LI
Product
Linux
On CISA KEVExploited in the wild
18,165
CVEs
12
On KEV
10.0
Max CVSS
1051
New 30D
Severity mix
Critical 489High 9Medium 2Low 0
Watch
Add Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-64122 | 9.8 | Jul 19 | net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover Affected: 4329514c61abefe4961541b128c549b017bab5ad before 1604a2d68414aa4cc34faac0b7faa9c14455e8d3; 83ac0304a2d77519dae1e54c9713cbe1aedf19c9 before 152295aa7dc2c5e046606f7dadc84fce41136446; 83ac0304a2d77519dae1e54c9713cbe1aedf19c9 before 7d260c5d2d89eb2c8c528d54b576b3aae3e20231; 63f9d5fb4d8040077df801ca3270e2f02d55e0d9; 6.18.14 before 6.18.34; 6.19.4 before 6.20; +1 more |
| CVE-2026-64113 | 9.8 | Jul 19 | ixgbevf: fix use-after-free in VEPA multicast source pruning Affected: bad17234ba702a50aeec50ab04724ee58af89607 before 3d931ac62411a7e43b85dba5fe45e1a4a91bd5cb; bad17234ba702a50aeec50ab04724ee58af89607 before 6ef30384a50a50e4a484cddf341bc27de31aa3de; bad17234ba702a50aeec50ab04724ee58af89607 before 55b3e91d62b2f7a24109b2d7c9f4c66d2e3b1ec1; bad17234ba702a50aeec50ab04724ee58af89607 before add70e2682c0ad3be2a5810bcf1bc13963ba4df9; bad17234ba702a50aeec50ab04724ee58af89607 before a244395d8c563ed1bb26c3ef708db6aeeaa08084; bad17234ba702a50aeec50ab04724ee58af89607 before dfef79e09ed2f5df975c98547f97f5d7f8982a24; +3 more |
| CVE-2026-64102 | 9.8 | Jul 19 | RDMA/siw: Reject MPA FPDU length underflow before signed receive math Affected: 8b6a361b8c482f22ac99c3273285ff16b23fba91 before 683f7cfbf514193d63c0efa079f3352bde84c2e0; 8b6a361b8c482f22ac99c3273285ff16b23fba91 before 4a331582011d9e8089af8aa2a61ec6b4443bb245; 8b6a361b8c482f22ac99c3273285ff16b23fba91 before 33a8b5e971e294ec2a7b74211c545e09efd8e9ac; 8b6a361b8c482f22ac99c3273285ff16b23fba91 before 14553be882d9ce91749c9d64041de66e34ad8e70; 8b6a361b8c482f22ac99c3273285ff16b23fba91 before c7c0c0f4379dedec12d24dbb9dded5d2db7fd9f2; 8b6a361b8c482f22ac99c3273285ff16b23fba91 before 1012896f4225e8f801ff3c1648023845b66dfb11; +3 more |
| CVE-2026-64091 | 9.8 | Jul 19 | batman-adv: tt: fix TOCTOU race for reported vlans Affected: 16116dac23396e73c01eeee97b102e4833a4b205 before e4236bf3ec8d6bb15d0d8d825dcf9933a7d6666b; 16116dac23396e73c01eeee97b102e4833a4b205 before 724a8eb4155669797c96b70d70e354284ae3b5a8; 16116dac23396e73c01eeee97b102e4833a4b205 before 211ea59988e1cba43cb0367ad65d379b56f9c3bd; 16116dac23396e73c01eeee97b102e4833a4b205 before 65a1e67339aa8c95ac544b796946af388930ee23; 16116dac23396e73c01eeee97b102e4833a4b205 before b4d4efd4e351593c81e9293d4b4408d244fa5ee7; 16116dac23396e73c01eeee97b102e4833a4b205 before 4cc85aec8d3c9ab4dc716dc9f1ed36fca16b227f; +11 more |
| CVE-2026-64089 | 9.8 | Jul 19 | batman-adv: tt: fix negative last_changeset_len Affected: a73105b8d4c765d9ebfb664d0a66802127d8e4c7 before 6314089acf0ddf64376fdc0b1420695504c73f52; a73105b8d4c765d9ebfb664d0a66802127d8e4c7 before 55dc41fe8821e9a849e147255ad572bc933a9d15; a73105b8d4c765d9ebfb664d0a66802127d8e4c7 before c424e8519ac78eac5d9f4eecf06208a0d619ec14; a73105b8d4c765d9ebfb664d0a66802127d8e4c7 before 22d59c72f4a47ffec121d0610f70d0d70c3c11c8; a73105b8d4c765d9ebfb664d0a66802127d8e4c7 before eb235472b52ef36981c5aad330485eaf2382c53b; a73105b8d4c765d9ebfb664d0a66802127d8e4c7 before 179eb62506a02d00370bd6478898cb632e10986c; +3 more |
| CVE-2026-64069 | 9.8 | Jul 19 | netfs: Fix cancellation of a DIO and single read subrequests Affected: e2d46f2ec332533816417b60933954173f602121 before 5366199be46fb53de62861721d34ba816e7e440e; e2d46f2ec332533816417b60933954173f602121 before f73372a4c6900d117f8e903fe10b62692f95e6c4; e2d46f2ec332533816417b60933954173f602121 before 6f0f7ac1915abc0d202f0eb4b003a6548a5ba60d; 6.14 |
