CVE-2022-50578, CVE-2023-54158, CVE-2023-54180 +53 more CVEs: linux kernel 2.6.24, 5.7; +4 more affected products

CVE-2022-50578

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2023-54158

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2023-54180

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68358

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-43299

Affected technology

linux kernel · from 3.13 (inclusive), before 6.19.6 (exclusive)
linux

Linux · 908960c6c0fb3b3ce3971dc0ca47b581d256b968 to before a35b38cb4b0dd08d7cc0bd4e400208c7aeba8a72, 908960c6c0fb3b3ce3971dc0ca47b581d256b968 to before da3f596073de1c3cbc99941f01296968a85c8c76, 908960c6c0fb3b3ce3971dc0ca47b581d256b968 to before 81e1ae665004b99a10686473d99f0a7cb6335f38, 908960c6c0fb3b3ce3971dc0ca47b581d256b968 to before f6df18c001e3dcebc08482d0adeacd0cfea08593, 908960c6c0fb3b3ce3971dc0ca47b581d256b968 to before 8ceaad6cd6e7fa5f73b0b2796a2e85d75d37e9f3
Linux

Linux · 3.13
Linux

Component: Not specified by the source
File: fs/btrfs/bio.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-63948

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-63983

Affected technology

Linux · 0afb51e72855971dba83b3c6b70c547c2d1161fd to before 1a298a514ce766c6d0c232991a390fec67af81ad, 0afb51e72855971dba83b3c6b70c547c2d1161fd to before 4ec3a8ca97394f17e73a4d8d4c79c1c78b322772, 0afb51e72855971dba83b3c6b70c547c2d1161fd to before cfb2616042767ab31260d4f39190c381bec8b12e, 0afb51e72855971dba83b3c6b70c547c2d1161fd to before 9552b11e3edabc97cfcd9f29103d5afbce7ae183
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: net/sched/sch_netem.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-64012

Affected technology

linux kernel · from 2.6.39 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.93 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.35 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.12 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

Linux · e13e02a3c68d899169c78d9a18689bd73491d59a to before e5ea51e5f3fbba41d50cd84a530f33bc1c8f4d57, e13e02a3c68d899169c78d9a18689bd73491d59a to before 1e70274d3b81de28973bcdbce40a512bcb181ff9, e13e02a3c68d899169c78d9a18689bd73491d59a to before e125f5980b730c67c92a30cf150ec8c3d6777318, e13e02a3c68d899169c78d9a18689bd73491d59a to before 6c153d97c100f5b282c424101d8ff63122306997, e13e02a3c68d899169c78d9a18689bd73491d59a to before 84bfbfc0c48731bcce74cdf4f9c497547ec525e0, e13e02a3c68d899169c78d9a18689bd73491d59a to before dbc560858da8b77dd9e4ef0cd93d421e0e4d7e0e, e13e02a3c68d899169c78d9a18689bd73491d59a to before 9ad3288632c859cf84183199832d822e7a70bdae, e13e02a3c68d899169c78d9a18689bd73491d59a to before 1b9bc71153b01dbde8045b9edede4240f4f5520e
Linux

Linux · 2.6.39
Linux

Component: Not specified by the source
File: net/sched/sch_sfb.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-64280

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-64422

Affected technology

linux kernel · from 2.6.24.1 (inclusive), before 5.10.261 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.212 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.178 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.145 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.96 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.39 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.1.4 (exclusive)
linux

linux kernel · 2.6.24
linux

linux kernel · 2.6.24 · update rc4
linux

linux kernel · 2.6.24 · update rc5
linux

linux kernel · 2.6.24 · update rc6
linux

linux kernel · 2.6.24 · update rc7
linux

linux kernel · 2.6.24 · update rc8
linux

Linux · 91cc17c0e5e5ada156a8d5787a2509d263ea6bbf to before f0d88a4cd03affff6c08adf6c63964e235aede43, 91cc17c0e5e5ada156a8d5787a2509d263ea6bbf to before 27ddf4486c7dbf5bdd393fa8bef6b67179796d98, 91cc17c0e5e5ada156a8d5787a2509d263ea6bbf to before 782708ca1ea1f68b8cbb5ea3a7f5f18d0000efae, 91cc17c0e5e5ada156a8d5787a2509d263ea6bbf to before e81f805824a8109504fce090641b17d135b48cd1, 91cc17c0e5e5ada156a8d5787a2509d263ea6bbf to before 99206ce2244f8a3ed64298d0667c9055845a5dc7, 91cc17c0e5e5ada156a8d5787a2509d263ea6bbf to before bbae351c0f32f7c200249e4aa6561b2b419dcf69, 91cc17c0e5e5ada156a8d5787a2509d263ea6bbf to before a094ac95d3b69adfa1676eb9c8eae6835d4f1671, 91cc17c0e5e5ada156a8d5787a2509d263ea6bbf to before efb8763d7bbb40cff4cc55a6b62c3095a038149c
Linux

Linux · 2.6.24
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ipv4/sysctl_net_ipv4.c, net/ipv4/tcp_output.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-64456

Affected technology

Linux · f7f510ec195781c857ab76366a3e1c59e1caae42 to before 3aa3e89cf80721c8d382b4c1a2b70a0449dad4a5, f7f510ec195781c857ab76366a3e1c59e1caae42 to before 63335e7b638ae70028ae285bb95153874a8bc852, f7f510ec195781c857ab76366a3e1c59e1caae42 to before 2e788948ff2a13358a303af112497a63201c5739, f7f510ec195781c857ab76366a3e1c59e1caae42 to before fde19b0d4eeabae042519313c843fe6f27d41e9d, f7f510ec195781c857ab76366a3e1c59e1caae42 to before 81dd21b5f0c299cc7b5bf84f04a61938559d20e6, f7f510ec195781c857ab76366a3e1c59e1caae42 to before 285e17c44e3873a73460f294acbd64018ff64385, f7f510ec195781c857ab76366a3e1c59e1caae42 to before 92d5736a62040ec1cfff23ea57e6599301690ad5, f7f510ec195781c857ab76366a3e1c59e1caae42 to before e3046eeada299f917a8ad883af4434bfb86556b1
Linux

Linux · 2.6.26
Linux

Component: Not specified by the source
File: drivers/char/hw_random/virtio-rng.c

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.7/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-64593

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-68106

Affected technology

Linux · d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 004d0453cfef16f056cb7b8bc04f69f19cf9df32, d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 00ee64910ecf748cc15b23bbcbea472c203ec1e8, d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 81c9b4921f62d1642b9d775524ae9240e521a5ed, d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 52f9a588296432accf2982f7d258192a37562f4f, d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before a00946b5ab7c25da5685ca9c58f50ff6f43c0fdf, d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before ffb33d466a68cea3e8a3dbed04d79037a3cbabd1, d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before be725ab23aa45c11a5afef3e2a9f6d8c084ae5dc, d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 0c01c811be47e6b146552dd59bfedbea8f09b8f4
Linux

