Component: Not specified by the source

Attack conditions (OSV, CVSS 4.0): Physical access · No privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 4.0 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-10263

CVE-2025-40074

Affected technology

Linux · 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 864155c164654110f68a17a63bd0339754790d67, 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before e150f273cd8ed34ebc6d03758aad95c12fc58337, 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 684efb2c86c887685f9aa65e1a21b3df6c1f822d, 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 923e0734c386984d45de508528a7a7ad91d791cc, 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 6ad8de3cefdb6ffa6708b21c567df0dbf82c43a8
Linux

Affected technology

Linux · 0dbb186c3510cad4e9f443e801bf2e6ab5770c00 to before ca6d2b7aca778afbf8c0c4b330d10cb228c14052, 0dbb186c3510cad4e9f443e801bf2e6ab5770c00 to before b41fca4aa60be896ba8a81b57aac5dcc6eee66c0, 0dbb186c3510cad4e9f443e801bf2e6ab5770c00 to before 845f716dc5f354c719f6fda35048b6c2eca99331, 31087af37d6b1586b76d4acf3e0c1634a4617ba6, 6.11.9 to before 6.12
Linux

Linux · 6.12
Linux

Component: Not specified by the source
File: sound/soc/intel/avs/pcm.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-40354

Affected technology

Linux · 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before f28092be4e12b7df9e4f415d25bf0d767bc2d9ed, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before a3fc0d36cfb927f8986b83bf5fba47dbedad3c63, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before bec947cbe9a65783adb475a5fb47980d7b4f4796
Linux

Linux · 4.15
Linux

Component: Not specified by the source
File: drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c, drivers/gpu/drm/amd/display/dc/inc/hw/hw_shared.h

The source does not specify what an attacker can achieve.

CVE-2025-71202

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71289

Affected technology

linux kernel · from 5.15 (inclusive), before 6.19.6 (exclusive)
linux

Linux · 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 92300ac7ff17cad67ff2f3fbb7003afa326134e0, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 3a718675d6af4992e34ffe86b8f36d471a5afe0e, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before d73dcd1520d65a34420761641a36b951b14c8c53, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 6dfea43d11513b7f2892529de55e8f0855108a2c, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 576248a34b927e93b2fd3fff7df735ba73ad7d01
Linux

Linux · 5.15
Linux

Component: Not specified by the source
File: fs/ntfs3/file.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality impact as none; integrity impact as low; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23208

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23393

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

The source does not specify what an attacker can achieve.

CVE-2026-43009

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-43029

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-43042

CVE-2026-52912

CVE-2026-52956

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-52988

Affected technology

linux kernel · from 5.8 (inclusive), before 7.0.10 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

Linux · 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before ed8d3bd8272e49ea987100de2abfb13710329a9b, 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before 8fdd2204503ab1ce07dc000c277e2c3edf96a67b, 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before 5593c640f9daedec8de61555c41e1019fa675aa6, 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before 00e370627f2e1fb3585f9d26348b1abddc75442b, 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before 28ecfb3d1fe8dea70319de7051cb6718c25b5b52, 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before a557816c6e38e9473d99aa9ea8c662f55fc85847, 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before 1346be9379639c30877083b12747d4eacb83c24f, 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before a6134e62dba2ea4f760b29d5226907f447c92400
Linux

Affected technology

linux kernel · from 5.15 (inclusive), before 7.0.10 (exclusive)
linux

Linux · c63829182c37c2d6d0608976d15fa61ebebe9e6b to before 866e69a824b46e682b8fb923be321b585e634874, c63829182c37c2d6d0608976d15fa61ebebe9e6b to before 301bdc558a5eb4057473204d35e2608e682aaafb, c63829182c37c2d6d0608976d15fa61ebebe9e6b to before 48c41cd2e04af4b2cdef19e2d00994ae82952f14, c63829182c37c2d6d0608976d15fa61ebebe9e6b to before e0a71cbf0c1906a2eccbe69dd7d7f36fd1511d66, c63829182c37c2d6d0608976d15fa61ebebe9e6b to before b34a1d83c74a124c968b5adb25c809db3e2eb86a, c63829182c37c2d6d0608976d15fa61ebebe9e6b to before 965dc93481d1b80d341bdd16c27b16fe197175ee
Linux

Linux · 5.15
Linux

Component: Not specified by the source
File: net/unix/af_unix.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

The source does not specify what an attacker can achieve.