| CVE-2026-64068 | 9.8 | Jul 19 | netfs: Fix missing locking around retry adding new subreqs Affected: 288ace2f57c9d06dd2e42bd80d03747d879a4068 before f59c4ec86ef3a9ac99706ae163a38ec28129fd76; 288ace2f57c9d06dd2e42bd80d03747d879a4068 before d5c9d19b0ff2f7153532ac238a5e96fed2df315c; 288ace2f57c9d06dd2e42bd80d03747d879a4068 before 393f3f0d7353a94b1e0bc4ca89c683fe983e5fd2; 288ace2f57c9d06dd2e42bd80d03747d879a4068 before cce18c263e9623872327ba3c956012f73c1179cc; 6.10 |
| CVE-2026-64067 | 9.8 | Jul 19 | netfs: Fix missing barriers when accessing stream->subrequests locklessly Affected: 288ace2f57c9d06dd2e42bd80d03747d879a4068 before f048f297d93fdb19d72d01d22f04c419d8b16602; 288ace2f57c9d06dd2e42bd80d03747d879a4068 before 293a4532c36f38458e38b8879b174ab797718b9d; 288ace2f57c9d06dd2e42bd80d03747d879a4068 before b5782e2d462c028096f922abca46318cec890670; 6.10 |
| CVE-2026-64066 | 9.8 | Jul 19 | netfs: Fix netfs_read_to_pagecache() to pause on subreq failure Affected: ee4cdf7ba857a894ad1650d6ab77669cbbfa329e before 884c4c4f35e577aba6a0593c80cbea9ca5e6e2b8; ee4cdf7ba857a894ad1650d6ab77669cbbfa329e before 0256e79ce42101ad036edd4205bccca621ea0927; ee4cdf7ba857a894ad1650d6ab77669cbbfa329e before 8a8c0cfdf4658fc5b295b7fc87be56e0d76741f4; 6.12 |
| CVE-2026-64061 | 9.8 | Jul 19 | netfs: Fix early put of sink folio in netfs_read_gaps() Affected: ee4cdf7ba857a894ad1650d6ab77669cbbfa329e before 2a39d49c8d97df8cb8fa80c10859bc1ba7358c6b; ee4cdf7ba857a894ad1650d6ab77669cbbfa329e before d4f4bc87c76511cf2532448b0fa40c25e894bd7d; ee4cdf7ba857a894ad1650d6ab77669cbbfa329e before 412e8bad48967fd34295866636c028befd27d8b9; ee4cdf7ba857a894ad1650d6ab77669cbbfa329e before 3e5dd91b87a8b1450217b56a336bee315f40da7d; 6.12 |
| CVE-2026-64056 | 9.8 | Jul 19 | net: ethernet: cortina: Make RX SKB per-port Affected: 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 27856d533eca3804008695f61c1e4d5ff984196b; 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before b6b22824b30e48ce1df3a2e80990f4b8505deb50; 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 6bba24e9ebe6f1c0b356cd471e36bdc7fa434897; 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 3b249988d774dacf13b203817e971934a42243c4; 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 72158ea185b27afae163949b0e86164cb6b64e55; 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before cfd62907f3cdbc3b6da8f49ba907c0390018fe5e; +3 more |
| CVE-2026-64055 | 9.8 | Jul 19 | net: ethernet: cortina: Carry over frag counter Affected: 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before df31e3b64455293df1ea89c7da7d5c9bfbcdd253; 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 7af1fabdee744b7995fe01b30b77dfc397657cb5; 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 75105fcf73f1ce7d9f769aaefec6e6d6645d5ac0; 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 78cf08b3be47c28f07008a76c932bad7cdffa9d8; 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 7123cf481e21b54eb6adc4cb0d8dc2876aeaee41; 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before c373b34877afea61c89e0dd2e38948c624249b9b; +3 more |
| CVE-2026-64047 | 9.8 | Jul 19 | net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring Affected: 9aaaa56845a06aeabdd597cbe19492dc01f281ec before 73963a375885d5ccb7def39fd0b4f542e0f343dd; 9aaaa56845a06aeabdd597cbe19492dc01f281ec before 47110c3a9ac247b688657337f5981efcfcb240dc; 9aaaa56845a06aeabdd597cbe19492dc01f281ec before 84158c2997159df4a0d70cd9c46774512d32a522; 9aaaa56845a06aeabdd597cbe19492dc01f281ec before 131ef12057d92b77b636321b7849c69222405a97; 9aaaa56845a06aeabdd597cbe19492dc01f281ec before 66339b71f105e6f83e0da3b9583d95077534fe1d; 9aaaa56845a06aeabdd597cbe19492dc01f281ec before eca989eab4b2599dcb02f72140a7c08f08838520; +5 more |
