777e3454da5653d80b5fde6321; 5.14 |
| CVE-2023-54280 | 9.8 | Dec 30 | cifs: fix potential race when tree connecting ipc Affected: c88f7dcd6d6429197fc2fd87b54a894ffcd48e8e before 536ec71ba060a02fabe8e22cecb82fe7b3a8708b; c88f7dcd6d6429197fc2fd87b54a894ffcd48e8e before 553476df55a111e6a66ad9155256aec0ec1b7ad0; c88f7dcd6d6429197fc2fd87b54a894ffcd48e8e before ee20d7c6100752eaf2409d783f4f1449c29ea33d; 81d583baa5f1abd73c755ce1992929debd20b687; 5.15.81 before 5.16; 5.16 |
| CVE-2023-54269 | 9.8 | Dec 30 | SUNRPC: double free xprt_ctxt while still in use Affected: f5e13d700a4d40ccde3d36e383f9247dcb3c1d2d before 7851771789e87108a92697194105ef0c9307dc5e; 773f91b2cf3f52df0d7508fdbf60f37567cdaee4 before fd86534872f445f54dc01e7db001e25eadf063a8; 773f91b2cf3f52df0d7508fdbf60f37567cdaee4 before e0c648627322a4c7e018e5c7f837c3c03e297dbb; 773f91b2cf3f52df0d7508fdbf60f37567cdaee4 before eb8d3a2c809abd73ab0a060fe971d6b9019aa3c1; 11fab500f86403b2ebf6795feeade6e10302e448; 5.15.35 before 5.15.113; +2 more |
| CVE-2023-54258 | 9.8 | Dec 30 | cifs: fix potential oops in cifs_oplock_break Affected: 63fb45ddc491895c4b36664e0c2c3b548545ae93 before b99f490ea87ebcca3a429fd8837067feb56a4c7c; 1bf709b9625001eefdd41048c5f4c7544ee33394 before 5ee28bcfbaacf289eb25c662a2862542ea6ce6a7; 3b4c15171c3ce9120c81f5564b9367d8d0f4219c before 6b67a6d2e50634fe127e656147c81915955e9f5e; da787d5b74983f7525d1eb4b9c0b4aff2821511a before e8f5f849ffce24490eb9449e98312b66c0dba76f; cff7fb969edaeff2bc80c8a8f7cf7b0c8df32da7; 6.3.13 before 6.4; +3 more |
| CVE-2023-54257 | 9.8 | Dec 30 | net: macb: fix a memory corruption in extended buffer descriptor mode Affected: 7b4296148066f19b5960127ba579e358df501c22 before dd7a49a3eaf723a01b2fdf153f98450a82b0b0fe; 7b4296148066f19b5960127ba579e358df501c22 before 82e626af24683e01211abe66cec27a387f8f17c9; 7b4296148066f19b5960127ba579e358df501c22 before 7169d1638824c4bf7e0fe0baad381ddec861fa70; 7b4296148066f19b5960127ba579e358df501c22 before 1bec9da233f779e7b6954ee07ad7e6d8f2a4dd83; 7b4296148066f19b5960127ba579e358df501c22 before 7ccc58a1a75601c936069d4a0741940623990ade; 7b4296148066f19b5960127ba579e358df501c22 before 9412a9bf5952cdf5d0f736cc1e8c68fd366c2d47; +3 more |
| CVE-2023-54237 | 9.8 | Dec 30 | net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link() Affected: 2d2209f2018943d4152a21eff5b76f1952e0b435 before fe35c24b730d38b421da93ac5d493cb4495e8e54; 2d2209f2018943d4152a21eff5b76f1952e0b435 before f2f46de98c11d41ac8d22765f47ba54ce5480a5b; 2d2209f2018943d4152a21eff5b76f1952e0b435 before 0c764cc271d3aa6528ae1b3394babf34ac01f775; 2d2209f2018943d4152a21eff5b76f1952e0b435 before e40b801b3603a8f90b46acbacdea3505c27f01c0; 5.8 |
| CVE-2023-54223 | 9.8 | Dec 30 | net/mlx5e: xsk: Fix invalid buffer access for legacy rq Affected: cbb5379362513cbff450df0457dc370da7244bec before 58a113a35846d9a5bd759beb332e551e28451f09; 7abd955a58fb0fcd4e756fa2065c03ae488fcfa7 before e0f52298fee449fec37e3e3c32df60008b509b16; 6.4.5 before 6.4.10 |