CVE-2026-53090

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-53091

CVE-2026-53284

CVE-2026-53384

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-53398

CVE-2026-63992

Affected technology

linux kernel · from 5.9 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.93 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.35 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.12 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

linux kernel · 7.1 · update rc5
linux

Linux · 4cb47a8644cc9eb8ec81190a50e79e6530d0297f to before 5a92cb45e34749865d03daf8d3500f77b5f6644c, 4cb47a8644cc9eb8ec81190a50e79e6530d0297f to before c7b7ec3e69e673c0d6b57f74d21da50c485c598e, 4cb47a8644cc9eb8ec81190a50e79e6530d0297f to before 7f4f7efe7f30edd29c4988de01728bf2398217e4, 4cb47a8644cc9eb8ec81190a50e79e6530d0297f to before e917d0c69f01af2bb4fbea2b66d560a53b3ac7ec, 4cb47a8644cc9eb8ec81190a50e79e6530d0297f to before a096b6e34f602950af9a2b0856cd93a5f4c276d7, 4cb47a8644cc9eb8ec81190a50e79e6530d0297f to before 43368636c663cff6e59dde93cf4b8e43ac28eb93, 4cb47a8644cc9eb8ec81190a50e79e6530d0297f to before cb549df9ce4ee15c9d5b19ddab12cf2128e4313c, 4cb47a8644cc9eb8ec81190a50e79e6530d0297f to before 509323077ef79a26ba0c60bb556e45c12c398b2d
Linux

Linux · 5.9
Linux

Component: Not specified by the source
File: net/ipv4/ip_tunnel_core.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-63993

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-63994

Affected technology

linux kernel · from 5.9 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.93 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.35 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.12 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

linux kernel · 7.1 · update rc5
linux

Linux · 4cb47a8644cc9eb8ec81190a50e79e6530d0297f to before 95b6d772bfe788331d9742d73eaa12e113b2adc4, 4cb47a8644cc9eb8ec81190a50e79e6530d0297f to before 7254aef4d1a7e18e887af9010e2f2dc34806789b, 4cb47a8644cc9eb8ec81190a50e79e6530d0297f to before bf8b3f34c37c162357138e7c0942723b8b94fed1, 4cb47a8644cc9eb8ec81190a50e79e6530d0297f to before 76cd9398a0470257ab765bdf5f358a2af2e17934, 4cb47a8644cc9eb8ec81190a50e79e6530d0297f to before 50750d86a2e5266aba0c295483b3397843198b11, 4cb47a8644cc9eb8ec81190a50e79e6530d0297f to before 6dff77899b9e9fe5d854abda3a98ad04e7229ef7, 4cb47a8644cc9eb8ec81190a50e79e6530d0297f to before f3f204541f280a6ecb04503a0d6794d93990ca43, 4cb47a8644cc9eb8ec81190a50e79e6530d0297f to before b4bc94353050b1fa7b702bd4c6600710dd926cff
Linux

Linux · 5.9
Linux

Component: Not specified by the source
File: net/ipv4/ip_tunnel_core.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

CVE-2026-64000

Affected technology

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.93 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.35 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.12 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

linux kernel · 7.1 · update rc5
linux

Linux · eafaa88b3eb7f28aecb222281655473431d3ef2e to before 09a37dca090c55ffb1a33f52d8667f1c2367ef48, eafaa88b3eb7f28aecb222281655473431d3ef2e to before a4b64f3e9c7b8259f7dd251a0313420ba7c01852, eafaa88b3eb7f28aecb222281655473431d3ef2e to before 71c986c0ba45b7dc574fae27c83e7b6671556f37, eafaa88b3eb7f28aecb222281655473431d3ef2e to before fbd0662f9c9a66e8cc3df3099cca8ed6d3837cc7, eafaa88b3eb7f28aecb222281655473431d3ef2e to before 78607a6854a22a2502f68092202e75a39af4865d, eafaa88b3eb7f28aecb222281655473431d3ef2e to before f229426072fc865654a60978bb7fda790a051ff3
Linux