Linux · 4.2
Linux

Component: Not specified by the source
File: drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-68233

Affected technology

Linux · c826a6e1064419f78855463cf29ce9e8b9d25bf4 to before cf55c6f1b62a89bf365c48bf731ccf69340e3a16, c826a6e1064419f78855463cf29ce9e8b9d25bf4 to before e9264ee59bd94970b80b7548f693bccf0d4628da, c826a6e1064419f78855463cf29ce9e8b9d25bf4 to before a38f2724eb93a78ba250b01e0caf3468df4d3956, c826a6e1064419f78855463cf29ce9e8b9d25bf4 to before bac4c1a9af690b8635c6924872075c41d8763ed9, c826a6e1064419f78855463cf29ce9e8b9d25bf4 to before 6273dd3ffb54ec581855b82ae77331b66028249c
Linux

Linux · 4.5
Linux

Component: Not specified by the source
File: drivers/gpu/drm/vc4/vc4_bo.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-68236

Affected technology

Linux · 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f to before 92b7c6e3a1546c6db868b07e93fa6fb950d1d3a0, 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f to before bf9c06c70f496f1ba4474caf95c69696c828340e, 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f to before 01ba5b36898d6258f584269537cc49e7b05cf7c6, 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f to before ba8bf1dcbb44773e7a0fd13b42925c644e0d5e76, 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f to before 5182e442e61397d446c36995b8f5676942d35b82, 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f to before 679f23f0a3606afcef1ffabd72222f00a54ad9e3, 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f to before 0676fecbb5242aa22c057e78326d6d6041db034c, 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f to before 9fa26b9eed6195bf840f39ac183b9a6237548755
Linux

Linux · 4.15
Linux

Component: Not specified by the source
File: drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-68303

Affected technology

Linux · c8b75bca92cbf064b9fa125fc74a85994452e935 to before 3be8dcc1a5854cf24cc332e0d6fc865c47ff49a1, c8b75bca92cbf064b9fa125fc74a85994452e935 to before 8f62aae059e06746a18a00af27179c3c0f17f4c7, c8b75bca92cbf064b9fa125fc74a85994452e935 to before 708688ec31ac6b35103ba364dc300a09930079d4, c8b75bca92cbf064b9fa125fc74a85994452e935 to before 261f0a3f0ac03248284f5116d3258f89c9642215, c8b75bca92cbf064b9fa125fc74a85994452e935 to before 7dc3680b7ffe01add3e9299fde8471d2dd53a8ae
Linux

Linux · 4.4
Linux

Component: Not specified by the source
File: drivers/gpu/drm/vc4/vc4_hvs.c, drivers/gpu/drm/vc4/vc4_v3d.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-68323

Affected technology

Linux · ef20cd4dd1633987bcf46ac34ace2c8af212361f to before 3ff6b534d20824cddab99c81ea3bd1144e635626, ef20cd4dd1633987bcf46ac34ace2c8af212361f to before 3ff143a884a19bfcf3aebd999b02274fe44f46f3, ef20cd4dd1633987bcf46ac34ace2c8af212361f to before 5d3cea7d41dc72073fea6f879815c9b57c3b330d, ef20cd4dd1633987bcf46ac34ace2c8af212361f to before d70c81001df9320d3445e664428a1d408b5ba896, ef20cd4dd1633987bcf46ac34ace2c8af212361f to before 350e592ff4e30e48ffb55e142d11a73e63f4869c
Linux

Linux · 4.9
Linux

Component: Not specified by the source
File: net/tipc/udp_media.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-68430

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-72015

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-72236

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-72319

Affected technology

Linux · f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e to before 19657b3a17b774ae4e2f2635b5ae8638c9344a40, f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e to before dac813101914c21219ac221a60a31a11bc90e7ec, f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e to before dd22f74a09e25ca298ced0a3763ef353242cb78d, f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e to before 9bc9b95aee2b2e3f1301a16a67ee504960402875, f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e to before a735f9964a3d9ed97daf9b08507f8b5bcafe6326, f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e to before 8f48cfe657409fb5c7ba0521b14da6d47546d9cf, f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e to before 92185d6f7819bc558939ae83de7b1abe90e3b5c2, f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e to before 3f7a535ff0fa627a0132803e4c2f903ceffcbc1c
Linux

Linux · 3.7
Linux

Component: Not specified by the source
File: net/netfilter/ipvs/ip_vs_core.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-72476

Affected technology

Linux · 0f571515c332e00b3515dbe0859ceaa30ab66e00 to before 444f96066937f3fdf0e79b53289cff223c7d638b, 0f571515c332e00b3515dbe0859ceaa30ab66e00 to before ab438a9efb9042c79d2f8db28a326d55feb8591f, 0f571515c332e00b3515dbe0859ceaa30ab66e00 to before 9bdc8dce4068dadbdf7cf5ad6d4983e2afffedce, 0f571515c332e00b3515dbe0859ceaa30ab66e00 to before 5876f38b67a309c00628942cb25679749b53b397, 0f571515c332e00b3515dbe0859ceaa30ab66e00 to before 3b0240483dc977dbec4f3bc7a5383d4691ecb625, 0f571515c332e00b3515dbe0859ceaa30ab66e00 to before 329ec20a86091d2a6e5b4fe507545e7d678a22a2, 0f571515c332e00b3515dbe0859ceaa30ab66e00 to before 0bc191050c3253da8ef4bfaf157c44efed6e22cd, 0f571515c332e00b3515dbe0859ceaa30ab66e00 to before 92f853f0645aebf1d05d333e97ab7c342ace1892
Linux

Linux · 2.6.30
Linux

Component: Not specified by the source
File: drivers/dma/dmaengine.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-72493

Affected technology

Linux · e9e4dd3267d0c5234c5c0f47440456b10875dec9 to before cbe10ea090ea9d6fa5ff50c9b44f2a86fe56f0b7, e9e4dd3267d0c5234c5c0f47440456b10875dec9 to before b422e3eff0edf0975de4883929adbed28f9d08bc, e9e4dd3267d0c5234c5c0f47440456b10875dec9 to before 2fface6e0bbd6314d1d9d071abf2c4d67548511c, e9e4dd3267d0c5234c5c0f47440456b10875dec9 to before 46762cefe7f4e5bffc1eb467810a7bbb02e461d7, 78b6803a1961369d0b8350ff1f99b7375bbd7a8f, b5d73d9cdd6be22795499890ea928a6f57ef829c, f6533fed1bfa842e391ee50f9a9c5e963c71e579, 2095ab2456da766174cda8bc105d7a7b1bc70e16, f1fdb184aefa8447560e3ea0e605171592ffee41, f75c8a3015422128ca150e81c730bc2a471b5f4a, 3.2.71 to before 3.3, 3.4.111 to before 3.5, 3.12.48 to before 3.13, 3.14.54 to before 3.15, 3.18.22 to before 3.19, 4.1.9 to before 4.2
Linux