| CVE-2023-54184 | 9.8 | Dec 30 | scsi: target: iscsit: Free cmds before session free Affected: 988e3a85463d9b6dabc681df3f8f131b23c19953 before 89f5055f9b0b57c7e7f02e32df95ef401f809b71; 988e3a85463d9b6dabc681df3f8f131b23c19953 before 4621e24c9257c6379343bf0c11b473817cf7edcd; 988e3a85463d9b6dabc681df3f8f131b23c19953 before 1911cca5916b6e106de7afa3ec0a38447158216c; 988e3a85463d9b6dabc681df3f8f131b23c19953 before a7a4def6c7046e090bb10c6d550fdeb487db98ba; 988e3a85463d9b6dabc681df3f8f131b23c19953 before 4ce221d295f53e6c6b835ab33181e735482c9aac; 988e3a85463d9b6dabc681df3f8f131b23c19953 before d8990b5a4d065f38f35d69bcd627ec5a7f8330ca; +1 more |
| CVE-2023-54094 | 9.8 | Dec 24 | net: prevent skb corruption on frag list segmentation Affected: 3a1296a38d0cf62bffb9a03c585cbd5dbf15d596 before bc3ab5d2ab69823f5cff89cf74ef78ffa0386c9a; 3a1296a38d0cf62bffb9a03c585cbd5dbf15d596 before ea438eed94ac0fe69b93ac034738823c0e989a12; 3a1296a38d0cf62bffb9a03c585cbd5dbf15d596 before 1731234e8b60063eae858c77b55c7a88f5084353; 3a1296a38d0cf62bffb9a03c585cbd5dbf15d596 before 7a59f29961cf97b98b02acaadf5a0b1f8dde938c; 3a1296a38d0cf62bffb9a03c585cbd5dbf15d596 before c329b261afe71197d9da83c1f18eb45a7e97e089; 5.6 |
| CVE-2023-54090 | 9.8 | Dec 24 | ixgbe: Fix panic during XDP_TX with > 64 CPUs Affected: 4fe815850bdc8d4cc94e06fe1de069424a895826 before 1924450175349e64f8dfc3689efcb653dba0418e; 4fe815850bdc8d4cc94e06fe1de069424a895826 before 785b2b5b47b1aa4c31862948b312ea845401c5ec; 4fe815850bdc8d4cc94e06fe1de069424a895826 before 4cd43a19900d0b98c1ec4bb6984763369d2e19ec; 4fe815850bdc8d4cc94e06fe1de069424a895826 before c23ae5091a8b3e50fe755257df020907e7c029bb; 5.16 |
| CVE-2023-54076 | 9.8 | Dec 24 | smb: client: fix missed ses refcounting Affected: 8e3554150d6c80a84b3cb046615d1a0e943811dc before eb382196e6f6e05cfafdab797840e5a96c6e7bf0; 8e3554150d6c80a84b3cb046615d1a0e943811dc before bf99f6be2d20146942bce6f9e90a0ceef12cbc1e; f30d226bcc9f0e2d97b4a6e94c43a28148fbeab6; c082c3be0f96e759ff2e361d929832fda0b93851; 6.2.15 before 6.3; 6.3.2 before 6.4; +1 more |
| CVE-2022-50717 | 9.8 | Dec 24 | nvmet-tcp: add bounds check on Transfer Tag Affected: 872d26a391da92ed8f0c0f5cb5fef428067b7f30 before 0d150ccd55dbfad36f55855b40b381884c98456e; 872d26a391da92ed8f0c0f5cb5fef428067b7f30 before d5bb45f47b37d10f010355686b28c9ebacb361d4; 872d26a391da92ed8f0c0f5cb5fef428067b7f30 before ec8adf767e1cfa7031f853b8c71ba1963f07df15; 872d26a391da92ed8f0c0f5cb5fef428067b7f30 before fcf82e4553db911d10234ff2390cfd0e2aa854e4; 872d26a391da92ed8f0c0f5cb5fef428067b7f30 before 752593d04637ebdc87fd29cba81897f21ae053f0; 872d26a391da92ed8f0c0f5cb5fef428067b7f30 before b6a545ffa2c192b1e6da4a7924edac5ba9f4ea2b; +1 more |
