Vulnerabilities

Linux Linux Kernel 7.1

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

817CVEs

CVE-2026-64033

RDMA/rtrs: Fix use-after-free in path file creation cleanup

Published 2026-07-19 · Analyzed

9.8EPSS 0.005

CVE-2026-46137

mptcp: pm: ADD_ADDR rtx: fix potential data-race

Published 2026-05-28 · Undergoing Analysis

9.8EPSS 0.005

CVE-2026-64061

netfs: Fix early put of sink folio in netfs_read_gaps()

Published 2026-07-19 · Analyzed

9.8EPSS 0.005

CVE-2026-64216

netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()

Published 2026-07-24 · Modified

9.8EPSS 0.005

CVE-2026-64035

igc: set tx buffer type for SMD frames

Published 2026-07-19 · Modified

9.8EPSS 0.004

CVE-2026-53246

sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing

Published 2026-06-25 · Modified

9.8EPSS 0.004

CVE-2026-64162

idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()

Published 2026-07-19 · Modified

9.8EPSS 0.004

CVE-2026-64232

block: recompute nr_integrity_segments in blk_insert_cloned_request

Published 2026-07-24 · Modified

9.8EPSS 0.004

CVE-2026-64037

wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled

Published 2026-07-19 · Modified

9.8EPSS 0.004

CVE-2026-64160

netfs: Fix potential for tearing in ->remote_i_size and ->zero_point

Published 2026-07-19 · Modified

9.8EPSS 0.004

CVE-2026-64091

batman-adv: tt: fix TOCTOU race for reported vlans

Published 2026-07-19 · Analyzed

9.8EPSS 0.004

CVE-2026-53355

net: rds: clear i_sends on setup unwind

Published 2026-07-01 · Analyzed

9.8EPSS 0.004

CVE-2026-53363

xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags()

Published 2026-07-10 · Analyzed

9.8EPSS 0.004

CVE-2026-64136

smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()

Published 2026-07-19 · Modified

9.8EPSS 0.004

CVE-2026-46135

nvmet-tcp: fix race between ICReq handling and queue teardown

Published 2026-05-28 · Undergoing Analysis

9.8EPSS 0.004

CVE-2026-52955

libceph: Fix potential out-of-bounds access in crush_decode()

Published 2026-06-24 · Modified

9.8EPSS 0.004

CVE-2026-64025

bpf, skmsg: fix verdict sk_data_ready racing with ktls rx

Published 2026-07-19 · Modified

9.8EPSS 0.004

CVE-2026-52989

nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers

Published 2026-06-24 · Modified

9.8EPSS 0.004

CVE-2026-31718

ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger

Published 2026-05-01 · Modified

9.8EPSS 0.004

CVE-2026-64068

netfs: Fix missing locking around retry adding new subreqs

Published 2026-07-19 · Modified

9.8EPSS 0.004

CVE-2026-53175

inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush

Published 2026-06-25 · Modified

9.8EPSS 0.003

CVE-2026-53260

tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().

Published 2026-06-25 · Modified

9.8EPSS 0.003

CVE-2026-64024

tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction

Published 2026-07-19 · Analyzed

9.4EPSS 0.003

CVE-2026-46316

KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry

Published 2026-06-09 · Modified

9.3EPSS 0.003

CVE-2026-63939

KVM: SEV: Compute the correct max length of the in-GHCB scratch area

Published 2026-07-19 · Analyzed

9.3EPSS 0.002

CVE-2026-64080

firmware: arm_ffa: Snapshot notifier callbacks under lock

Published 2026-07-19 · Analyzed

9.3EPSS 0.002

CVE-2026-63938

KVM: SEV: Check PSC request indices against the actual size of the buffer

Published 2026-07-19 · Analyzed

9.3EPSS 0.002

CVE-2026-63940

KVM: SEV: Ignore Port I/O requests of length '0'

Published 2026-07-19 · Modified

9.3EPSS 0.002

CVE-2026-64018

net: mana: validate rx_req_idx to prevent out-of-bounds array access

Published 2026-07-19 · Modified

9.3EPSS 0.001

CVE-2026-64034

net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer

Published 2026-07-19 · Modified

9.3EPSS 0.001

CVE-2026-52958

libceph: Fix potential out-of-bounds access in osdmap_decode()

Published 2026-06-24 · Modified

9.1EPSS 0.007

CVE-2026-53225

sctp: fix uninit-value in __sctp_rcv_asconf_lookup()

Published 2026-06-25 · Modified

9.1EPSS 0.006

CVE-2026-53224

sctp: validate embedded INIT chunk and address list lengths in cookie

Published 2026-06-25 · Modified

9.1EPSS 0.006

CVE-2026-46185

smb/client: fix out-of-bounds read in symlink_data()

Published 2026-05-28 · Modified

9.1EPSS 0.005

CVE-2026-53186

RDMA/srp: bound SRP_RSP sense copy by the received length

Published 2026-06-25 · Modified

9.1EPSS 0.005

CVE-2026-63992

tunnels: do not assume transport header in iptunnel_pmtud_check_icmp()

Published 2026-07-19 · Modified

9.1EPSS 0.005

CVE-2026-46155

smb/client: fix out-of-bounds read in smb2_compound_op()

Published 2026-05-28 · Modified

9.1EPSS 0.005

CVE-2026-46244

netfilter: nft_inner: Fix IPv6 inner_thoff desync

Published 2026-06-03 · Modified

9.1EPSS 0.004

CVE-2026-64106

KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits

Published 2026-07-19 · Modified

9.0EPSS 0.001

CVE-2026-43503

net: skbuff: propagate shared-frag marker through frag-transfer helpers

Published 2026-05-23 · Modified

8.8EPSS 0.020

Linux Linux Kernel 7.1

Security check