Linux · 4.2
Linux

Component: Not specified by the source
File: net/core/dev.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.9/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-74408

Affected technology

Linux · fce041beb03f93c7a771f0b4b6c45bb71ef90901 to before fb11083db9d7d6fb8f98bbba1cbfcf3fb7b4bf54, fce041beb03f93c7a771f0b4b6c45bb71ef90901 to before 734db72d55ca578a344dfa33e30145032c074b25, fce041beb03f93c7a771f0b4b6c45bb71ef90901 to before f5931d06b45ed402572bfe5832fff15864ef5481, fce041beb03f93c7a771f0b4b6c45bb71ef90901 to before 46ca1451f61b598f45cb5259e066d305444d95fc, fce041beb03f93c7a771f0b4b6c45bb71ef90901 to before a9e055ac62cb3fcea262d4b687ec73eed82b3379, fce041beb03f93c7a771f0b4b6c45bb71ef90901 to before 5435fd3edcb11c7cc4002847c83e9a50b49284dc, fce041beb03f93c7a771f0b4b6c45bb71ef90901 to before 336d4c8cd9b1646060ee690c881d465dfc09c6c0, fce041beb03f93c7a771f0b4b6c45bb71ef90901 to before 7ce2f118a2389e8f0a64068c6fe7cc7d40639be0
Linux

Linux · 3.1
Linux

Component: Not specified by the source
File: drivers/net/wireless/ath/ath9k/xmit.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-74544

Affected technology

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 724c8edbacf1259988829cb9967f751222121d8a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 006a4598da9a6b02e0ddc3ca5042b97224774364, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9990cac513e8b191de2ee589051ea7ebf3cee940, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 313cb9ffc4101a885d791facf4b5ea3d5e06144d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before aef96eead2860cbfa371e4471d4f04412213b958
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: net/sched/cls_u32.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-74578

Affected technology

Linux · e870456d8e7c8d57c059ea479b5aadbb55ff4c3a to before bf09b0be8e851f050e98da702d247c14d81b591a, e870456d8e7c8d57c059ea479b5aadbb55ff4c3a to before 73dd3bf704ca6c20639de70c08e9a10bee904a95, e870456d8e7c8d57c059ea479b5aadbb55ff4c3a to before f1a87ca0843d74482402a206ea2dfb315ee9acbd, e870456d8e7c8d57c059ea479b5aadbb55ff4c3a to before 7b91e51d0eb7cbb07f7f086f9176bd93dbbc85dd, e870456d8e7c8d57c059ea479b5aadbb55ff4c3a to before 60eafc7b08c6689ea3ad39eff8d97aefc8a087c7, e870456d8e7c8d57c059ea479b5aadbb55ff4c3a to before d7860b682da55433b5da0591b0e4c1982ecd2689, e870456d8e7c8d57c059ea479b5aadbb55ff4c3a to before b05defc41b27c7d0c05c45f67bf5b91c28f93669, e870456d8e7c8d57c059ea479b5aadbb55ff4c3a to before fcc77d33a34cf271702e8daafb6c593e4626776d
Linux

Linux · 4.14
Linux

Component: Not specified by the source
File: crypto/algif_skcipher.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and integrity impact as high; availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-74583

Affected technology

Linux · 1109c00547fc66df45b9ff923544be4c1e1bec13 to before 7897198b26445b4009a057bda1986b94a99e5d5f, 1109c00547fc66df45b9ff923544be4c1e1bec13 to before 820f083c294ad6d319c02a7d43294f2ed2565139, 1109c00547fc66df45b9ff923544be4c1e1bec13 to before 5ec9001be6d0eb527251125632ec8fe88278897f, 1109c00547fc66df45b9ff923544be4c1e1bec13 to before b969984b2bdc85d721ce4047cd270cd37ec705a2, 1109c00547fc66df45b9ff923544be4c1e1bec13 to before a17f636c9330eac879822ce29f998e5abd1b72c1, 1109c00547fc66df45b9ff923544be4c1e1bec13 to before 0e7a8cf8895b06d07c7311f028eba16ad742b9bc, 1109c00547fc66df45b9ff923544be4c1e1bec13 to before ae9aff87025219005a2d16b4fe83d6f24643e50d, 1109c00547fc66df45b9ff923544be4c1e1bec13 to before 47d7f7051253bdc02b1d245d87e38f16d31a74df
Linux

Linux · 3.18
Linux

Component: Not specified by the source
File: net/sched/cls_route.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-74587

Affected technology

Linux · a000c01e60e40e15304ffe48fff051d17a7bea91 to before 10459b03e2d9ee12435e96f587de4d4cacdbf435, a000c01e60e40e15304ffe48fff051d17a7bea91 to before e1bb114e09372fd6e03387ced9ef566da336ed6c, a000c01e60e40e15304ffe48fff051d17a7bea91 to before 179676f0166230c80053a392303485b37c93dd33, a000c01e60e40e15304ffe48fff051d17a7bea91 to before dc67d528c2fa939cec7fe3bf7f3089c8d281ca3d, a000c01e60e40e15304ffe48fff051d17a7bea91 to before 618b5c6d049896fcfabb91afc072954c92cb2693, a000c01e60e40e15304ffe48fff051d17a7bea91 to before 07daf4f9750104960a1d60831b2353c0d41f35fb, a000c01e60e40e15304ffe48fff051d17a7bea91 to before d949992bc3f00027a2c755e860a11950c75f6073, a000c01e60e40e15304ffe48fff051d17a7bea91 to before 8c283e7b56adce00193837f3311b06662466fb21
Linux

Linux · 3.0
Linux

Component: Not specified by the source
File: net/sctp/associola.c, net/sctp/sm_statefuns.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-74653

Affected technology

Linux · e6e912c4964ce5976e508881207dfa96d5f856d7 to before cc325ce1c40a111824827532ac132afb3d1c342b, e6e912c4964ce5976e508881207dfa96d5f856d7 to before c321dc5172c8c66e21ffbeeb7a2ebb88ae6fd4c3, e6e912c4964ce5976e508881207dfa96d5f856d7 to before 3ce24bc4d115336218e59b7e286fd3a79f4fc4c6, e6e912c4964ce5976e508881207dfa96d5f856d7 to before 7795e8abedc86438cae0454602cbf9038b94bf38, e6e912c4964ce5976e508881207dfa96d5f856d7 to before 1423415471274abda87024967d7fe2206ceee0ea
Linux