| CVE-2025-68745 | 9.8 | Dec 24 | scsi: qla2xxx: Clear cmds after chip reset Affected: aefed3e5548f28e5fecafda6604fcbc65484dbaa before 0d0a1a267c1ee7c41aeffdca84afcb113787a91a; aefed3e5548f28e5fecafda6604fcbc65484dbaa before c82c0fbb97d0fd44324eb55ab758408c7c964b32; aefed3e5548f28e5fecafda6604fcbc65484dbaa before 5c1fb3fd05da3d55b8cbc42d7d660b313cbdc936; aefed3e5548f28e5fecafda6604fcbc65484dbaa before d46c69a087aa3d1513f7a78f871b80251ea0c1ae; eb67b7a23d357f578578e737cb6412ae2384f352; ec9639d92c1e10d4bc667e842753d85e21683d5c; +5 more |
| CVE-2025-68741 | 9.8 | Dec 24 | scsi: qla2xxx: Fix improper freeing of purex item Affected: 875386b98857822b77ac7f95bdf367b70af5b78c before 4bccd506a1f1ab01d1f45b2a3effff6bedc73cf9; 875386b98857822b77ac7f95bdf367b70af5b78c before 8e9f0a0717ba31d5842721627ade1e62d7aec012; 875386b98857822b77ac7f95bdf367b70af5b78c before cfe3e2f768d248fd3d965d561d0768a56dd0b9f8; 875386b98857822b77ac7f95bdf367b70af5b78c before 5fa1c8226b4532ad7011d295d3ab4ad45df105ae; 875386b98857822b77ac7f95bdf367b70af5b78c before 78b1a242fe612a755f2158fd206ee6bb577d18ca; 6.6 |
| CVE-2023-53867 | 9.8 | Dec 24 | ceph: fix potential use-after-free bug when trimming caps Affected: 2f2dc053404febedc9c273452d9d518fb31fde72 before 2b2515b8095cf2149bef44383a99d5b5677f1831; 2f2dc053404febedc9c273452d9d518fb31fde72 before 448875a73e16ba7d81dec9274ce9d33a12d092fb; 2f2dc053404febedc9c273452d9d518fb31fde72 before ae6e935618d99cdba11eab4714092e7e5f13cf7e; 2f2dc053404febedc9c273452d9d518fb31fde72 before aaf67de78807c59c35bafb5003d4fb457c764800; 2.6.34 |
| CVE-2025-68726 | 9.8 | Dec 24 | crypto: aead - Fix reqsize handling Affected: afddce13ce81d52a13898fa0700917835c71acd6 before 64377e66e187164bd6737112d07257f5f0feb681; afddce13ce81d52a13898fa0700917835c71acd6 before 12b413f5460c393d1151a37f591140693eca0f84; afddce13ce81d52a13898fa0700917835c71acd6 before 9b04d8f00569573796dd05397f5779135593eb24; 6.16 |
| CVE-2025-68359 | 9.8 | Dec 24 | btrfs: fix double free of qgroup record after failure to add delayed ref head Affected: 6ef8fbce010421bf742b12b8f8f2b2d2ff154845 before 82d46660ebd94c269e3f25a77eb563621d8e67e3; 6ef8fbce010421bf742b12b8f8f2b2d2ff154845 before 7617680769e3119dfb3b43a2b7c287ce2242211c; 6ef8fbce010421bf742b12b8f8f2b2d2ff154845 before 364685c4c2d9c9f4408d95451bcf42fdeebc3ebb; 6ef8fbce010421bf742b12b8f8f2b2d2ff154845 before 725e46298876a2cc1f1c3fb22ba69d29102c3ddf; 6.12 |
| CVE-2025-68284 | 9.8 | Dec 16 | libceph: prevent potential out-of-bounds writes in handle_auth_session_key() Affected: 285ea34fc876aa0a2c5e65d310c4a41269e2e5f2 before f22c55a20a2d9ffbbac57408d5d488cef8201e9d; 285ea34fc876aa0a2c5e65d310c4a41269e2e5f2 before 8dfcc56af28cffb8f25fb9be37b3acc61f2a3d09; 285ea34fc876aa0a2c5e65d310c4a41269e2e5f2 before ccbccfba25e9aa395daaea156b5e7790910054c4; 285ea34fc876aa0a2c5e65d310c4a41269e2e5f2 before 5ef575834ca99f719d7573cdece9df2fe2b72424; 285ea34fc876aa0a2c5e65d310c4a41269e2e5f2 before 6920ff09bf911bc919cd7a6b7176fbdd1a6e6850; 285ea34fc876aa0a2c5e65d310c4a41269e2e5f2 before 7fce830ecd0a0256590ee37eb65a39cbad3d64fc; +1 more |
