LI
Product
Linux
On CISA KEVExploited in the wild
18,165
CVEs
12
On KEV
10.0
Max CVSS
1051
New 30D
Severity mix
Critical 489High 9Medium 2Low 0
Watch
Add Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-40252 | 9.8 | Dec 4 | net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() Affected: 55482edc25f0606851de42e73618f813f310d009 before ecbb12caf399d7cf364b7553ed5aebeaa2f255bc; 55482edc25f0606851de42e73618f813f310d009 before a778912b4a53587ea07d85526d152f85d109cbfe; 55482edc25f0606851de42e73618f813f310d009 before f0923011c1261b33a2ac1de349256d39cb750dd0; 55482edc25f0606851de42e73618f813f310d009 before 917a9d02182ac8b4f25eb47dc02f3ec679608c24; 55482edc25f0606851de42e73618f813f310d009 before e441db07f208184e0466abf44b389a81d70c340e; 55482edc25f0606851de42e73618f813f310d009 before 896f1a2493b59beb2b5ccdf990503dbb16cb2256; +1 more |
| CVE-2025-40212 | 9.8 | Nov 24 | nfsd: fix refcount leak in nfsd_set_fh_dentry() Affected: ef7f6c4904d03ccd7478e1ac20ed75f79c4ac444 before b6bc86ce3944b10b9fc181fc00c1a520a20ed965; ef7f6c4904d03ccd7478e1ac20ed75f79c4ac444 before c83d7365cec5eb5ebeeee2a72e29b4ca58a7e4c2; ef7f6c4904d03ccd7478e1ac20ed75f79c4ac444 before 8a7348a9ed70bda1c1f51d3f1815bcbdf9f3b38c; 6.12 |
| CVE-2025-40176 | 9.8 | Nov 12 | tls: wait for pending async decryptions if tls_strp_msg_hold fails Affected: 84c61fe1a75b4255df1e1e7c054c9e6d048da417 before 9f83fd0c179e0f458e824e417f9d5ad53443f685; 84c61fe1a75b4255df1e1e7c054c9e6d048da417 before c61d4368197d65c4809d9271f3b85325a600586a; 84c61fe1a75b4255df1e1e7c054c9e6d048da417 before 39dec4ea3daf77f684308576baf483b55ca7f160; 84c61fe1a75b4255df1e1e7c054c9e6d048da417 before 4fc109d0ab196bd943b7451276690fb6bb48c2e0; 84c61fe1a75b4255df1e1e7c054c9e6d048da417 before b8a6ff84abbcbbc445463de58704686011edc8e1; 6.0 |
| CVE-2025-40074 | 9.8 | Oct 28 | ipv4: start using dst_dev_rcu() Affected: 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 before 864155c164654110f68a17a63bd0339754790d67; 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 before e150f273cd8ed34ebc6d03758aad95c12fc58337; 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 before 684efb2c86c887685f9aa65e1a21b3df6c1f822d; 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 before 923e0734c386984d45de508528a7a7ad91d791cc; 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 before 6ad8de3cefdb6ffa6708b21c567df0dbf82c43a8; 4.13 |
| CVE-2025-39975 | 9.8 | Oct 15 | smb: client: fix wrong index reference in smb2_compound_op() Affected: 5ddcc9e92d54548219985ce4de88618fb53e14ec before ba7bcfd52c66dd1c2dfa5142aca7e4a70b62dfa5; efe8db3ecaa40a8520dc9a54283dcecd82ceea9c before bfb1e2aad1fecef8320fd71332acde0d53a8d699; 3681c74d342db75b0d641ba60de27bf73e16e66b before 093615fc76063ea08d454ba86677ce64c736e806; 3681c74d342db75b0d641ba60de27bf73e16e66b before fbe2dc6a9c7318f7263f5e4d50f6272b931c5756; 77aefd1d9b790f60634adebbdcfffbe934f41c34; 6.6.75 before 6.6.109; +3 more |