Linux · 2.6.36
Linux

Component: Not specified by the source
File: drivers/tty/serial/8250/8250_of.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-74675

Affected technology

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b84fd400f80adf4d1c88fbce50ae1cf2f8119e65, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 38400673c9bfb39cfc87539e1a072087e98f4e4f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cab5a342f0589334046741006d8a280514f94235, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 38a0aa593ebc275aea6f79534d07f44e43768ce6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3f6b1d3fcfc26dc3fc85262f753439df93b055b4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b664592e9ba8c47c9e23408db7ba52eb9f946c8a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cc4a1a2ce0c58eafd477effb055863935260ddc1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e25d47a526939ad44b75f778b8a7500562b84fc1
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: drivers/tty/vt/keyboard.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-80977

Affected technology

Linux · 25121173f7b1e4ac3fc692df6e7b8c52ec36abba to before 6493165034bca14033bf49c9cec7b45e97a91497, 25121173f7b1e4ac3fc692df6e7b8c52ec36abba to before b4452349dcf4d561e13be768d5d278de58248930, 25121173f7b1e4ac3fc692df6e7b8c52ec36abba to before 363c4252ffc473a0203e91b83ede5519dfb8bd07, 25121173f7b1e4ac3fc692df6e7b8c52ec36abba to before 6ec22afc82a3cae07ade0a6ec361ae2532128ff5, 25121173f7b1e4ac3fc692df6e7b8c52ec36abba to before 15aa81b390d401abf4b8211042470e9e92e3b7fb, 25121173f7b1e4ac3fc692df6e7b8c52ec36abba to before 288f9970670841044ab030104fa6b6ed159949d0, 25121173f7b1e4ac3fc692df6e7b8c52ec36abba to before 0370da114a9bc044e248b85c6809d1b5e0c1f7f9, 25121173f7b1e4ac3fc692df6e7b8c52ec36abba to before f66bdb1cc0fcd227a062378f8be0b5873aa5600a
Linux

Linux · 3.8
Linux

Component: Not specified by the source
File: net/core/skbuff.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-89542

Affected technology

Linux · de9c17eb4a912c9028f7b470eb80815144883b26 to before 299d281c7225ded15b28cb861a98d818d82787fc, de9c17eb4a912c9028f7b470eb80815144883b26 to before 84ddbc8d084c0251d534f14f5d1a7da05be56404, de9c17eb4a912c9028f7b470eb80815144883b26 to before 075d7cfc4df8c54cb202ba8b28420370c03ba9b6, de9c17eb4a912c9028f7b470eb80815144883b26 to before f2591660e0eb263c9415bf0d0bb1b111e62df7a4, de9c17eb4a912c9028f7b470eb80815144883b26 to before dddcb0f4b7e27fac16a78ea9a1c8ec2e8a241087, de9c17eb4a912c9028f7b470eb80815144883b26 to before 806584a4b67a7233870c33e5b8f872e76dd02988, de9c17eb4a912c9028f7b470eb80815144883b26 to before a7894e10572d53eb10109b8d07459cc8d3435811, de9c17eb4a912c9028f7b470eb80815144883b26 to before 6959297aaa9572783d620a226d73c3fb94494888
Linux

Linux · 2.6.35
Linux

Component: Not specified by the source
File: net/sunrpc/auth_gss/gss_krb5_wrap.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-89726

Affected technology

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 04ae68af4107600120c3c41c94268f43bc350d48, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2e5a70a175f0c74e7238b013a96c4eabc3002934, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3ada20e110bf3245edb0a3bcddadc33d0f142f8d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 60c74f42f5abddb85dd919b4448d5474e65dbe76, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 709eb41adaf78d59d4579a13a898125919b69bcc, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7d658da725ea81c91f73087547b97e7ced82d62b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1b0dc3cbb8630f0b5cb34d848628225920a904be, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cec0d03fe785380540dc1b4d07c80f67ae2ffc78
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: lib/ucs2_string.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and availability impact as low; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-89778

Affected technology

Linux · 59bc055211b8d266ab6089158058bf8268e02006 to before 8b994ac5778a725982fd6a8a3afcaa068d4a93e3, 59bc055211b8d266ab6089158058bf8268e02006 to before ad3249cdf9d4ba34bb8b1ff3956a4020fdfb5b0a, 59bc055211b8d266ab6089158058bf8268e02006 to before 85904076cece72ee3194646ad7ac8e6659d999aa, 59bc055211b8d266ab6089158058bf8268e02006 to before f03425dcbe04aec3c27b9917e97d7d23a2908dda, 59bc055211b8d266ab6089158058bf8268e02006 to before cd616aa0449a772a6956abf03358f0ff31720580, 59bc055211b8d266ab6089158058bf8268e02006 to before 9c6eace8d07e90f038c89eb3b756d65a7e259d48, 59bc055211b8d266ab6089158058bf8268e02006 to before 68d4d3e78150c7ed7d1195af63ad1e6ace30c661
Linux

Linux · 2.6.33
Linux

Component: Not specified by the source
File: fs/isofs/compress.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-89987

Affected technology

Linux · b5072380eb619786990cd9eab3ade05d09ccd89e to before 6e904f9e8cb0e39f60e1cdbea679f89346a563c2, b5072380eb619786990cd9eab3ade05d09ccd89e to before fd720d3906877b3d2118cd480027e4bc6648f0c5, b5072380eb619786990cd9eab3ade05d09ccd89e to before effe3cc6d4fdd407457eb30f7b0ef094393f0d64, b5072380eb619786990cd9eab3ade05d09ccd89e to before 9435cddf1378d149d826bd7bd1448a44bf96868d, b5072380eb619786990cd9eab3ade05d09ccd89e to before fe6cf984939d8e12cb33a99673c8d026c5135e68
Linux

Linux · 4.8
Linux

Component: Not specified by the source
File: mm/huge_memory.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-90011

Affected technology

Linux · e48354ce078c079996f89d715dfa44814b4eba01 to before 5fac79f248c37774d1dd761406f83d25ca6ff8e4, e48354ce078c079996f89d715dfa44814b4eba01 to before 6ddddcad436d8e6e619204d3c848147ff2f5bf1e, e48354ce078c079996f89d715dfa44814b4eba01 to before b19dc17ed963ac36c0db4b52a1803fb11169f91f, e48354ce078c079996f89d715dfa44814b4eba01 to before 6b589ef9d5f6cdc70d2b4f269ca6cf26b5ebb076, e48354ce078c079996f89d715dfa44814b4eba01 to before eb9dadf4d552ebe10644871c5189286552aa48f5, e48354ce078c079996f89d715dfa44814b4eba01 to before 1624bff4c5118ad494d50ad94d44f22064667a7f, e48354ce078c079996f89d715dfa44814b4eba01 to before 3ddf3ea291a0ef2ea93b82e158960ac2cc42302b, e48354ce078c079996f89d715dfa44814b4eba01 to before f4825922d2fb371e2b969697d792077f1b62b62c
Linux