| CVE-2026-64046 | 9.8 | Jul 19 | net: tls: prevent chain-after-chain in plain text SG Affected: 9aaaa56845a06aeabdd597cbe19492dc01f281ec before 49a5faaa471ddcd37b6893970c9916eb836e7c31; 9aaaa56845a06aeabdd597cbe19492dc01f281ec before 91359966e247c0244c66d50bbb8e74aefa4321c3; 9aaaa56845a06aeabdd597cbe19492dc01f281ec before 410351158dfef2d67fea6603680b3a6013c6ed9d; 9aaaa56845a06aeabdd597cbe19492dc01f281ec before acdc12b71c9aa4be5dcd2c8062753c6d2033e235; 9aaaa56845a06aeabdd597cbe19492dc01f281ec before 929b1548e63ac72e104c07d8ee8cbbeeba2fa89a; 9aaaa56845a06aeabdd597cbe19492dc01f281ec before af855f4c966afafef74faf8390c7b86568c0d46d; +5 more |
| CVE-2026-64037 | 9.8 | Jul 19 | wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled Affected: d1e879ec600f9b3bdd253167533959facfefb17b before 9e360e610a73f62432e986775023d5382773f045; d1e879ec600f9b3bdd253167533959facfefb17b before cbe1c8245e4469d1aa6e12e5d913611376d23788; d1e879ec600f9b3bdd253167533959facfefb17b before 92cee08dc4f00e77fd1317e4343c5d458b0abab7; 6.15 |
| CVE-2026-64035 | 9.8 | Jul 19 | igc: set tx buffer type for SMD frames Affected: 5422570c0010bb968738f9256eb2bf83e79b4d63 before 1f83545f432d106d5fc71d3997b2d382104ebcc4; 5422570c0010bb968738f9256eb2bf83e79b4d63 before 1c8587bd025244aa52061f5ceecbf5e68a1063d9; 5422570c0010bb968738f9256eb2bf83e79b4d63 before 5acc641e590e008caaed480ed9ffae47cf7ecbdf; 6.16 |
| CVE-2026-64033 | 9.8 | Jul 19 | RDMA/rtrs: Fix use-after-free in path file creation cleanup Affected: bab17b761c8974a869b04462be5d4dd9aad366b4 before 01e42aabaf7632beb4bf235c7238b96c746d4144; ae4c81644e9105d9f7f713bb0d444737bb6a0cf1 before 548f3956e53a7f7bde912d8129010b8986d5e602; ae4c81644e9105d9f7f713bb0d444737bb6a0cf1 before 00904a73272b9f3ef3952fe69a833909dccad1ef; ae4c81644e9105d9f7f713bb0d444737bb6a0cf1 before 92060ab1c5115674cf319175550f85f68405121f; ae4c81644e9105d9f7f713bb0d444737bb6a0cf1 before eae62c5451e67e8b033c1681fd3b85d7e9a9a28f; ae4c81644e9105d9f7f713bb0d444737bb6a0cf1 before b0e9706fb2859064bb6c677554c4d20c713aa8e0; +3 more |
| CVE-2026-64025 | 9.8 | Jul 19 | bpf, skmsg: fix verdict sk_data_ready racing with ktls rx Affected: ef5659280eb13e8ac31c296f58cfdfa1684ac06b before c9ea01768903ae47f210cd457af1dead6de7a9c3; ef5659280eb13e8ac31c296f58cfdfa1684ac06b before 7c8cf21bc4efb4af18d6096db3f8bd06d622251c; ef5659280eb13e8ac31c296f58cfdfa1684ac06b before 1861d369efd62d67796563bf3e01fc22e5626f8b; ef5659280eb13e8ac31c296f58cfdfa1684ac06b before 8a52139560f833c3975032e1f5762611e3a36d71; ef5659280eb13e8ac31c296f58cfdfa1684ac06b before ddf8029623a1af20e984c040e89ff918158397ab; 5.10 |
| CVE-2026-64016 | 9.8 | Jul 19 | ksmbd: fix durable reconnect error path file lifetime Affected: f0ff7f12398e85b3a11745ff7feab6246f3d75c2 before 5e641e4ee0bc1937408d41051a908ad4151be63b; 4db3dcac84c2f14a45ae201efb38de1fb1bfc009 before 478bfaa036bd0c7e179acff8b8484bccdee3b8c7; ce2e164c1c51c3f7813b80f8c926836e896bcbb3 before a1a39f227c80cbf369767badc32cba2b225147d1; 97a0cd55283b4e63fd92804da91c8d9896adcad9 before 6cb0b9385320110fe24a5d5ac0000ade4bb3a3f3; 1baff47b81f94f9231c91236aa511420d0e266b9 before 3515503322f4819277091839eed46b695096aca5; 6.18.33 before 6.18.34; +1 more |
| CVE-2026-64007 | 9.8 | Jul 19 | netfilter: synproxy: refresh tcphdr after skb_ensure_writable Affected: 48b1de4c110a7afa4b85862f6c75af817db26fad before 9902a1058992de5d95656b64a3bd95c077f7ba2c; 48b1de4c110a7afa4b85862f6c75af817db26fad before d3019c61799adc21811af4b521f11f3dc77f8e04; 48b1de4c110a7afa4b85862f6c75af817db26fad before dd206819f210522579010d889d45a9530bb494bc; 48b1de4c110a7afa4b85862f6c75af817db26fad before af2c22ccb1f621aff487ff47a040e38e058541e7; 48b1de4c110a7afa4b85862f6c75af817db26fad before c7f945f7da097245a2f8ed7775ce48421047ee96; 48b1de4c110a7afa4b85862f6c75af817db26fad before f0fea2b6d5453a11ad11713bbf37561b9b3a7edf; +3 more |