| CVE-2025-22088 | 9.8 | Apr 16 | RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() Affected: 920d93eac8b97778fef48f34f10e58ddf870fc2a before bc1db4d8f1b0dc480d7d745a60a8cc94ce2badd4; 920d93eac8b97778fef48f34f10e58ddf870fc2a before 667a628ab67d359166799fad89b3c6909599558a; 920d93eac8b97778fef48f34f10e58ddf870fc2a before a114d25d584c14019d31dbf2163780c47415a187; 920d93eac8b97778fef48f34f10e58ddf870fc2a before 78411a133312ce7d8a3239c76a8fd85bca1cc10f; 920d93eac8b97778fef48f34f10e58ddf870fc2a before 7aa6bb5276d9fec98deb05615a086eeb893854ad; 920d93eac8b97778fef48f34f10e58ddf870fc2a before 83437689249e6a17b25e27712fbee292e42e7855; +1 more |
| CVE-2025-21796 | 9.8 | Feb 27 | nfsd: clear acl_access/acl_default after releasing them Affected: a257cdd0e2179630d3201c32ba14d7fcb3c3a055 before 8a1737ae42c928384ab6447f6ee1a882510e85fa; a257cdd0e2179630d3201c32ba14d7fcb3c3a055 before 6f7cfee1a316891890c505563aa54f3476db52fd; a257cdd0e2179630d3201c32ba14d7fcb3c3a055 before 2e59b2b68782519560b3d6a41dd66a3d01a01cd3; a257cdd0e2179630d3201c32ba14d7fcb3c3a055 before 55d947315fb5f67a35e4e1d3e01bb886b9c6decf; a257cdd0e2179630d3201c32ba14d7fcb3c3a055 before f8d871523142f7895f250a856f8c4a4181614510; a257cdd0e2179630d3201c32ba14d7fcb3c3a055 before 1fd94884174bd20beb1773990fd3b1aa877688d9; +2 more |
| CVE-2022-49362 | 9.8 | Feb 26 | NFSD: Fix potential use-after-free in nfsd_file_put() Affected: 9862064ca81f9b9da8ebe26c86cf2b10c293ba1a before ada1757b259f353cade47037ee0a0249b4cddad3; a98e5b3d958ac697aafb3d077eb2cca4a731b7ee before 261eabe19cb28e4a8587a4442d257b543d7c2d57; 999397926ab3f78c7d1235cc4ca6e3c89d2769bf before 333dcc94ebf53f79f3dc0e7a7c16700bc7ff7e57; 999397926ab3f78c7d1235cc4ca6e3c89d2769bf before b6c71c66b0ad8f2b59d9bc08c7a5079b110bec01; 5.18 |
| CVE-2022-49093 | 9.8 | Feb 26 | skbuff: fix coalescing for page_pool fragment recycling Affected: 53e0961da1c7bbdabd1abebb20de403ec237ec09 before ba965e8605aee5387cecaa28fcf7ee9f61779a49; 53e0961da1c7bbdabd1abebb20de403ec237ec09 before c4fa19615806a9a7e518c295b39175aa47a685ac; 53e0961da1c7bbdabd1abebb20de403ec237ec09 before 72bb856d16e883437023ff2ff77d0c498018728a; 53e0961da1c7bbdabd1abebb20de403ec237ec09 before 1effe8ca4e34c34cdd9318436a4232dcb582ebf4; 5.15 |
| CVE-2024-53177 | 9.8 | Dec 27 | smb: prevent use-after-free due to open_cached_dir error paths Affected: 93877b9afc2994c89362007aac480a7b150f386f before 791f833053578b9fd24252ebb7162a61bc3f805b; 5c86919455c1edec99ebd3338ad213b59271a71b before 97e2afcac0bebfef6a5360f4267ce4c44507b845; 5c86919455c1edec99ebd3338ad213b59271a71b before 47655a12c6b1bca8fa230085eab2e85a076932b7; 5c86919455c1edec99ebd3338ad213b59271a71b before a9685b409a03b73d2980bbfa53eb47555802d0a9; 6db94d08359c43f2c8fe372811cdee04564a41b9; 6.6.3 before 6.6.64; +2 more |
| CVE-2024-53095 | 9.8 | Nov 21 | smb: client: Fix use-after-free of network namespace. Affected: 26abe14379f8e2fa3fd1bcf97c9a7ad9364886fe before e8c71494181153a134c96da28766a57bd1eac8cb; 26abe14379f8e2fa3fd1bcf97c9a7ad9364886fe before c7f9282fc27fc36dbaffc8527c723de264a132f8; 26abe14379f8e2fa3fd1bcf97c9a7ad9364886fe before ef7134c7fc48e1441b398e55a862232868a6f0a7; 4.2 |