Linux · 3.1
Linux

Component: Not specified by the source
File: drivers/target/iscsi/iscsi_target_login.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-90283

Affected technology

Linux · 7ca02d0ae586fe7df59632966a64f3f1a756ef05 to before f2d6cea221d777fab3ba18f805ba4c17c90e0b8b, 7ca02d0ae586fe7df59632966a64f3f1a756ef05 to before 91c4f3a87862fd86594d5945512decbfa0b1d13d, 7ca02d0ae586fe7df59632966a64f3f1a756ef05 to before 04f0354a4abf6793aa5b3f32e2b019ab206f344d, 7ca02d0ae586fe7df59632966a64f3f1a756ef05 to before 5b7fc7a1ce2a5f2cd8ed80a883157c7108074e0b, 7ca02d0ae586fe7df59632966a64f3f1a756ef05 to before 1d8be4ee81e73fcc52e58f47842d9a2277cfeaaa, 7ca02d0ae586fe7df59632966a64f3f1a756ef05 to before dfe848cadfde4179a0691da34f4bed36ff7185b5, 7ca02d0ae586fe7df59632966a64f3f1a756ef05 to before dc2bd517ac0bce4ec7498644bd16b6db502df8e2, 7ca02d0ae586fe7df59632966a64f3f1a756ef05 to before 308ab73e97c87bd0e142b11758faab7f88d82854
Linux

Linux · 4.1
Linux

Component: Not specified by the source
File: fs/hugetlbfs/inode.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-93252

Affected technology

Linux · 16c8d569f5704a84164f30ff01b29879f3438065 to before 4936d4464d1ae10b5fbba64374085a0dcc060560, 16c8d569f5704a84164f30ff01b29879f3438065 to before caf3056936fb8b5ce92e419cf8b246ce9c437343, 16c8d569f5704a84164f30ff01b29879f3438065 to before 5b7b3c50c39ad0dc27e7418981e01c4183273f89, 16c8d569f5704a84164f30ff01b29879f3438065 to before 8d88f52fbbbcc18adf4091a955511d0cf605bf11, 16c8d569f5704a84164f30ff01b29879f3438065 to before 8931403ee3dcfe8a24a5267efec9d9460ab7a1b5, 16c8d569f5704a84164f30ff01b29879f3438065 to before f8747d81aa6d3efe3ee339a9d912ff3ca6e4d758, 16c8d569f5704a84164f30ff01b29879f3438065 to before 1222f7a3183b35c0c566899fdaead5c7c4043076, 16c8d569f5704a84164f30ff01b29879f3438065 to before bd7c05fb4a4776dff5a87b19008d28458647d15d, 15ac59a84750b3afc0a2b6f2636c4f7e6cbd6d5e, b35bb8a41795caa05e09c3aacf7d78f1f20bac04, 1d5fdc1307eeb04b334c5dc23e11dbd6068d90eb, a66174eb4a149b7919d174d9a7ce6ad9909c5ee2, 3.18.111 to before 3.19, 4.4.134 to before 4.5, 4.9.104 to before 4.10, 4.14.37 to before 4.15
Linux

Linux · 4.16
Linux

Component: Not specified by the source
File: fs/ocfs2/acl.c, fs/ocfs2/acl.h, fs/ocfs2/namei.c, fs/ocfs2/xattr.c, fs/ocfs2/xattr.h

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-93287

Affected technology

Linux · 4710317891e4824ce1510a6b5066abbd3e917750 to before 856dffcc097b3d8ed45a643ebda07cb92968cb33, 4710317891e4824ce1510a6b5066abbd3e917750 to before 356875e33f2c6d2061a02c9dec1a1e639d265a55, 4710317891e4824ce1510a6b5066abbd3e917750 to before 72ca5e0b8b7a62615758f8871c34d61616c2dc8b, 4710317891e4824ce1510a6b5066abbd3e917750 to before df077253f6405d67ad087538e495ef32a05717b7, 4710317891e4824ce1510a6b5066abbd3e917750 to before f09edffba97d37b1fdff5f818a9a45f8a98ac171, 4710317891e4824ce1510a6b5066abbd3e917750 to before c4b478bc50b7ca9865e237909941253a0f7111a2, 4710317891e4824ce1510a6b5066abbd3e917750 to before 3051cd060fa496df42954291fa2306ed2eab4ecc
Linux

Linux · 2.6.33
Linux

Component: Not specified by the source
File: drivers/i2c/i2c-core-smbus.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-93800

Affected technology

Linux · f32b84d7c977e1906a4781b93b3c93090b6cd675 to before 5a247097c5f94b51ffc991b444d998ad6e85875f, 592fbcd50c99b8adf999a2a54f9245caff333139 to before 6372dd394ea907cd85a7a8063db320ec73dfaed0, 592fbcd50c99b8adf999a2a54f9245caff333139 to before 9f599d120b2b79d2d937c3935b7cdf2697514283, 592fbcd50c99b8adf999a2a54f9245caff333139 to before a01837ae174a2a968c245a30e6dd010f50eaf05d, 592fbcd50c99b8adf999a2a54f9245caff333139 to before 97a540d72ebcb21853d11f2a56782fe377f358e7, 592fbcd50c99b8adf999a2a54f9245caff333139 to before fda1b6636ff1846f00643e791099db5564b547d9, 592fbcd50c99b8adf999a2a54f9245caff333139 to before 83201804efa4a5168be754e1dfc9b2faee760cac, aa18bc1ff8a51f082d5b3b6d07693797637b4028, 4cb0aea2e250eee35ccfac5f5395cd8f3238a9e5, 5.10.36 to before 5.10.271, 5.11.20 to before 5.12, 5.12.3 to before 5.13
Linux

Linux · 5.13
Linux

Component: Not specified by the source
File: fs/btrfs/relocation.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · High privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-93820

Affected technology

Linux · 073d3dbe9a7c38888d8dafe09df421b174a6cffa to before 025308e7c9cd10112b73558c9f63f8f7285fa726, 073d3dbe9a7c38888d8dafe09df421b174a6cffa to before ac47d42901859edb504a2890a3a5709c86dbc0c3, 073d3dbe9a7c38888d8dafe09df421b174a6cffa to before eaeb9bed3641741aceb0add84a97023bed61e748, 073d3dbe9a7c38888d8dafe09df421b174a6cffa to before 5d566ac3a055f0a6f4890ff0af7cfd7e8ed89652, 073d3dbe9a7c38888d8dafe09df421b174a6cffa to before ebca7e5947720e9d4bd918af3e17720270c50744, 073d3dbe9a7c38888d8dafe09df421b174a6cffa to before 9b19201f57d87c4d0777621275dbc59bff41b7f2, 073d3dbe9a7c38888d8dafe09df421b174a6cffa to before 0bd9611587bb494c33566d825fe34b2705e4b167
Linux

Linux · 4.12
Linux

Component: Not specified by the source
File: drivers/pci/controller/pcie-rockchip-host.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · High privileges required · No user interaction required

What an attacker can do

A local attacker with high privileges could trigger a use-after-free error. Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.