| CVE-2026-64000 | 9.8 | Jul 19 | net: hsr: fix potential OOB access in supervision frame handling Affected: eafaa88b3eb7f28aecb222281655473431d3ef2e before 09a37dca090c55ffb1a33f52d8667f1c2367ef48; eafaa88b3eb7f28aecb222281655473431d3ef2e before a4b64f3e9c7b8259f7dd251a0313420ba7c01852; eafaa88b3eb7f28aecb222281655473431d3ef2e before 71c986c0ba45b7dc574fae27c83e7b6671556f37; eafaa88b3eb7f28aecb222281655473431d3ef2e before fbd0662f9c9a66e8cc3df3099cca8ed6d3837cc7; eafaa88b3eb7f28aecb222281655473431d3ef2e before 78607a6854a22a2502f68092202e75a39af4865d; eafaa88b3eb7f28aecb222281655473431d3ef2e before f229426072fc865654a60978bb7fda790a051ff3; +1 more |
| CVE-2026-63994 | 9.8 | Jul 19 | tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() Affected: 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before 95b6d772bfe788331d9742d73eaa12e113b2adc4; 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before 7254aef4d1a7e18e887af9010e2f2dc34806789b; 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before bf8b3f34c37c162357138e7c0942723b8b94fed1; 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before 76cd9398a0470257ab765bdf5f358a2af2e17934; 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before 50750d86a2e5266aba0c295483b3397843198b11; 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before 6dff77899b9e9fe5d854abda3a98ad04e7229ef7; +3 more |
| CVE-2026-63993 | 9.8 | Jul 19 | vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() Affected: 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before 6b8bfce9d2f774d2c2243e0248e03efb99bba6c0; 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before 9257f56ac47ef1976bcd056cf986a9988eeec67a; 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before 8d435d68d71fb875876b722f4136caf74f2f48bd; 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before dc3bfa050f873371e745bdf478b1f5b738e5733d; 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before 609e63312c29aad18026a1d3222e123d4b6b0feb; 4cb47a8644cc9eb8ec81190a50e79e6530d0297f before 5303925e360527243b46a440a04667826bbc72b7; +3 more |
| CVE-2026-63984 | 9.8 | Jul 19 | ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() Affected: 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 before 75b3680047bf09af8e7e471a7a6ddf2ce5847f56; 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 before fd238c51b0fa5390cceca9f1ac5a9ffda8063eed; 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 before 3618b34942b76471d044369bfd30d58c39068bf1; 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 before 97e06791368c01f0ad2a4b3269c2abe19485ca32; 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 before de02fc049352af5a9595f015511222d0a85c326b; 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 before 6fe1cb312038516cb4d9fa089d700af7059f1a64; +3 more |
| CVE-2026-63979 | 9.8 | Jul 19 | net/handshake: hand off the pinned file reference to accept_doit Affected: 3b3009ea8abb713b022d94fba95ec270cf6e7eae before b869e3e4ce1996df23b3efdbbe9a64c4ab81d745; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before 2f28dbb30b88eafab8d49aaec94710b4e12dea8e; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before 68eba6519cbd6359fb554a9720f3a3b6b2eba23f; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before c06876d4fac38f35820946ee3b1be7d7da799cd4; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before f4251190e58b209999c1ba9e6d2976136a1be055; 6.4 |