| CVE-2024-42256 | 9.8 | Aug 8 | cifs: Fix server re-repick on subrequest retry Affected: 3ee1a1fc39819906f04d6c62c180e760cd3a689d before b1d0a566769b6fb3795b5289fc1daf9e0638d97a; 3ee1a1fc39819906f04d6c62c180e760cd3a689d before de40579b903883274fe203865f29d66b168b7236; 6.10 |
| CVE-2024-39462 | 9.8 | Jun 25 | clk: bcm: dvp: Assign ->num before accessing ->hws Affected: f316cdff8d677db9ad9c90acb44c4cd535b0ee27 before 0dc913217fb79096597005bba9ba738e2db5cd02; f316cdff8d677db9ad9c90acb44c4cd535b0ee27 before a1dd92fca0d6b58b55ed0484f75d4205dbb77010; f316cdff8d677db9ad9c90acb44c4cd535b0ee27 before 9368cdf90f52a68120d039887ccff74ff33b4444; 6.6 |
| CVE-2024-36031 | 9.8 | May 30 | keys: Fix overwrite of key expiration on instantiation Affected: 97be1e865e70e5a0ad0a5b5f5dca5031ca0b53ac before ad2011ea787928b2accb5134f1e423b11fe80a8a; 2552b32b0b349df160a509fe49f5f308cb922f2b before ed79b93f725cd0da39a265dc23d77add1527b9be; 791d5409cdb974c31a1bc7a903ea729ddc7d83df before e4519a016650e952ad9eb27937f8c447d5a4e06d; afc360e8a1256acb7579a6f5b6f2c30b85b39301 before 25777f3f4e1f371d16a594925f31e37ce07b6ec7; 39299bdd2546688d92ed9db4948f6219ca1b9542 before 939a08bcd4334bad4b201e60bd0ae1f278d71d41; 39299bdd2546688d92ed9db4948f6219ca1b9542 before cc219cb8afbc40ec100c0de941047bb29373126a; +6 more |
| CVE-2021-47548 | 9.8 | May 24 | ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() Affected: 850bfa3b78ea8849fef78ed74f5f2ccf947db0ca before 948968f8747650447c8f21c9fdba0e1973be040b; 850bfa3b78ea8849fef78ed74f5f2ccf947db0ca before abbd5faa0748d0aa95d5191d56ff7a17a6275bd1; 850bfa3b78ea8849fef78ed74f5f2ccf947db0ca before dd07f8971b81ad98cc754b179b331b57f35aa1ff; 850bfa3b78ea8849fef78ed74f5f2ccf947db0ca before 99bb25cb6753beaf2c2bc37927c2ecc0ceff3f6d; 850bfa3b78ea8849fef78ed74f5f2ccf947db0ca before 22519eff7df2d88adcc2568d86046ce1e2b52803; 850bfa3b78ea8849fef78ed74f5f2ccf947db0ca before fc7ffa7f10b9454a86369405d9814bf141b30627; +2 more |
| CVE-2023-52755 | 9.8 | May 21 | ksmbd: fix slab out of bounds write in smb_inherit_dacl() Affected: 0626e6641f6b467447c81dd7678a69c66f7746cf before aaf0a07d60887d6c36fc46a24de0083744f07819; 0626e6641f6b467447c81dd7678a69c66f7746cf before 8387c94d73ec66eb597c7a23a8d9eadf64bfbafa; 0626e6641f6b467447c81dd7678a69c66f7746cf before 09d9d8b40a3338193619c14ed4dc040f4f119e70; 0626e6641f6b467447c81dd7678a69c66f7746cf before 712e01f32e577e7e48ab0adb5fe550646a3d93cb; 0626e6641f6b467447c81dd7678a69c66f7746cf before eebff19acaa35820cb09ce2ccb3d21bee2156ffb; 5.15 |
| CVE-2021-47378 | 9.8 | May 21 | nvme-rdma: destroy cm id before destroy qp to avoid use after free Affected: 7110230719602852481c2793d054f866b2bf4a2b before ecf0dc5a904830c926a64feffd8e01141f89822f; 7110230719602852481c2793d054f866b2bf4a2b before d268a182c56e8361e19fb781137411643312b994; 7110230719602852481c2793d054f866b2bf4a2b before 9817d763dbe15327b9b3ff4404fa6f27f927e744; 4.8 |