Linux · 5.16
Linux

Component: Not specified by the source
File: net/hsr/hsr_forward.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

CVE-2026-64007

Affected technology

linux kernel · from 3.12 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.93 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.35 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.12 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

linux kernel · 7.1 · update rc5
linux

Linux · 48b1de4c110a7afa4b85862f6c75af817db26fad to before 9902a1058992de5d95656b64a3bd95c077f7ba2c, 48b1de4c110a7afa4b85862f6c75af817db26fad to before d3019c61799adc21811af4b521f11f3dc77f8e04, 48b1de4c110a7afa4b85862f6c75af817db26fad to before dd206819f210522579010d889d45a9530bb494bc, 48b1de4c110a7afa4b85862f6c75af817db26fad to before af2c22ccb1f621aff487ff47a040e38e058541e7, 48b1de4c110a7afa4b85862f6c75af817db26fad to before c7f945f7da097245a2f8ed7775ce48421047ee96, 48b1de4c110a7afa4b85862f6c75af817db26fad to before f0fea2b6d5453a11ad11713bbf37561b9b3a7edf, 48b1de4c110a7afa4b85862f6c75af817db26fad to before a91887a5b6ee4b98dfbf1db657ed2b879430149e, 48b1de4c110a7afa4b85862f6c75af817db26fad to before 92170e6afe927ab2792a3f71902845789c8e31b1
Linux

Linux · 3.12
Linux

Component: Not specified by the source
Function: calls
File: net/netfilter/nf_synproxy_core.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

CVE-2026-64010

Affected technology

linux kernel · from 3.6 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.93 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.35 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.12 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

linux kernel · 7.1 · update rc5
linux

Linux · a69f32af86e389dd232b1bb2269e202c1bfcc60f to before dce85215a6c7b0fd753f577a4c487f647119884c, a69f32af86e389dd232b1bb2269e202c1bfcc60f to before bd08bb7443c501d2f2a71d529e4afcf11c9b07d2, a69f32af86e389dd232b1bb2269e202c1bfcc60f to before 0b45c31746e1523d5d482fda8fcf54a35ac417f1, a69f32af86e389dd232b1bb2269e202c1bfcc60f to before ee2d1a8a1833c5e56e9a1745e64b0b4edda732c2, a69f32af86e389dd232b1bb2269e202c1bfcc60f to before ad8a27d63cac96bac441edd002209ebd996e12fb, a69f32af86e389dd232b1bb2269e202c1bfcc60f to before 650bdd8fdfab64a09ee474150313dbc48c374795, a69f32af86e389dd232b1bb2269e202c1bfcc60f to before b2a60f7f846faaf5c2cdad4ea6d3a33e5f863183, a69f32af86e389dd232b1bb2269e202c1bfcc60f to before b493ea2765cc17cb8aa7e7544a4b6dcb05b6ed77
Linux

Linux · 3.6
Linux

Component: Not specified by the source
File: net/nfc/llcp_core.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

A attacker could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.

CVE-2026-64011

Affected technology

linux kernel · from 3.10.10 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.93 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.35 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.12 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