CVE-2026-93822

Affected technology

Linux · 1fb37a8178da007cad75f48e2355b9dcb0711e06 to before e7d9d7be2c1f8d434032983bc86a05805178c9c9, 1fb37a8178da007cad75f48e2355b9dcb0711e06 to before 1618e374ba4c7117c04662422ef985e9d64e2466, 1fb37a8178da007cad75f48e2355b9dcb0711e06 to before 4e1d34d824050a4e700ca442f815a95d9f214b83, 1fb37a8178da007cad75f48e2355b9dcb0711e06 to before aaf4153caed9f1760b9f266612b0599bfd97150c, 1fb37a8178da007cad75f48e2355b9dcb0711e06 to before bd2bf1e0d973c93fc1637b90cbb9a5a5f6884bd3, 1fb37a8178da007cad75f48e2355b9dcb0711e06 to before ee06aafc2d760a4ee023e0b2e95ce1ec71bddc6c, 1fb37a8178da007cad75f48e2355b9dcb0711e06 to before a6a64e150f12ad5391e0a0d60f6a3d119b06ce50
Linux

Linux · 4.1
Linux

Component: Not specified by the source
File: drivers/pci/controller/pcie-iproc.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · High privileges required · No user interaction required

What an attacker can do

A local attacker with high privileges could trigger a use-after-free error. Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not state a further attacker outcome.

CVE-2026-97416

Affected technology

Linux · a6f93c71d412ba8ed743152c3a54ad0b78dcd9c7 to before 9f37a6d6ae9e998232e2ba091ab4999cdf967e1b, a6f93c71d412ba8ed743152c3a54ad0b78dcd9c7 to before e479236a8f4d85c4fb6b3f7c2556c21f583e2bf2, a6f93c71d412ba8ed743152c3a54ad0b78dcd9c7 to before 322f891b4d4fe64acb3351a0ffa62a7fa5ba7256, a6f93c71d412ba8ed743152c3a54ad0b78dcd9c7 to before 81a664ed8b1a44c76b204c4bd0d751317a02c5cd, a6f93c71d412ba8ed743152c3a54ad0b78dcd9c7 to before 9740dd0c17a4be8cc47a06c5ca5293471a7e286e, a6f93c71d412ba8ed743152c3a54ad0b78dcd9c7 to before 59f75e0c8724d4adebc08c7dd3ff2358b80c21f7, a6f93c71d412ba8ed743152c3a54ad0b78dcd9c7 to before 18d32b0013efba19f7ad3e5b08d7aee813d604a6
Linux

Linux · 4.16
Linux

Component: Not specified by the source
File: fs/btrfs/volumes.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · High privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-97491

Affected technology

Linux · ec16227e14141e4fd7ae76354c09dadfe2449d9e to before b3621acf640e32dcb986d9b3767f2387f29dad05, ec16227e14141e4fd7ae76354c09dadfe2449d9e to before ac0bc28da5150c4fa81a76172fff5ec70f2063eb, ec16227e14141e4fd7ae76354c09dadfe2449d9e to before 934a6381c79d815680c955d676791322e020bfda, ec16227e14141e4fd7ae76354c09dadfe2449d9e to before 07a348d48e589b91a0d5a5cfa0de137cc703fabf, ec16227e14141e4fd7ae76354c09dadfe2449d9e to before db22e77df66353f1299153f6fa9620a2825bc63f, ec16227e14141e4fd7ae76354c09dadfe2449d9e to before caa51e6da596ed6008cd06605a725568b8e7be4e, ec16227e14141e4fd7ae76354c09dadfe2449d9e to before 16f48efaeb6991193fb7775c577f06f5b20b0c90
Linux

Linux · 2.6.30
Linux

Component: Not specified by the source
File: net/rds/ib_cm.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · High privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-98010

Affected technology

Linux · 13d2a1d2b032de08d7dcab6a1edcd47802681f96 to before e2297bbf9cf6ece86f1d1f8c683517a994990f9e, 13d2a1d2b032de08d7dcab6a1edcd47802681f96 to before 560794ee6e040b6e1c4ac2b3c8909f341a4596ee, 13d2a1d2b032de08d7dcab6a1edcd47802681f96 to before 23fea7e6736b2e1c6f6f2f05cccf33d36834da73, 13d2a1d2b032de08d7dcab6a1edcd47802681f96 to before b464affe9f9dfe41ac48930c376e3fb8596651b0, 13d2a1d2b032de08d7dcab6a1edcd47802681f96 to before dc8b374214ef5bba4882bbd95b361e42555cfc0d, 13d2a1d2b032de08d7dcab6a1edcd47802681f96 to before d43cded350fe1218493ad3d37a276aff14108ae6, 13d2a1d2b032de08d7dcab6a1edcd47802681f96 to before 8f756ae1c87414ce9cc21b30e6e4c036d6e9e80b, 13d2a1d2b032de08d7dcab6a1edcd47802681f96 to before 8382abec0f1568d0a5590d75a3df92f23fcf5196
Linux

Linux · 2.6.29
Linux

Component: Not specified by the source
File: net/sched/sch_drr.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-98077

Affected technology

Linux · ea45f12a2766dae54e5426a23e8f4bafdbe2782e to before 9ae0a87e6f513293677fe286729fbae34d592215, ea45f12a2766dae54e5426a23e8f4bafdbe2782e to before b6277622b7323000895b674321c9a1f060553188, ea45f12a2766dae54e5426a23e8f4bafdbe2782e to before 0cfb96a118c5c6d46d7a1cfdfa18355ad734ca79, ea45f12a2766dae54e5426a23e8f4bafdbe2782e to before c6beb08b1a9fdb96795816d8329ed75dd785d48e, ea45f12a2766dae54e5426a23e8f4bafdbe2782e to before 60c012b2d05e1558b0f30ea3f15a2c3ca2f24d94, ea45f12a2766dae54e5426a23e8f4bafdbe2782e to before 4be8380e3af008f418f97992c06f23be649a430d, ea45f12a2766dae54e5426a23e8f4bafdbe2782e to before 4a30aa2ba007db18210dd52219ecbd5528c03523, ea45f12a2766dae54e5426a23e8f4bafdbe2782e to before e8f8231824b5815f57ce62cba116e511b10196de
Linux