| CVE-2021-47232 | 9.8 | May 21 | can: j1939: fix Use-after-Free, hold skb ref while in use Affected: 9d71dd0c70099914fcd063135da3c580865e924c before 22cba878abf646cd3a02ee7c8c2cef7afe66a256; 9d71dd0c70099914fcd063135da3c580865e924c before 509ab6bfdd0c76daebbad0f0af07da712116de22; 9d71dd0c70099914fcd063135da3c580865e924c before 1071065eeb33d32b7d98c2ce7591881ae7381705; 9d71dd0c70099914fcd063135da3c580865e924c before 2030043e616cab40f510299f09b636285e0a3678; 5.4 |
| CVE-2024-35870 | 9.8 | May 19 | smb: client: fix UAF in smb2_reconnect_server() Affected: b327a717e506980399464e304e363f94f95eb7a1 before 755fe68cd4b59e1d2a2dd3286177fd4404f57fed; b327a717e506980399464e304e363f94f95eb7a1 before 6202996a1c1887e83d0b3b0fcd86d0e5e6910ea0; b327a717e506980399464e304e363f94f95eb7a1 before 45f2beda1f1bc3d962ec07db1ccc3197c25499a5; b327a717e506980399464e304e363f94f95eb7a1 before 24a9799aa8efecd0eb55a75e35f9d8e6400063aa; 4.16 |
| CVE-2024-35869 | 9.8 | May 19 | smb: client: guarantee refcounted children from parent session Affected: 8e3554150d6c80a84b3cb046615d1a0e943811dc before 645f332c6b63499cc76197f9b6bffcc659ba64cc; 8e3554150d6c80a84b3cb046615d1a0e943811dc before e1db9ae87b7148c021daee1fcc4bc71b2ac58a79; 8e3554150d6c80a84b3cb046615d1a0e943811dc before 062a7f0ff46eb57aff526897bd2bebfdb1d3046a; f30d226bcc9f0e2d97b4a6e94c43a28148fbeab6; c082c3be0f96e759ff2e361d929832fda0b93851; 6.2.15 before 6.3; +2 more |
| CVE-2024-35865 | 9.8 | May 19 | smb: client: fix potential UAF in smb2_is_valid_oplock_break() Affected: 7f48558e6489d032b1584b0cc9ac4bb11072c034 before a710ef9e974f18232d2b9b19c90eda1a1167b2d4; 7f48558e6489d032b1584b0cc9ac4bb11072c034 before 84488466b7a69570bdbf76dd9576847ab97d54e7; 7f48558e6489d032b1584b0cc9ac4bb11072c034 before 21fed37d2bdcde33453faf61d3d4d96c355f04bd; 7f48558e6489d032b1584b0cc9ac4bb11072c034 before 3dba0e5276f131e36d6d8043191d856f49238628; 7f48558e6489d032b1584b0cc9ac4bb11072c034 before 22863485a4626ec6ecf297f4cc0aef709bc862e4; a67172a013953664b1dad03c648200c70b90506c; +2 more |
| CVE-2022-48697 | 9.8 | May 3 | nvmet: fix a use-after-free Affected: a07b4970f464f13640e28e16dad6cfa33647cc99 before 17f121ca3ec6be0fb32d77c7f65362934a38cc8e; a07b4970f464f13640e28e16dad6cfa33647cc99 before 8d66989b5f7bb28bba2f8e1e2ffc8bfef4a10717; a07b4970f464f13640e28e16dad6cfa33647cc99 before be01f1c988757b95f11f090a9f491365670a522b; a07b4970f464f13640e28e16dad6cfa33647cc99 before ebf46da50beb78066674354ad650606a467e33fa; a07b4970f464f13640e28e16dad6cfa33647cc99 before 4484ce97a78171668c402e0c45db7f760aea8060; a07b4970f464f13640e28e16dad6cfa33647cc99 before 6a02a61e81c231cc5c680c5dbf8665275147ac52; +1 more |
| CVE-2022-48666 | 9.8 | Apr 28 | scsi: core: Fix a use-after-free Affected: 65ca846a53149a1a72cd8d02e7b2e73dd545b834 before 5ce8fad941233e81f2afb5b52a3fcddd3ba8732f; 65ca846a53149a1a72cd8d02e7b2e73dd545b834 before f818708eeeae793e12dc39f8984ed7732048a7d9; 65ca846a53149a1a72cd8d02e7b2e73dd545b834 before 2e7eb4c1e8af8385de22775bd0be552f59b28c9a; 65ca846a53149a1a72cd8d02e7b2e73dd545b834 before 8fe4ce5836e932f5766317cb651c1ff2a4cd0506; 5.7 |