| CVE-2026-63978 | 9.8 | Jul 19 | net/handshake: Drain pending requests at net namespace exit Affected: 3b3009ea8abb713b022d94fba95ec270cf6e7eae before ee4b2ba9d30155f9945811cd3c0c1b06d45787a9; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before 9ec20c9a5a04f2c3f1cf65d21f886d7aaa6189cd; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before 2bf24a7e190aae0ea47c78099938ae056c622e44; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before 8c35539db0ab0bfa1ea44efab00b053261a69469; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before ea5fe6a73ca57e5150b8a38b341aef2636eb72f0; 6.4 |
| CVE-2026-63924 | 9.8 | Jul 19 | ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before b3ac54e5c905f86d22b502eacb5686a282c5659f; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 645b99b1a185c91a79bdac4c5de0f91b212d64f0; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9e883eaa878f4337b5873c706efb5a192364ed18; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before bddaa4dfc7f36e1ee343a0622f69288af2b9ace9; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 72af7beae774e46ed543f3f2f267bf0a141bfcdd; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c512e1c819dfbf6ae95ee7a44b65b9ad98979157; +3 more |
| CVE-2026-63922 | 9.8 | Jul 19 | ipv6: exthdrs: refresh nh after handling HAO option Affected: a831f5bbc89a9978795504be9e1ff412043f8f77 before b3ac54e5c905f86d22b502eacb5686a282c5659f; a831f5bbc89a9978795504be9e1ff412043f8f77 before f8aabed3ff3e986920cf02a2a2785e08e586b234; a831f5bbc89a9978795504be9e1ff412043f8f77 before 1a11eb7431e3d2882f5bd5939c5a9bbc65ccf4d1; a831f5bbc89a9978795504be9e1ff412043f8f77 before 12d957979e4a800167842f1b42be6a606d227ebe; a831f5bbc89a9978795504be9e1ff412043f8f77 before ff375ed1cba81392346c5bfbf0bb7a13b2946f99; a831f5bbc89a9978795504be9e1ff412043f8f77 before 751db1b802a067b7fff25880f4e9f9152a171538; +3 more |
| CVE-2026-63912 | 9.8 | Jul 19 | xfrm: esp: restore combined single-frag length gate Affected: c075c3ea031757f8ea2d34567565b61a868c08d5 before 566295735530ee513326049b0540f32ec050bf2e; a583f2f3c8788bffd7fd7baeb76bd6d80543d7ea before 5d7ab86e2b6bc23054616bf6ac562013bf60af8c; 5bd8baab087dff657e05387aee802e70304cc813 before 36519e3d941fc99d3b52c134dbaf311f987a4708; 5bd8baab087dff657e05387aee802e70304cc813 before 322e48187e0245ab2fff6fec2220b0cae677dbec; 5bd8baab087dff657e05387aee802e70304cc813 before b84091ceddc9f133229dceab3ccc930bf27f9cba; 5bd8baab087dff657e05387aee802e70304cc813 before c093468aea8277f77272a4f199b2e15e19cabb59; +13 more |
| CVE-2026-63888 | 9.8 | Jul 19 | scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() Affected: e48354ce078c079996f89d715dfa44814b4eba01 before f7948af0dd03de84079dcd4dc215a69fd6fbb95d; e48354ce078c079996f89d715dfa44814b4eba01 before badf178b76b0690851df00f4ca9cf2eb8eb0f963; e48354ce078c079996f89d715dfa44814b4eba01 before 6e22a1cdcc8277af4acc43710577157b77a02c5d; e48354ce078c079996f89d715dfa44814b4eba01 before d3e9b79aa794f7a23e82de4d710e7d2df610e349; e48354ce078c079996f89d715dfa44814b4eba01 before ec9f19d52074a191ed1756ed4a7d39fff1a2085c; e48354ce078c079996f89d715dfa44814b4eba01 before 89c81d1228c00fa6dd91de6c1c5aa1ef8a7875e3; +3 more |
| CVE-2026-63887 | 9.8 | Jul 19 | scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf Affected: e48354ce078c079996f89d715dfa44814b4eba01 before cb84e974fb172bc71386289f37b78ea679410b39; e48354ce078c079996f89d715dfa44814b4eba01 before b19382dfc6e7dee6d3859ba44b6ca29e97a51627; e48354ce078c079996f89d715dfa44814b4eba01 before efe633e600a0ac68357206fede21b1ac8178f3b8; e48354ce078c079996f89d715dfa44814b4eba01 before 4e9f0c4a645c995bc75c06c7b3644254ffb4c76b; e48354ce078c079996f89d715dfa44814b4eba01 before 30bf335e8fe170322080ee001f05ca29c50680b3; e48354ce078c079996f89d715dfa44814b4eba01 before 594a40360012ce5f94c715d5e3b20fa3af7d525a; +3 more |
