Vulnerabilities

Linux Kernel 6.19

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

360CVEs

CVE-2026-23344

crypto: ccp - Fix use-after-free on error path

Published 2026-03-25 · Analyzed

7.8EPSS 0.001

CVE-2026-23432

mshv: Fix use-after-free in mshv_map_user_memory error path

Published 2026-04-03 · Modified

7.8EPSS 0.001

CVE-2026-23262

gve: Fix stats report corruption on queue count change

Published 2026-03-18 · Analyzed

7.8EPSS 0.001

CVE-2026-23158

gpio: virtuser: fix UAF in configfs release path

Published 2026-02-14 · Analyzed

7.8EPSS 0.001

CVE-2026-23191

ALSA: aloop: Fix racy access at PCM trigger

Published 2026-02-14 · Modified

7.8EPSS 0.001

CVE-2026-23162

drm/xe/nvm: Fix double-free on aux add failure

Published 2026-02-14 · Analyzed

7.8EPSS 0.001

CVE-2026-23194

rust_binder: correctly handle FDA objects of length zero

Published 2026-02-14 · Analyzed

7.8EPSS 0.001

CVE-2026-23195

cgroup/dmem: avoid pool UAF

Published 2026-02-14 · Modified

7.8EPSS 0.001

CVE-2026-23103

ipvlan: Make the addrs_lock be per port

Published 2026-02-04 · Modified

7.8EPSS 0.001

CVE-2026-23014

perf: Ensure swevent hrtimer is properly destroyed

Published 2026-01-28 · Modified

7.8EPSS 0.001

CVE-2025-71074

functionfs: fix the open/removal races

Published 2026-01-13 · Modified

7.8EPSS 0.001

CVE-2025-71221

dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()

Published 2026-02-14 · Modified

7.8EPSS 0.001

CVE-2026-22998

nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec

Published 2026-01-25 · Modified

7.5EPSS 0.008

CVE-2026-31552

wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom

Published 2026-04-24 · Analyzed

7.5EPSS 0.007

CVE-2026-53026

NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg

Published 2026-06-24 · Analyzed

7.5EPSS 0.006

CVE-2026-23003

ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()

Published 2026-01-25 · Modified

7.5EPSS 0.005

CVE-2025-71120

SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf

Published 2026-01-14 · Modified

7.5EPSS 0.005

CVE-2026-22997

net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts

Published 2026-01-25 · Modified

7.5EPSS 0.005

CVE-2026-22991

libceph: make free_choose_arg_map() resilient to partial allocation

Published 2026-01-23 · Modified

7.5EPSS 0.004

CVE-2026-22990

libceph: replace overzealous BUG_ON in osdmap_apply_incremental()

Published 2026-01-23 · Modified

7.5EPSS 0.004

CVE-2026-23139

netfilter: nf_conncount: update last_gc only when GC has been performed

Published 2026-02-14 · Modified

7.5EPSS 0.003

CVE-2026-22992

libceph: return the handler error from mon_handle_auth_done()

Published 2026-01-23 · Modified

7.5EPSS 0.003

CVE-2025-71128

erspan: Initialize options_len before referencing options.

Published 2026-01-14 · Modified

7.5EPSS 0.003

CVE-2025-71080

ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT

Published 2026-01-13 · Modified

7.5EPSS 0.003

CVE-2025-71204

smb/server: fix refcount leak in parse_durable_handle_context()

Published 2026-02-14 · Modified

7.5EPSS 0.003

CVE-2026-23136

libceph: reset sparse-read state in osd_fault()

Published 2026-02-14 · Modified

7.5EPSS 0.003

CVE-2026-23148

nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference

Published 2026-02-14 · Modified

7.5EPSS 0.003

CVE-2025-71085

ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()

Published 2026-01-13 · Modified

7.5EPSS 0.003

CVE-2025-71146

netfilter: nf_conncount: fix leaked ct in error paths

Published 2026-01-23 · Modified

7.5EPSS 0.003

CVE-2025-71131

crypto: seqiv - Do not use req->iv after crypto_aead_encrypt

Published 2026-01-14 · Modified

7.5EPSS 0.003

CVE-2025-71150

ksmbd: Fix refcount leak when invalid session is found on session lookup

Published 2026-01-23 · Modified

7.5EPSS 0.003

CVE-2025-71132

smc91x: fix broken irq-context in PREEMPT_RT

Published 2026-01-14 · Modified

7.5EPSS 0.003

CVE-2025-71126

mptcp: avoid deadlock on fallback while reinjecting

Published 2026-01-14 · Modified

7.5EPSS 0.003

CVE-2026-23095

gue: Fix skb memleak with inner IP protocol 0.

Published 2026-02-04 · Modified

7.5EPSS 0.003

CVE-2025-71268

btrfs: fix reservation leak in some error paths when inserting inline extent

Published 2026-03-18 · Modified

7.5EPSS 0.002

CVE-2025-71269

btrfs: do not free data reservation in fallback from inline due to -ENOSPC

Published 2026-03-18 · Modified

7.5EPSS 0.002

CVE-2025-71090

nfsd: fix nfsd_file reference leak in nfsd4_add_rdaccess_to_wrdeleg()

Published 2026-01-13 · Modified

7.5EPSS 0.002

CVE-2026-23161

mm/shmem, swap: fix race of truncate and swap entry split

Published 2026-02-14 · Modified

7.3EPSS 0.001

CVE-2025-71127

wifi: mac80211: Discard Beacon frames to non-broadcast address

Published 2026-01-14 · Modified

7.1EPSS 0.002

CVE-2025-71109

MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits

Published 2026-01-14 · Modified

7.1EPSS 0.002

Linux Kernel 6.19

Security check