| CVE-2021-47137 | 9.8 | Mar 25 | net: lantiq: fix memory corruption in RX ring Affected: fe1a56420cf2ec28c8eceef672b87de0bbe1a260 before 8bb1077448d43a871ed667520763e3b9f9b7975d; fe1a56420cf2ec28c8eceef672b87de0bbe1a260 before 5ac72351655f8b033a2935646f53b7465c903418; fe1a56420cf2ec28c8eceef672b87de0bbe1a260 before 46dd4abced3cb2c912916f4a5353e0927db0c4a2; fe1a56420cf2ec28c8eceef672b87de0bbe1a260 before c7718ee96dbc2f9c5fc3b578abdf296dd44b9c20; 4.20 |
| CVE-2026-68124 | 9.6 | Aug 10 | mctp: serial: handle zero-length frames to prevent rx buffer overflow Affected: a0c2ccd9b5ad0a9e838158404e041b5a8ff762dd before 64b96ae7912244d55257aa330d9569ee0a8f8d99; a0c2ccd9b5ad0a9e838158404e041b5a8ff762dd before 36dc6d6964a3b90411cc7944cd9b8b6f67b9807b; a0c2ccd9b5ad0a9e838158404e041b5a8ff762dd before 68819427bc07eca7963a9e8be19e5272cc29186c; a0c2ccd9b5ad0a9e838158404e041b5a8ff762dd before f80ba170d7b3a44e3d244a2c8e06031d61bf3b23; a0c2ccd9b5ad0a9e838158404e041b5a8ff762dd before 06a6b606129c8a25cd457760f5370f3ff01fe05d; a0c2ccd9b5ad0a9e838158404e041b5a8ff762dd before 793b9b729f1e8de57be8c8daf1a9838be96cabed; +1 more |
| CVE-2024-36912 | 9.6 | May 30 | Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl Affected: d4dccf353db80e209f262e3973c834e6e48ba9a9 before 1999644d95194d4a58d3e80ad04ce19220a01a81; d4dccf353db80e209f262e3973c834e6e48ba9a9 before 8e62341f5c45b27519b7d193bcc32ada416ad9d8; d4dccf353db80e209f262e3973c834e6e48ba9a9 before bfae56be077ba14311509e70706a13458f87ea99; d4dccf353db80e209f262e3973c834e6e48ba9a9 before 211f514ebf1ef5de37b1cf6df9d28a56cfd242ca; 5.16 |
| CVE-2026-90110 | 9.4 | Sep 17 | inetpeer: randomize RB-tree node comparison using SipHash Affected: b145425f269a17ed344d737f746b844dfac60c82 before b20e98f0bb668a59abaf7bcf85d75c073e90d352; b145425f269a17ed344d737f746b844dfac60c82 before 5f127e3cc9647a8a70db12c65dbd0de473545380; b145425f269a17ed344d737f746b844dfac60c82 before 199fcf285e498111e029137d088949bc6c26d578; b145425f269a17ed344d737f746b844dfac60c82 before 857681f6835d5b0a7bc4a34a026baeaaf5215623; b145425f269a17ed344d737f746b844dfac60c82 before 7109bb63667a53e4542ad845476f97d0c8b28a61; b145425f269a17ed344d737f746b844dfac60c82 before 2ee66e9487172fcd189bc52a767c30dad7141c09; +1 more |
| CVE-2026-80585 | 9.4 | Aug 26 | mptcp: fastopen: only mark MPTFO subflows with SYN data Affected: 36b122baf6a8bd46b4a591f12f4ed17b22257408 before f75f174edc865738522e514d042cf5627f084859; 36b122baf6a8bd46b4a591f12f4ed17b22257408 before fca7e444c04689fe4cc6b56f2725f804a4bb1ef9; 36b122baf6a8bd46b4a591f12f4ed17b22257408 before 75e564b2ced1cc3d9a8904c7d2d2bb448fffb8b5; 36b122baf6a8bd46b4a591f12f4ed17b22257408 before 72b4a0c51a4b550d40301d60a366b429b8c8e78d; 36b122baf6a8bd46b4a591f12f4ed17b22257408 before e00b63056fb4f261455b3e5df5268a1f8ce47a87; 6.2 |
| CVE-2026-74751 | 9.4 | Aug 26 | riscv: lib: Fix ZBB strnlen reading past count boundary Affected: 5ba15d419fab848a3813eb56bbcad00e291fbc49 before e697e30f3dd2da3a1df7dc0980546d5b53aea4b6; 5ba15d419fab848a3813eb56bbcad00e291fbc49 before 5d588c684833e678a0008eb69c33190f01a65f4b; 7.1 |
