Vulnerabilities

Linux Kernel 6.18

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

48CVEs

CVE-2026-43465

net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ

Published 2026-05-08 · Analyzed

9.8EPSS 0.008

CVE-2026-64364

HID: multitouch: fix out-of-bounds bit access on mt_io_flags

Published 2026-07-25 · Analyzed

8.8EPSS 0.004

CVE-2026-64176

wifi: iwlwifi: mvm: fix driver-set TX rates on old devices

Published 2026-07-19 · Analyzed

8.1EPSS 0.002

CVE-2025-71123

ext4: fix string copying in parse_apply_sb_mount_options()

Published 2026-01-14 · Modified

7.8EPSS 0.002

CVE-2025-40251

devlink: rate: Unset parent pointer in devl_rate_nodes_destroy

Published 2025-12-04 · Modified

7.8EPSS 0.002

CVE-2025-68340

team: Move team device type change at the end of team_port_add

Published 2025-12-23 · Modified

7.8EPSS 0.002

CVE-2025-71110

mm/slub: reset KASAN tag in defer_free() before accessing freed memory

Published 2026-01-14 · Analyzed

7.8EPSS 0.001

CVE-2025-71092

RDMA/bnxt_re: Fix OOB write in bnxt_re_copy_err_stats()

Published 2026-01-13 · Modified

7.8EPSS 0.001

CVE-2026-23322

ipmi: Fix use-after-free and list corruption on sender error

Published 2026-03-25 · Analyzed

7.8EPSS 0.001

CVE-2026-23387

pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe()

Published 2026-03-25 · Analyzed

7.8EPSS 0.001

CVE-2026-23014

perf: Ensure swevent hrtimer is properly destroyed

Published 2026-01-28 · Modified

7.8EPSS 0.001

CVE-2026-43464

net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ

Published 2026-05-08 · Analyzed

7.5EPSS 0.007

CVE-2026-43029

mptcp: fix soft lockup in mptcp_recvmsg()

Published 2026-05-01 · Analyzed

7.5EPSS 0.005

CVE-2025-40090

ksmbd: fix recursive locking in RPC handle list access

Published 2025-10-30 · Modified

7.5EPSS 0.003

CVE-2026-23414

tls: Purge async_hold in tls_decrypt_async_wait()

Published 2026-04-02 · Modified

7.5EPSS 0.002

CVE-2025-40164

usbnet: Fix using smp_processor_id() in preemptible code warnings

Published 2025-11-12 · Modified

5.5EPSS 0.002

CVE-2026-31567

PM: sleep: Drop spurious WARN_ON() from pm_restore_gfp_mask()

Published 2026-04-24 · Analyzed

5.5EPSS 0.002

CVE-2026-43372

net: dsa: microchip: Fix error path in PTP IRQ setup

Published 2026-05-08 · Analyzed

5.5EPSS 0.002

CVE-2026-43094

ixgbevf: add missing negotiate_features op to Hyper-V ops table

Published 2026-05-06 · Modified

5.5EPSS 0.002

CVE-2026-46142

net: libwx: fix VF illegal register access

Published 2026-05-28 · Undergoing Analysis

5.5EPSS 0.002

CVE-2026-43467

net/mlx5: Fix crash when moving to switchdev mode

Published 2026-05-08 · Analyzed

5.5EPSS 0.002

CVE-2026-31459

mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx() failure

Published 2026-04-22 · Analyzed

5.5EPSS 0.002

CVE-2026-31491

RDMA/irdma: Harden depth calculation functions

Published 2026-04-22 · Analyzed

5.5EPSS 0.002

CVE-2026-43396

drm/xe/sync: Fix user fence leak on alloc failure

Published 2026-05-08 · Analyzed

5.5EPSS 0.002

CVE-2026-31783

spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callback

Published 2026-05-01 · Analyzed

5.5EPSS 0.002

CVE-2026-64130

mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free

Published 2026-07-19 · Analyzed

5.5EPSS 0.002

CVE-2026-53367

selinux: fix avdcache auditing

Published 2026-07-19 · Analyzed

5.5EPSS 0.002

CVE-2025-68211

ksm: use range-walk function to jump over holes in scan_get_next_rmap_item

Published 2025-12-16 · Analyzed

5.5EPSS 0.001

CVE-2026-23016

inet: frags: drop fraglist conntrack references

Published 2026-01-31 · Analyzed

5.5EPSS 0.001

CVE-2025-71144

mptcp: ensure context reset on disconnect()

Published 2026-01-14 · Analyzed

5.5EPSS 0.001

CVE-2025-71103

drm/msm: adreno: fix deferencing ifpc_reglist when not declared

Published 2026-01-14 · Analyzed

5.5EPSS 0.001

CVE-2025-71106

fs: PM: Fix reverse check in filesystems_freeze_callback()

Published 2026-01-14 · Analyzed

5.5EPSS 0.001

CVE-2026-23360

nvme: fix admin queue leak on controller reset

Published 2026-03-25 · Analyzed

5.5EPSS 0.001

CVE-2025-71299

spi: cadence-quadspi: Parse DT for flashes with the rest of the DT parsing

Published 2026-05-08 · Analyzed

5.5EPSS 0.001

CVE-2026-23314

regulator: bq257xx: Fix device node reference leak in bq257xx_reg_dt_parse_gpio()

Published 2026-03-25 · Analyzed

5.5EPSS 0.001

CVE-2026-23329

libie: don't unroll if fwlog isn't supported

Published 2026-03-25 · Analyzed

5.5EPSS 0.001

CVE-2026-23349

HID: pidff: Fix condition effect bit clearing

Published 2026-03-25 · Analyzed

5.5EPSS 0.001

CVE-2026-23376

nvmet-fcloop: Check remoteport port_state before calling done callback

Published 2026-03-25 · Analyzed

5.5EPSS 0.001

CVE-2025-68223

drm/radeon: delete radeon_fence_process in is_signaled, no deadlock

Published 2025-12-16 · Analyzed

5.5EPSS 0.001

CVE-2026-23079

gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify()

Published 2026-02-04 · Analyzed

5.5EPSS 0.001

Linux Kernel 6.18

Security check