| CVE-2026-63886 | 9.8 | Jul 19 | scsi: target: iscsi: Validate CHAP_R length before base64 decode Affected: 1e5733883421495908f3b90d9d807663038b4136 before 82454e6f21e56ea9a0a9de7d0ff7e1dfb83e34d6; 1e5733883421495908f3b90d9d807663038b4136 before edd06675a02376ea8347dba7c29ad982ba5b36ee; 1e5733883421495908f3b90d9d807663038b4136 before bf154c657828ed05399bca5d98cf1611bb048b12; 1e5733883421495908f3b90d9d807663038b4136 before 4a3a19c98a8207ad08bec554703d90f2c34a8cc6; 1e5733883421495908f3b90d9d807663038b4136 before c04e85799356120209b351a148ac2db888d5ffd9; 1e5733883421495908f3b90d9d807663038b4136 before 85db7391310b1304d2dc8ae3b0b12105a9567147; +1 more |
| CVE-2026-63857 | 9.8 | Jul 19 | net: airoha: Do not read uninitialized fragment address in airoha_dev_xmit() Affected: 23020f04932701d5c8363e60756f12b43b8ed752 before dba5f4959653e4c212beb746594952e8645d1115; 23020f04932701d5c8363e60756f12b43b8ed752 before f670fa4b19ceddc6d215dda4997888ccba9bbc61; 23020f04932701d5c8363e60756f12b43b8ed752 before d78c8ab7bd84952e053d0c622b7fc1b4ad8a19a3; 23020f04932701d5c8363e60756f12b43b8ed752 before bde34e84edc8b5571fbde7e941e175a4293ee1eb; 6.11 |
| CVE-2026-63825 | 9.8 | Jul 19 | gcov: use atomic counter updates to fix concurrent access crashes Affected: 2521f2c228ad750701ba4702484e31d876dbc386 before b0f7bd5eeb903a0021a80e9d704814e2a9d3998c; 2521f2c228ad750701ba4702484e31d876dbc386 before 4575852c23a10abc7648d31e4c12cf79d7391637; 2521f2c228ad750701ba4702484e31d876dbc386 before 49d893b9cbcfc5802a32e53a64c6c6956670d65b; 2521f2c228ad750701ba4702484e31d876dbc386 before 5b959c1dbb4522b9e3ac4e26ad638b8784869841; 2521f2c228ad750701ba4702484e31d876dbc386 before 56cb9b7d96b28a1173a510ab25354b6599ad3a33; 2.6.31 |
| CVE-2026-63808 | 9.8 | Jul 19 | exfat: fix potential use-after-free in exfat_find_dir_entry() Affected: ca06197382bde0a3bc20215595d1c9ce20c6e341 before e6f1a11cfb808441a43ffae9b476cc135732cd27; ca06197382bde0a3bc20215595d1c9ce20c6e341 before e48f413c2815787b8cade2795e194e3c4cd782ef; ca06197382bde0a3bc20215595d1c9ce20c6e341 before 06c4e1e9967d332ac33ba38b7819851089ff9359; ca06197382bde0a3bc20215595d1c9ce20c6e341 before 8e0abc17fbd7e305802e84fe98b4950d50f9c433; ca06197382bde0a3bc20215595d1c9ce20c6e341 before 4d101016d5e587f820b3ae2d5bb6770d86342649; ca06197382bde0a3bc20215595d1c9ce20c6e341 before adfacfbaeae2cb760f492357cc36b41f84ef7f86; +3 more |
| CVE-2026-63800 | 9.8 | Jul 19 | pNFS: Fix use-after-free in pnfs_update_layout() Affected: 06f58dbc49a23c99e5c0f246879ed16667f7bf8f before 4ad8b9a85dbf57ca532ee9e65ad7e6498bfbbf98; 2c8d5fc37fe2384a9bdb6965443ab9224d46f704 before 1f24b8302c77dcaf79c64c073877a3b9f4dd25d2; 2c8d5fc37fe2384a9bdb6965443ab9224d46f704 before 9c0fb5c09ae5bd68dc0038692af8127029cb0385; 2c8d5fc37fe2384a9bdb6965443ab9224d46f704 before 7e37e9b3e82ade881e1798e2f4fcc54aff7793c1; 2c8d5fc37fe2384a9bdb6965443ab9224d46f704 before 2883ddd7542b4437a2ab4908fe2773f690e20889; 2c8d5fc37fe2384a9bdb6965443ab9224d46f704 before 200e7637f4d6a1342987045eea72641524f909dc; +6 more |
| CVE-2026-53399 | 9.8 | Jul 19 | nfsd: release layout stid on setlease failure Affected: c5c707f96fc9a6e5a57ca5baac892673270abe3d before d788ef40a7517d22c97ab01700e4ae4c611b6f2f; c5c707f96fc9a6e5a57ca5baac892673270abe3d before 2e0a5d6d62600b8c614d1b55e50ef94035d6adf9; c5c707f96fc9a6e5a57ca5baac892673270abe3d before 7bbb7ce74051c8be4b69ff44ce3db370600dae61; c5c707f96fc9a6e5a57ca5baac892673270abe3d before 48a586e382e4db1dbf958d44b63e081df5f8ed04; c5c707f96fc9a6e5a57ca5baac892673270abe3d before d369e5edfaaf83a448016e2f1da392b2174be801; c5c707f96fc9a6e5a57ca5baac892673270abe3d before 8dee7c278f1c2b5bb80e17a6281c3812fc8b0cdd; +3 more |