| CVE-2026-72318 | 9.4 | Aug 15 | cifs: validate DFS referral string offsets Affected: 4ecce920e13ace16a5ba45efe8909946c28fb2ad before 76c607b9353d377b1d1b11db50e743eee0ccf658; 4ecce920e13ace16a5ba45efe8909946c28fb2ad before d64b6be5740ce230aca184d8d224c75d9866045d; 4ecce920e13ace16a5ba45efe8909946c28fb2ad before 929a85932d14190988f1eafd6ee8cc68d66ace0b; 4ecce920e13ace16a5ba45efe8909946c28fb2ad before b784cd1c24d89bf71be2efe1e948ff7c03371e57; 4ecce920e13ace16a5ba45efe8909946c28fb2ad before c37abc99bb3de3d3219ecef253d649f74117fd83; 4ecce920e13ace16a5ba45efe8909946c28fb2ad before 027a84ac6b50c12ef767c15abfc58aa865820e9e; +1 more |
| CVE-2026-64024 | 9.4 | Jul 19 | tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction Affected: 41eecbd712b73f0d5dcf1152b9a1c27b1f238028 before 8bb6aa419b142dcc2680177ecc39c4c38db7fc16; 41eecbd712b73f0d5dcf1152b9a1c27b1f238028 before e47f7060eaf60894e3e4d0e3c4fe6e1f2eacfbdd; 41eecbd712b73f0d5dcf1152b9a1c27b1f238028 before 4affe063fa56c880cbea8d0bfded0bb80751579d; 41eecbd712b73f0d5dcf1152b9a1c27b1f238028 before 1bbf0ced1d9db73ac7893c2187f3459288603e0d; 6.10 |
| CVE-2026-63830 | 9.4 | Jul 19 | net: skmsg: preserve sg.copy across SG transforms Affected: d3b18ad31f93d0b6bae105c679018a1ba7daa9ca before f126eed589eec6f201405abbc398844042ef6d57; d3b18ad31f93d0b6bae105c679018a1ba7daa9ca before 31a110642b5fb5e61940cbcfb503445ac4f28017; d3b18ad31f93d0b6bae105c679018a1ba7daa9ca before 9bb86d8184b37503816150c4a6ad3c17dfdbe827; d3b18ad31f93d0b6bae105c679018a1ba7daa9ca before 0eb4c16c4adb262763bda870a8ed38a1a9dec7ec; d3b18ad31f93d0b6bae105c679018a1ba7daa9ca before d22cc92bc41290e5783a72375e0843d9435f6001; d3b18ad31f93d0b6bae105c679018a1ba7daa9ca before 1acdd14c0990dd1cd4b6534f00366d2e6dfce05f; +3 more |
| CVE-2026-53131 | 9.4 | Jun 25 | netfilter: require Ethernet MAC header before using eth_hdr() Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 4435888e1bf139d2bfe5911643d4217382136743; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 063f43361e884acd7300790e90194430275d0d0c; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 726abf97566867f808fec9d8a408eb9698bd570a; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 367abcacc13a8e2e7624408b7f593bd1e60e49d9; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 5d634afb8b83b49de562792fd0d047416a43bd4d; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before cea435ea7e868ea6fdf039bc4f2090c1d829b556; +2 more |
| CVE-2026-43383 | 9.4 | May 8 | net/tcp-md5: Fix MAC comparison to be constant-time Affected: cfb6eeb4c860592edd123fdea908d23c6ad1c7dc before 821c8751fdeecdeecabeb11704dd33439c9e4bbc; cfb6eeb4c860592edd123fdea908d23c6ad1c7dc before ff44ec94d4fc8348600a69de0a8fa1102c23bce8; cfb6eeb4c860592edd123fdea908d23c6ad1c7dc before 345a9530756528d7ca407663d659c3c40e75c3dd; cfb6eeb4c860592edd123fdea908d23c6ad1c7dc before 5d305a95130a8d08b9545e47f1e18d29d59866cb; cfb6eeb4c860592edd123fdea908d23c6ad1c7dc before 02669e2a4d207068edce7e8b5fafd85822018ce6; cfb6eeb4c860592edd123fdea908d23c6ad1c7dc before ae3831b44f477de048287493e184fc3ff913b624; +3 more |
