Vulnerabilities

Linux Linux Kernel 7.1

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

817CVEs

CVE-2026-63888

scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()

Published 2026-07-19 · Analyzed

9.8EPSS 0.008

CVE-2026-63887

scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf

Published 2026-07-19 · Analyzed

9.8EPSS 0.008

CVE-2026-53176

IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN

Published 2026-06-25 · Modified

9.8EPSS 0.008

CVE-2026-43501

ipv6: rpl: reserve mac_len headroom when recompressed SRH grows

Published 2026-05-21 · Modified

9.8EPSS 0.007

CVE-2026-63912

xfrm: esp: restore combined single-frag length gate

Published 2026-07-19 · Analyzed

9.8EPSS 0.007

CVE-2026-63922

ipv6: exthdrs: refresh nh after handling HAO option

Published 2026-07-19 · Analyzed

9.8EPSS 0.007

CVE-2026-63924

ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()

Published 2026-07-19 · Analyzed

9.8EPSS 0.007

CVE-2026-63886

scsi: target: iscsi: Validate CHAP_R length before base64 decode

Published 2026-07-19 · Analyzed

9.8EPSS 0.007

CVE-2026-64142

ksmbd: close durable scavenger races against m_fp_list lookups

Published 2026-07-19 · Analyzed

9.8EPSS 0.007

CVE-2026-53247

net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown

Published 2026-06-25 · Analyzed

9.8EPSS 0.007

CVE-2026-46195

smb: client: validate dacloffset before building DACL pointers

Published 2026-05-28 · Modified

9.8EPSS 0.007

CVE-2026-64016

ksmbd: fix durable reconnect error path file lifetime

Published 2026-07-19 · Analyzed

9.8EPSS 0.007

CVE-2026-53151

rxrpc: Fix the ACK parser to extract the SACK table for parsing

Published 2026-06-25 · Modified

9.8EPSS 0.007

CVE-2026-52924

sctp: purge outqueue on stale COOKIE-ECHO handling

Published 2026-06-24 · Modified

9.8EPSS 0.007

CVE-2026-64066

netfs: Fix netfs_read_to_pagecache() to pause on subreq failure

Published 2026-07-19 · Analyzed

9.8EPSS 0.006

CVE-2026-64150

netfilter: nft_inner: release local_lock before re-enabling softirqs

Published 2026-07-19 · Analyzed

9.8EPSS 0.006

CVE-2026-64069

netfs: Fix cancellation of a DIO and single read subrequests

Published 2026-07-19 · Analyzed

9.8EPSS 0.006

CVE-2026-52986

netfilter: nf_conntrack_sip: don't use simple_strtoul

Published 2026-06-24 · Modified

9.8EPSS 0.006

CVE-2026-64122

net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover

Published 2026-07-19 · Analyzed

9.8EPSS 0.006

CVE-2026-52914

batman-adv: fix fragment reassembly length accounting

Published 2026-06-24 · Modified

9.8EPSS 0.006

CVE-2026-53221

ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()

Published 2026-06-25 · Modified

9.8EPSS 0.006

CVE-2026-53228

ipv6: sit: reload inner IPv6 header after GSO offloads

Published 2026-06-25 · Modified

9.8EPSS 0.006

CVE-2026-64125

net: bcmgenet: keep RBUF EEE/PM disabled

Published 2026-07-19 · Analyzed

9.8EPSS 0.006

CVE-2026-64056

net: ethernet: cortina: Make RX SKB per-port

Published 2026-07-19 · Analyzed

9.8EPSS 0.006

CVE-2026-64089

batman-adv: tt: fix negative last_changeset_len

Published 2026-07-19 · Analyzed

9.8EPSS 0.006

CVE-2026-52982

net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()

Published 2026-06-24 · Modified

9.8EPSS 0.005

CVE-2026-64113

ixgbevf: fix use-after-free in VEPA multicast source pruning

Published 2026-07-19 · Modified

9.8EPSS 0.005

CVE-2026-64007

netfilter: synproxy: refresh tcphdr after skb_ensure_writable

Published 2026-07-19 · Modified

9.8EPSS 0.005

CVE-2026-64055

net: ethernet: cortina: Carry over frag counter

Published 2026-07-19 · Analyzed

9.8EPSS 0.005

CVE-2026-63994

tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()

Published 2026-07-19 · Modified

9.8EPSS 0.005

CVE-2026-63993

vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()

Published 2026-07-19 · Modified

9.8EPSS 0.005

CVE-2026-64047

net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring

Published 2026-07-19 · Modified

9.8EPSS 0.005

CVE-2026-64046

net: tls: prevent chain-after-chain in plain text SG

Published 2026-07-19 · Modified

9.8EPSS 0.005

CVE-2026-53216

net: mvpp2: limit XDP frame size to the RX buffer

Published 2026-06-25 · Analyzed

9.8EPSS 0.005

CVE-2026-53215

net: mvpp2: refill RX buffers before XDP or skb use

Published 2026-06-25 · Modified

9.8EPSS 0.005

CVE-2026-64067

netfs: Fix missing barriers when accessing stream->subrequests locklessly

Published 2026-07-19 · Modified

9.8EPSS 0.005

CVE-2026-64102

RDMA/siw: Reject MPA FPDU length underflow before signed receive math

Published 2026-07-19 · Modified

9.8EPSS 0.005

CVE-2026-52931

batman-adv: tp_meter: avoid use of uninit sender vars

Published 2026-06-24 · Modified

9.8EPSS 0.005

CVE-2026-64132

ipv6: ioam: refresh hdr pointer before ioam6_event()

Published 2026-07-19 · Analyzed

9.8EPSS 0.005

CVE-2026-64000

net: hsr: fix potential OOB access in supervision frame handling

Published 2026-07-19 · Modified

9.8EPSS 0.005

Linux Linux Kernel 7.1

Security check