linux kernel · 7.1 · update rc5
linux

Linux · b4011239a08e7e6c2c6e970dfa9e8ecb73139261 to before 89ba026747019ee643d29407435ddc118e6ca908, b4011239a08e7e6c2c6e970dfa9e8ecb73139261 to before fb29f6bbe433f3decad227588809636c25f2a287, b4011239a08e7e6c2c6e970dfa9e8ecb73139261 to before 2dfdaaf7d933b676124aadec6698825e95f94fe9, b4011239a08e7e6c2c6e970dfa9e8ecb73139261 to before e00f50f8697724a6f1d2d35744c1332c9912dac5, b4011239a08e7e6c2c6e970dfa9e8ecb73139261 to before cdc17e09a636c7f936f771902535a7515a7608fc, b4011239a08e7e6c2c6e970dfa9e8ecb73139261 to before 912ebc49d4406a17fe73e5671d674fbc2f6b2634, b4011239a08e7e6c2c6e970dfa9e8ecb73139261 to before bc421d0826dedbba37580a25405eafb599e76d42, b4011239a08e7e6c2c6e970dfa9e8ecb73139261 to before f4268b466190dae95a7585f69b4f1f8ad097632c, da989ee1c7702050741a551df6866cc1588f277b, 3.10.10 to before 3.11
Linux

Linux · 3.11
Linux

Component: Not specified by the source
File: net/nfc/llcp_sock.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

CVE-2026-64015

Affected technology

linux kernel · from 3.13 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.142 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.92 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.34 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.11 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

linux kernel · 7.1 · update rc5
linux

Linux · b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before 4c5d407ba3ff7f30561ff73ba1b07ed70c864edc, b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before cefa4265b11176c897a7d9e8e54d89e3701c5584, b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before 5659e6923cb72f8e18e8b539109ab512455fe195, b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before 50bb3435a5e627bfbdc52eb4536f49f88b3486b8, b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before 66288dcadf80974436250e9f70ed848836b835b5, b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 to before 43a1e3744548e6fd85873e6fb43e293eb4010694
Linux

Linux · 3.13
Linux

Component: Not specified by the source
File: security/keys/keyring.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

CVE-2026-64018

Affected technology

linux kernel · from 5.13 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.142 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.92 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.34 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.11 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

Linux · ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before 5ddc715324badd7f2641bc177db1d027b402adae, ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before ff1d5af207bcea857d45fe81505f1bc4b29eaef0, ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before 01f7f893d5e1baae995beeb86cd0f3e6bb2a3b01, ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before 763a372d344fb12fae566d36ddb46e92454ad58c, ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before fa627a5eaa83fc0261f44ef3769693b886ca6e27, ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before 355e9f2b2a7887ca38100127989af3e422ba71d0, ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before b809d0409991b75a6cff846a5ac27c3062953f84
Linux

Linux · 5.13
Linux

Component: Not specified by the source
File: drivers/net/ethernet/microsoft/mana/hw_channel.c

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.3/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-64025

Affected technology

linux kernel · from 5.10 (inclusive), before 6.6.142 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.92 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.34 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.11 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

Linux · ef5659280eb13e8ac31c296f58cfdfa1684ac06b to before c9ea01768903ae47f210cd457af1dead6de7a9c3, ef5659280eb13e8ac31c296f58cfdfa1684ac06b to before 7c8cf21bc4efb4af18d6096db3f8bd06d622251c, ef5659280eb13e8ac31c296f58cfdfa1684ac06b to before 1861d369efd62d67796563bf3e01fc22e5626f8b, ef5659280eb13e8ac31c296f58cfdfa1684ac06b to before 8a52139560f833c3975032e1f5762611e3a36d71, ef5659280eb13e8ac31c296f58cfdfa1684ac06b to before ddf8029623a1af20e984c040e89ff918158397ab
Linux

Linux · 5.10
Linux

Component: Not specified by the source
File: net/core/skmsg.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

CVE-2026-64029

Affected technology

linux kernel · from 6.5 (inclusive), before 6.6.142 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.92 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.34 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.11 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

Linux · 81fd444aa371261cd33f31d4ffd80faeeeab0cc9 to before 8ba1c4ddbb1c67d34bb440aecb9f5690ed3f64cb, 81fd444aa371261cd33f31d4ffd80faeeeab0cc9 to before 0cb1ad795570167558530d6194297ac2396a1991, 81fd444aa371261cd33f31d4ffd80faeeeab0cc9 to before 3aab4a58d23fb22dac5b558bbe5df1a8dad00b4b, 81fd444aa371261cd33f31d4ffd80faeeeab0cc9 to before ef46b616a4c219185bbf10ebcbacb571583fd0e4, 81fd444aa371261cd33f31d4ffd80faeeeab0cc9 to before 60a1969fae6209644698fca91c185d153674f631
Linux