| CVE-2026-53398 | 9.8 | Jul 19 | NFSD: Fix SECINFO_NO_NAME decode error cleanup Affected: 5e76b25d7cc82c148d391c0c43b884e6427cb302 before 8836405abdc53ca3dd5fc68b2cf6f8f012fad011; 07b68ff5c71cf4ed5443016d8eb116863c0a4d88 before 49de5d31dd8fdebf78bdeaf196b0ca5cd5c75439; 3fdc546462348b8a497c72bc894e0cde9f10fc40 before 5ec37edcb534f3fc92304be236d37f08e6545585; 3fdc546462348b8a497c72bc894e0cde9f10fc40 before 1e04be34cafae119e82bcaccd6d28a20f72a3647; 3fdc546462348b8a497c72bc894e0cde9f10fc40 before 161d1aaeb04d620d3692639700512bb5038c1e10; 3fdc546462348b8a497c72bc894e0cde9f10fc40 before c8a24effd96d4779e2ad779654682304491c55a5; +5 more |
| CVE-2026-53384 | 9.8 | Jul 19 | serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails Affected: 57f83e5dd6a33c4696699954784f8fee789b1d0c before ccdf4510a3873b14e5e348cdb038717996f09fda; 57f83e5dd6a33c4696699954784f8fee789b1d0c before 511d2b92f8d20de04acafab676150d26fb5c67f4; 57f83e5dd6a33c4696699954784f8fee789b1d0c before 07ffe414a708ae60551401cec5d727ed156b8caf; 57f83e5dd6a33c4696699954784f8fee789b1d0c before 3d205fe80f2181f0109150ad1fa06ee5bc046935; 57f83e5dd6a33c4696699954784f8fee789b1d0c before d72650a4f334581b23a1892b888a4cb1be142f76; 57f83e5dd6a33c4696699954784f8fee789b1d0c before 778b9dda4b24005a27bcd9c35c110bf8d7f259ca; +2 more |
| CVE-2026-53363 | 9.8 | Jul 10 | xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags() Affected: b96ba312e21c9b7ac1526829b9640ddc06695c0b before dd66f7f6e360ee82cd905517726f8e9091265de5; b96ba312e21c9b7ac1526829b9640ddc06695c0b before c885d111ed9f5a0a1f3cc4e87a50db6518abaa6c; b96ba312e21c9b7ac1526829b9640ddc06695c0b before e9096a5a170e7ecd6467bc2e08668ec39897cda7; 6.14 |
| CVE-2026-53355 | 9.8 | Jul 1 | net: rds: clear i_sends on setup unwind Affected: 3b12f73a5c2977153f28a224392fd4729b50d1dc before 66cccec111421a10efdc2c74499d15b93e7acae5; 3b12f73a5c2977153f28a224392fd4729b50d1dc before 2c5e5e4a5970c41f16e3ad801a78719ed5d5c71b; 3b12f73a5c2977153f28a224392fd4729b50d1dc before 29d940026dce39e3018dab6f67c9427249321270; 3b12f73a5c2977153f28a224392fd4729b50d1dc before e7cf30aa5f1fc6c2a86df65df8b731df20e44d79; 3b12f73a5c2977153f28a224392fd4729b50d1dc before f16ad421a4e3e7db2d14bdf3b16f583bc4f3b30a; 3b12f73a5c2977153f28a224392fd4729b50d1dc before 1d4ec754ee3871f7e3670c67bb0298c9c5760926; +11 more |
| CVE-2026-53309 | 9.8 | Jun 26 | ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison Affected: ea2034416b54700e30371f2ad6517cbb94674083 before 760ab35040aca8399021fdb9ff1db1089feb7194; ea2034416b54700e30371f2ad6517cbb94674083 before c60a2710b73838d250cda57344c049b89abc5d52; ea2034416b54700e30371f2ad6517cbb94674083 before 2a0673836f019e7c032acbf48d022d5ccf02a845; ea2034416b54700e30371f2ad6517cbb94674083 before 819d8ebad3200a53de99bd7e297bc428e41ced54; ea2034416b54700e30371f2ad6517cbb94674083 before d5403ae28085761d58b555645bc7d5feadb10073; ea2034416b54700e30371f2ad6517cbb94674083 before 1fb7f356547d9688822315cd2b205ff0bd5429b4; +3 more |
| CVE-2026-53260 | 9.8 | Jun 25 | tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req(). Affected: d2d6422f8bd17c6bb205133e290625a564194496 before 889fc99967007e2493833515a645cb2d800f6742; d2d6422f8bd17c6bb205133e290625a564194496 before de5a46f3b2c8d3cd20afa158bd3a725e3e3d6fd3; d2d6422f8bd17c6bb205133e290625a564194496 before b183215ff714efb747d9d5a429322ba6404b5401; d2d6422f8bd17c6bb205133e290625a564194496 before e10902df24488ca722303133acfc82490f7d59ad; 6.12 |
| CVE-2026-53247 | 9.8 | Jun 25 | net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown Affected: 2d7605a729062bb554f03c5983d8cfb8c0b42e9c before 72775977e89c25c99ee84d2c5baa3f86a8ba5cb4; 2d7605a729062bb554f03c5983d8cfb8c0b42e9c before 459c6f35c58cf0fd5247e55d73ddaa29571d9b7e; 2d7605a729062bb554f03c5983d8cfb8c0b42e9c before e634408d2b0cd939cfe019398a21fb47b7a8ffe3; 2d7605a729062bb554f03c5983d8cfb8c0b42e9c before 2d86aeb46d5f69c704065a8c69822582787272a1; 2d7605a729062bb554f03c5983d8cfb8c0b42e9c before 80df409e1a483676826a6c66e693dba6ac507751; 6.2 |