Linux · 2.6.26
Linux

Component: Not specified by the source
File: net/netfilter/nf_conntrack_sip.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-98130

Affected technology

linux kernel · from 4.19.126 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.44 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.6.16 (inclusive), before 5.7 (exclusive)
linux

linux kernel · from 5.7.1 (inclusive), before 5.10.271 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.222 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.189 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.158 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.111 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.53 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.2.7 (exclusive)
linux

linux kernel · 5.7
linux

linux kernel · 5.7 · update rc7
linux

linux kernel · 7.3 · update rc1
linux

Linux · 20a785aa52c82246055a089e55df9dac47d67da1 to before cbf2df9aac4202f9fb0b361a7fe8c79b29fad92c, 20a785aa52c82246055a089e55df9dac47d67da1 to before 3205a20f837f5b1f009427ac3d9f706bf8a6fbec, 20a785aa52c82246055a089e55df9dac47d67da1 to before 755d70ca845fd9b87c7b338ae6ae832b08cd0005, 20a785aa52c82246055a089e55df9dac47d67da1 to before 09e7f9290d63178f56095d5c18fb9f9470153db5, 20a785aa52c82246055a089e55df9dac47d67da1 to before e42ba56281ca3ae2dcb3558bebee9a1c9a4831d9, 20a785aa52c82246055a089e55df9dac47d67da1 to before 00b841bac10230c557be6b38efc48508198fe23e, 20a785aa52c82246055a089e55df9dac47d67da1 to before 3d698d1e6c8bc41e3e1707777a016f1bdd07842d, 20a785aa52c82246055a089e55df9dac47d67da1 to before 2188569e7e1b0bc3f3b557dc97ab7a02befc11c8, 9c0a4652f750afe3b4468cbcd9335b244ce2facd, 70989e501fbce502198d82da88358ce453575a05, 085bb270b4b1168c93afb37bbafc881207d15443, 4.19.126 to before 4.20, 5.4.44 to before 5.5, 5.6.16 to before 5.7
Linux

Linux · 5.7
Linux

Component: Not specified by the source
File: net/sctp/sm_sideeffect.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

A remote attacker can trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 8.1/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.

CVE-2026-98252

Affected technology

Linux · 30dc5e63d6a5ad24894b5512d10b228d73645a44 to before 52c13c63bb3662c108244e7447055e30bf40244e, 30dc5e63d6a5ad24894b5512d10b228d73645a44 to before 8a91609032d47e77bcb37bc8f6e88d89340d2709, 30dc5e63d6a5ad24894b5512d10b228d73645a44 to before ce8a379598bd4058081416abea4279fd05a95374, 30dc5e63d6a5ad24894b5512d10b228d73645a44 to before 2fbac8a56004b6ce54fbfe845d4b25da6e0b55e8, 30dc5e63d6a5ad24894b5512d10b228d73645a44 to before 88e429a4e9bac3d2138011c5ca06254331f2587f, 30dc5e63d6a5ad24894b5512d10b228d73645a44 to before e15eb536be4f646ce683d2867572b2200be877f7, 30dc5e63d6a5ad24894b5512d10b228d73645a44 to before 117871cdb8927542abd7b65ce5995bf0265a8c05, 30dc5e63d6a5ad24894b5512d10b228d73645a44 to before 33fb59da49c4c3f5c2ec9f9d4447a56857a02c02
Linux

Linux · 3.16
Linux

Component: Not specified by the source
File: drivers/infiniband/core/iwpm_util.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-98269

Affected technology

Linux · 2aaa66558172b017f36bf38ae69372813dedee9d to before 2605eb9ba3bbd4c9f455cfe6b85bd28a1da7067d, 2aaa66558172b017f36bf38ae69372813dedee9d to before 834a3b5c5f1ec0df48c1a6208f9989f4ffdaa0b6, 2aaa66558172b017f36bf38ae69372813dedee9d to before 9588850bfa75c78ce73c2f6f72544d19d2e9beb6, 2aaa66558172b017f36bf38ae69372813dedee9d to before 36c68dc909845c049e0286d229bc502947239452, 2aaa66558172b017f36bf38ae69372813dedee9d to before 97fcd34aa9fd73cefe3120ac9a82ca9d7763922f
Linux

Linux · 3.7
Linux

Component: Not specified by the source
File: fs/btrfs/file.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-98347

Affected technology

Linux · 344bacca8cd811809fc33a249f2738ab757d327f to before f973769fb7cb33ba0d4a64b7dcfee0cabaead938, 344bacca8cd811809fc33a249f2738ab757d327f to before b72f38929f4b5aa83161fd3b22a7327207e51ec5, 344bacca8cd811809fc33a249f2738ab757d327f to before 1b11e4b55b41d9e69a8e8d07622614202e2eaca9, 344bacca8cd811809fc33a249f2738ab757d327f to before 326f7d34bd7e64de535566b65c0533b640df5a81, 344bacca8cd811809fc33a249f2738ab757d327f to before 5ad925d45f28464a5e043c9620880bb6a030da89, 344bacca8cd811809fc33a249f2738ab757d327f to before 188b334a6db36a8e0bfaaf59bc4020639a0f3aad, 344bacca8cd811809fc33a249f2738ab757d327f to before 1ff3add37c329704ec46181b4ae4f00f9f16ce6f, 344bacca8cd811809fc33a249f2738ab757d327f to before 9a141d3dc869d18b2eab35e999f4790a9b84e40f, a289c65ca49d2680a3d797e633e57a45573d1df2, b81459c78935e4579a577b2366c5f8878d3c7fee, 8a9d8dc9ce83a90bfbbe69181acc4cf1beff46f5, dfe809702a11bd7fb91c882fb55620e39ce22109, 87160fb51bc343793cc8f5f031a87f1a35aecb82, 749fd55dd210f9676f0d445a6efaaa3bec65174a, 3.2.84 to before 3.3, 3.10.105 to before 3.11, 3.12.65 to before 3.13, 3.16.39 to before 3.17, 4.4.24 to before 4.5, 4.7.7 to before 4.8
Linux

Linux · 4.8
Linux

Component: Not specified by the source
File: drivers/infiniband/ulp/ipoib/ipoib.h, drivers/infiniband/ulp/ipoib/ipoib_ib.c, drivers/infiniband/ulp/ipoib/ipoib_multicast.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-98354