| CVE-2026-43114 | 9.4 | May 6 | netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry Affected: 7400b063969bdca4a06cd97f1294d765c8eecbe1 before f8c39983fc9c1a978c82e6f2df7bfba8a8561587; 7400b063969bdca4a06cd97f1294d765c8eecbe1 before c7babe2f28b507e17f28e9f753b7caec72d4857f; 7400b063969bdca4a06cd97f1294d765c8eecbe1 before 1c43f0dd8691ddf8884793b481ddc7511cf593c3; 7400b063969bdca4a06cd97f1294d765c8eecbe1 before fa4f1f52528c73989d820f32bfca06bec5afeece; 7400b063969bdca4a06cd97f1294d765c8eecbe1 before 3d53f9aafd469ae1ea27051e00f5b96ca1b55d52; 7400b063969bdca4a06cd97f1294d765c8eecbe1 before 07de44424bb7f17ef9357e8535df96d9e97c40cb; +3 more |
| CVE-2026-31685 | 9.4 | Apr 25 | netfilter: ip6t_eui64: reject invalid MAC header for all packets Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 4d75bc2cd093bf5803edf512c099bfb220fd6459; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 7d6a57411caf54df025860c9b1a82cd42d57a562; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before d5603591373441fecf9951833d6d873e09320f08; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 288138418bef956f8b295751a4536c60f0e89f4a; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9eda5478746ef7dc0e4e537b5a5e4b0ca1027091; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 807d6ee15804df6f01a35c910f09612e858739a6; +3 more |
| CVE-2026-31448 | 9.4 | Apr 22 | ext4: avoid infinite loops caused by residual data Affected: 315054f023d28ee64f308adf8b5737831541776b before c66545e83a802c3851d9be27a41c0479dd29ff0c; 315054f023d28ee64f308adf8b5737831541776b before ecc50bfca9b5c2ee6aeef998181689b80477367b; 315054f023d28ee64f308adf8b5737831541776b before 3a7667595bcad84da53fc156a418e110267c3412; 315054f023d28ee64f308adf8b5737831541776b before 416c86f30f91b4fb2642ef6b102596ca898f41a5; 315054f023d28ee64f308adf8b5737831541776b before 64f425b06b3bea9abc8977fd3982779b3ad070c9; 315054f023d28ee64f308adf8b5737831541776b before 5422fe71d26d42af6c454ca9527faaad4e677d6c; +1 more |
| CVE-2025-40099 | 9.4 | Oct 30 | cifs: parse_dfs_referrals: prevent oob on malformed input Affected: 4ecce920e13ace16a5ba45efe8909946c28fb2ad before cfacc7441f760e4a73cc71b6ff1635261d534657; 4ecce920e13ace16a5ba45efe8909946c28fb2ad before 15c73964da9df994302f579ed14ee5fdbce7a332; 4ecce920e13ace16a5ba45efe8909946c28fb2ad before 8bc4a8d39bac23d8b044fd3e2dbfd965f1d9b058; 4ecce920e13ace16a5ba45efe8909946c28fb2ad before bb0f2e66e1ac043a5b238f5bcab4f26f3c317039; 4ecce920e13ace16a5ba45efe8909946c28fb2ad before 6447b0e355562a1ff748c4a2ffb89aae7e84d2c9; 4.11 |
| CVE-2024-26828 | 9.4 | Apr 17 | cifs: fix underflow in parse_server_interfaces() Affected: fe856be475f7cf5ffcde57341d175ce9fd09434b before 7190353835b4a219abb70f90b06cdcae97f11512; fe856be475f7cf5ffcde57341d175ce9fd09434b before f7ff1c89fb6e9610d2b01c1821727729e6609308; fe856be475f7cf5ffcde57341d175ce9fd09434b before df2af9fdbc4ddde18a3371c4ca1a86596e8be301; fe856be475f7cf5ffcde57341d175ce9fd09434b before cffe487026be13eaf37ea28b783d9638ab147204; 4.18 |
The 500 most important CVEs for this product (exploited first, then by severity)