| CVE-2026-53246 | 9.8 | Jun 25 | sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before cc272185c9a9a4b7febc2de52eeaa3d00f19091e; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before edccbf3d63b0a3362bc916ea72edacc1e1ca456a; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 0861615c28de668669d748ef4eb913ea9262d13b; 2.6.12 |
| CVE-2026-53228 | 9.8 | Jun 25 | ipv6: sit: reload inner IPv6 header after GSO offloads Affected: 14909664e4e192f4c6f6fcdccd9919af7cf783ab before fddd41445a0537b093e6b3f6232c9933cad1e48b; 14909664e4e192f4c6f6fcdccd9919af7cf783ab before 1132e5edc2866c3530be17622153a597095f0e43; 14909664e4e192f4c6f6fcdccd9919af7cf783ab before 9c67b44edb3598d234efae6e44649eb993c03da5; 14909664e4e192f4c6f6fcdccd9919af7cf783ab before 0bfa7bba1f41aaf5f0604dc712bb4701493e3aa0; 14909664e4e192f4c6f6fcdccd9919af7cf783ab before 59f80c919713250fe5d25a4d9aea4e49580fa1d4; 14909664e4e192f4c6f6fcdccd9919af7cf783ab before 2fa49b2715e1bad12ce3b0fa64e234d9582c8193; +3 more |
| CVE-2026-53221 | 9.8 | Jun 25 | ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() Affected: fbe68ee87522f6eaa10f9076c0a7117e1613f2f7 before c327fa4fca31415431202e063767a7ae342e19c6; fbe68ee87522f6eaa10f9076c0a7117e1613f2f7 before fc657ac0767c49839b3ef0b08dc0953ca30883f8; fbe68ee87522f6eaa10f9076c0a7117e1613f2f7 before 47fb3c2b4203556308e64354b3e78f2ce221d646; fbe68ee87522f6eaa10f9076c0a7117e1613f2f7 before f513f308cc4bdb4530d033431592ffbc29b7fca1; fbe68ee87522f6eaa10f9076c0a7117e1613f2f7 before 90fd4513315ca07da99cfd8549d3e553a7160f0d; fbe68ee87522f6eaa10f9076c0a7117e1613f2f7 before 2abfb19bbb81958714ad1d43ebeb65b30394184b; +3 more |
| CVE-2026-53216 | 9.8 | Jun 25 | net: mvpp2: limit XDP frame size to the RX buffer Affected: 07dd0a7aae7f72af7cec18909581c2bb570edddc before a3ee9231ccec6ec3be2de89c56f897055fd9eab1; 07dd0a7aae7f72af7cec18909581c2bb570edddc before ec8e1e5842bc0dbd4c272761f4db3651eecd0339; 07dd0a7aae7f72af7cec18909581c2bb570edddc before 3b8b0c3631b19faee53f0d15a49924129b063eec; 07dd0a7aae7f72af7cec18909581c2bb570edddc before 994bd2b58d2bd08aa97ec0836cc813cfcb00d749; 07dd0a7aae7f72af7cec18909581c2bb570edddc before 910617a4e67dbdd5fdb39d9dc6a51e491e1b2c3e; 07dd0a7aae7f72af7cec18909581c2bb570edddc before 9545cc5ef18ca22d031f2f47c157192460652359; +2 more |
| CVE-2026-53215 | 9.8 | Jun 25 | net: mvpp2: refill RX buffers before XDP or skb use Affected: 07dd0a7aae7f72af7cec18909581c2bb570edddc before a88b3293b556f4d8fba11db9a8061a6b0d3b69e6; 07dd0a7aae7f72af7cec18909581c2bb570edddc before a03cdcedb2cbcc42551dc3e4746929e93c5352d5; 07dd0a7aae7f72af7cec18909581c2bb570edddc before 580f92f27cb8724bcc4be98ee89890eab524a2ae; 07dd0a7aae7f72af7cec18909581c2bb570edddc before d0c8c4fbd22d260fe28530260656c5fb3c20ce84; 07dd0a7aae7f72af7cec18909581c2bb570edddc before 8a2126c5afe89f8ceeb60a3afb9f075b736194cd; 07dd0a7aae7f72af7cec18909581c2bb570edddc before 02e1b5c4d3b4c658b72c145427cded1bba613fc1; +6 more |
| CVE-2026-53176 | 9.8 | Jun 25 | IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN Affected: b8d26b3be8b33682cf163274ed07479a70554633 before 75ee6e4aa096aa9e7b2dd5c8ff98356e30aceefb; b8d26b3be8b33682cf163274ed07479a70554633 before e8a013c0c3ca2f6708341a56612a3f6d6921620a; b8d26b3be8b33682cf163274ed07479a70554633 before bd22740d7f14cb1c0289444cfd2c8d2938667c1d; b8d26b3be8b33682cf163274ed07479a70554633 before c1234229399f4af12c553b1b0ffd978eeba65548; b8d26b3be8b33682cf163274ed07479a70554633 before c5584e089b5af7b3bf8bd5e8ca0560cbf32b0a47; b8d26b3be8b33682cf163274ed07479a70554633 before df422fd273c96c2ee5beb80fc21adc8c70c29260; +3 more |
The 500 most important CVEs for this product (exploited first, then by severity)