Affected technology

Linux · 47a2b338fe63200d716d2e24131cdb49f17c77da to before 4617c9a856188674dddb0ca66979746d07688579, 47a2b338fe63200d716d2e24131cdb49f17c77da to before 8e2036fb47a5b152d53eadbd35abf311bd34cc7f, 47a2b338fe63200d716d2e24131cdb49f17c77da to before bad289e42f512646a988f278f536d21547df73f1, 47a2b338fe63200d716d2e24131cdb49f17c77da to before 752b30e9d339008e5ce7eed412e9446078916129, 47a2b338fe63200d716d2e24131cdb49f17c77da to before 39c4ea72a40503e102ae07e6776005f96ca078a6, 47a2b338fe63200d716d2e24131cdb49f17c77da to before 5091e25ec503f7fc02723ca435226467b68caac7, 47a2b338fe63200d716d2e24131cdb49f17c77da to before c0d8df85db146d6275e226cb950023be69dd6c77, 47a2b338fe63200d716d2e24131cdb49f17c77da to before 3476c28c9addfa253f505e6bd87f1f5598b961d0
Linux

Linux · 4.13
Linux

Component: Not specified by the source
File: drivers/infiniband/core/mad.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-98357

Affected technology

Linux · b8d26b3be8b33682cf163274ed07479a70554633 to before f5613acbe2e346d5c466ef0bd264fca936b69f82, b8d26b3be8b33682cf163274ed07479a70554633 to before ccdb1523f12bc8a9646de65055d1aafed9e9bcc6, b8d26b3be8b33682cf163274ed07479a70554633 to before 0e230917670c6e6fe3243abfa11299fcbe05b1f4, b8d26b3be8b33682cf163274ed07479a70554633 to before 505b242d9351690d1385bbe508ab4666f60363ce, b8d26b3be8b33682cf163274ed07479a70554633 to before 7edb8a88d6c76237c8b4435765bee1009e26a50a, b8d26b3be8b33682cf163274ed07479a70554633 to before b96b8b3e41c308f606ffd10cfef1a7b9f97414cd, b8d26b3be8b33682cf163274ed07479a70554633 to before 7908fbc597a694bbd99bfb59ece73bc3daded68e, b8d26b3be8b33682cf163274ed07479a70554633 to before a8fe3dfce8c0d8a76dc3d8486a5bff5feebe156f
Linux

Linux · 3.10
Linux

Component: Not specified by the source
File: drivers/infiniband/ulp/isert/ib_isert.c, drivers/infiniband/ulp/isert/ib_isert.h

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.1/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-98358

Affected technology

Linux · 59caaed7a72a0e3750dfb84636dae6b781559310 to before 198e4db9add54a50cce60a5d80b8f0ee5456b65a, 59caaed7a72a0e3750dfb84636dae6b781559310 to before b9e37452915feaa8422af87dea5d0c16a7d1ff13, 59caaed7a72a0e3750dfb84636dae6b781559310 to before 19ddd4af7fce9200e70882f622011e9dd130f427, 59caaed7a72a0e3750dfb84636dae6b781559310 to before 9d145a2d8d6f8f2cc460b80df41870819048f2a0, 59caaed7a72a0e3750dfb84636dae6b781559310 to before b4d278c91209931199db9c0836dc2e21a7593dad, 59caaed7a72a0e3750dfb84636dae6b781559310 to before 6ed3ebaff3345837f0528d85bd39ce573c7b9a41, 59caaed7a72a0e3750dfb84636dae6b781559310 to before ceecf3f9c322fc6937a66682942a26ad13a34a07, 59caaed7a72a0e3750dfb84636dae6b781559310 to before d85f0f0a7c85756fc992c70d869706f19dac9259
Linux

Linux · 4.5
Linux

Component: Not specified by the source
File: drivers/infiniband/ulp/iser/iser_initiator.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-98359

Affected technology

Linux · d41861942fc55c14b6280d9568a0d0112037f065 to before be4b44c8b47c67a04c08b1a0aba18006b749ae6a, d41861942fc55c14b6280d9568a0d0112037f065 to before 45c60ffc79771bad154f224a05753191cf1b37bc, d41861942fc55c14b6280d9568a0d0112037f065 to before 520cd057f138ed8dbe8e05f0eae3a8ed4c5d3a5e, d41861942fc55c14b6280d9568a0d0112037f065 to before a219459fbd1b2598e63c81a52847eba6c28b72d2, d41861942fc55c14b6280d9568a0d0112037f065 to before 5bd42f74ec3b4f4687fb600f367af0828d513b3c, d41861942fc55c14b6280d9568a0d0112037f065 to before ef9fbe1b93f3b617b96e86d5cd76b3fa44514cb5
Linux

Linux · 4.14
Linux

Component: Not specified by the source
File: drivers/infiniband/core/verbs.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-98365

Affected technology

Linux · 8700e3e7c4857d28ebaa824509934556da0b3e76 to before b7d2118660545a00b21e83010ded1a231c6fb8c5, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before 5d9426a74fc8cb8f375fcdc19b465a030f9b8cab, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before 2f3b705144e3a3c14184fec6e354680081fe91ec, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before 3431f525718f6b07da308cda6d44f8cb548bbd37, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before d10e2a08799e858d3e71ea4169bcd018f216d444
Linux

Linux · 4.8
Linux

Component: Not specified by the source
File: drivers/infiniband/sw/rxe/rxe_mr.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-99999

Affected technology

Linux · f43798c27684ab925adde7d8acc34c78c6e50df8 to before a464d950f31c89565cbaae038cc60db04fe01956, f43798c27684ab925adde7d8acc34c78c6e50df8 to before 0fab003ef4698e0628060a45a48f14b43ba2a40a, f43798c27684ab925adde7d8acc34c78c6e50df8 to before 94524b7b32691de2e2ce162c04d6cbc9106e5cbf, f43798c27684ab925adde7d8acc34c78c6e50df8 to before a65f69e0f38ffbed1b128029e09097436416dc8b, f43798c27684ab925adde7d8acc34c78c6e50df8 to before 32a8b0adaa18e52aaa0b246b5ffe683075354dbb, f43798c27684ab925adde7d8acc34c78c6e50df8 to before f3e835af6226f1dd12160cbd696081e9b6155de0, f43798c27684ab925adde7d8acc34c78c6e50df8 to before c3e33464746166264334641dc850a36eef7e6326, f43798c27684ab925adde7d8acc34c78c6e50df8 to before 6785011f8b16abf40b1e9d8b2e332232b3e68822
Linux

Linux · 2.6.27
Linux

Component: Not specified by the source
File: include/net/ip.h, net/bridge/netfilter/nf_conntrack_bridge.c, net/ipv4/ip_output.c, net/netfilter/nfnetlink_queue.c, net/netfilter/xt_CHECKSUM.c, net/xfrm/xfrm_output.c

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.3/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.