| CVE-2025-68263 | 9.8 | Dec 16 | ksmbd: ipc: fix use-after-free in ipc_msg_send_request Affected: 0626e6641f6b467447c81dd7678a69c66f7746cf before de85fb58f9967ba024bb08e0041613d37b57b4d1; 0626e6641f6b467447c81dd7678a69c66f7746cf before 708a620b471a14466f1f52c90bf3f65ebdb31460; 0626e6641f6b467447c81dd7678a69c66f7746cf before 5ac763713a1ef8f9a8bda1dbd81f0318d67baa4e; 0626e6641f6b467447c81dd7678a69c66f7746cf before 759c8c30cfa8706c518e56f67971b1f0932f4b9b; 0626e6641f6b467447c81dd7678a69c66f7746cf before 8229c6ca50cea701e25a7ee25f48441b582ec5fa; 0626e6641f6b467447c81dd7678a69c66f7746cf before 1fab1fa091f5aa97265648b53ea031deedd26235; +1 more |
| CVE-2025-68192 | 9.8 | Dec 16 | net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup Affected: c6adf77953bcec0ad63d7782479452464e50f7a3 before d693c47fb902b988f5752182e4f7fbde5e6dcaf9; c6adf77953bcec0ad63d7782479452464e50f7a3 before 0aabccdcec1f4a36f95829ea2263f845bbc77223; c6adf77953bcec0ad63d7782479452464e50f7a3 before 4e6b9004f01d0fef5b19778399bc5bf55f8c2d71; c6adf77953bcec0ad63d7782479452464e50f7a3 before bf527b80b80a282ab5bf1540546211fc35e5cd42; c6adf77953bcec0ad63d7782479452464e50f7a3 before dd03780c29f87c26c0e0bb7e0db528c8109461fb; c6adf77953bcec0ad63d7782479452464e50f7a3 before ae811175cea35b03ac6d7c910f43a82a43b9c3b3; +3 more |
| CVE-2025-40343 | 9.8 | Dec 9 | nvmet-fc: avoid scheduling association deletion twice Affected: a07b4970f464f13640e28e16dad6cfa33647cc99 before 2f4852db87e25d4e226b25cb6f652fef9504360e; a07b4970f464f13640e28e16dad6cfa33647cc99 before 85e2ce1920cb511d57aae59f0df6ff85b28bf04d; a07b4970f464f13640e28e16dad6cfa33647cc99 before 601ed47b2363c24d948d7bac0c23abc8bd459570; a07b4970f464f13640e28e16dad6cfa33647cc99 before 04d17540ef51e2c291eb863ca87fd332259b2d40; a07b4970f464f13640e28e16dad6cfa33647cc99 before c09ac9a63fc3aaf4670ad7b5e4f5afd764424154; a07b4970f464f13640e28e16dad6cfa33647cc99 before f2537be4f8421f6495edfa0bc284d722f253841d; +1 more |
| CVE-2022-50666 | 9.8 | Dec 9 | RDMA/siw: Fix QP destroy to wait for all references dropped. Affected: 303ae1cdfdf7280ff4cfbbe65563b5ff15bb025b before 5c75d608fad58301b63e7d69200c13c3a1d411da; 303ae1cdfdf7280ff4cfbbe65563b5ff15bb025b before 74ad141e995a730760b1bcfa14854b7f1057d6bc; 303ae1cdfdf7280ff4cfbbe65563b5ff15bb025b before 0ed8bf9d0bb19f3f5eedd73f04aaf5bba9ac0737; 303ae1cdfdf7280ff4cfbbe65563b5ff15bb025b before a3c278807a459e6f50afee6971cabe74cccfb490; 5.3 |
| CVE-2023-53794 | 9.8 | Dec 9 | cifs: fix session state check in reconnect to avoid use-after-free issue Affected: 4fcd1813e6404dd4420c7d12fb483f9320f0bf93 before 7e4f5c3f01fb0e51ca438e43262d858daf9a0a76; 4fcd1813e6404dd4420c7d12fb483f9320f0bf93 before 759ffc164d95a32c09528766d74d9b4fb054e8f4; 4fcd1813e6404dd4420c7d12fb483f9320f0bf93 before 99f280700b4cc02d5f141b8d15f8e9fad0418f65; 655e0c067f0e02ece03fd0591dabe3db2ae27552; 875cc09c0767a4ac06b57af383709657f98b3ea1; 599fe1409085059ba12a2c3897c853be9fa9e7cf; +14 more |
The 500 most important CVEs for this product (exploited first, then by severity)