Linux · 6.5
Linux

Component: Not specified by the source
File: sound/core/seq/seq_ump_client.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

CVE-2026-64032

Affected technology

linux kernel · from 5.15.186 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 6.1.142 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.6.95 (inclusive), before 6.6.142 (exclusive)
linux

linux kernel · from 6.12.35 (inclusive), before 6.12.92 (exclusive)
linux

linux kernel · from 6.15.4 (inclusive), before 6.18.34 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.11 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

Linux · 410a033bfa8c7daefbae0225c836693db2149ec1 to before ddefd1b8e5eb58933a697ab38334f0fd82e7fb8b, c6d16eab122744df698f18b47cf771945cd55066 to before ed3b69e60385a03df11c6d12e5d7bdf0f4a11b70, b4c83b37490d61cfdd62a2b29e98a9b89004b5c0 to before 1900ca8acb92fbea8bf9abef9927c7fed03db7fc, 78f768e36c065ca3f88272fcf39014782c2d4ecd to before ebe5561154c823b323bd06e350b55e0b8604d851, 4b30ae9adb047dd0a7982975ec3933c529537026 to before a9224862d597d0eed0a34bbb27343f703fc4113f, 4b30ae9adb047dd0a7982975ec3933c529537026 to before 7213256c91ed778a0997c2029c152b18dc50e4fd, 4b30ae9adb047dd0a7982975ec3933c529537026 to before 4df78ff02629c7729168f0696a7a2123c389818d, c996e25df0b3282c724bb5aca434518bc08cd963, 5.15.186 to before 5.15.209, 6.1.142 to before 6.1.175, 6.6.95 to before 6.6.142, 6.12.35 to before 6.12.92, 6.15.4 to before 6.16
Linux

Linux · 6.16
Linux

Component: Not specified by the source
File: net/bridge/br_multicast.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

CVE-2026-64033

Affected technology

linux kernel · from 5.15.61 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 5.17 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.142 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.92 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.34 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.11 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

Linux · bab17b761c8974a869b04462be5d4dd9aad366b4 to before 01e42aabaf7632beb4bf235c7238b96c746d4144, ae4c81644e9105d9f7f713bb0d444737bb6a0cf1 to before 548f3956e53a7f7bde912d8129010b8986d5e602, ae4c81644e9105d9f7f713bb0d444737bb6a0cf1 to before 00904a73272b9f3ef3952fe69a833909dccad1ef, ae4c81644e9105d9f7f713bb0d444737bb6a0cf1 to before 92060ab1c5115674cf319175550f85f68405121f, ae4c81644e9105d9f7f713bb0d444737bb6a0cf1 to before eae62c5451e67e8b033c1681fd3b85d7e9a9a28f, ae4c81644e9105d9f7f713bb0d444737bb6a0cf1 to before b0e9706fb2859064bb6c677554c4d20c713aa8e0, ae4c81644e9105d9f7f713bb0d444737bb6a0cf1 to before 5b74373390113fba798a76b483837029ab010fef, 5.15.61 to before 5.15.209
Linux

Linux · 5.17
Linux

Component: Not specified by the source
File: drivers/infiniband/ulp/rtrs/rtrs-srv-sysfs.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

CVE-2026-64034

Affected technology

linux kernel · from 5.13 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.142 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.92 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.34 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.11 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

Linux · ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before a201c66edf2ebc6cfdc3813a889ba20fecebfae3, ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before 70ad2dff8d052a85dfef15715b531f38a29108cf, ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before 566f42fb67a7ebfed6650e407e5b72e6b3e83bf7, ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before 6180a06bbc99fd9114b8db4be6c4d46e40f046ef, ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before 09ec063d87c2dd3fa6f3561361a017bd882e9f37, ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before 3c4db56ccd13dd020fbf43afabaee74a40ec75e4, ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before 35f0f0a2536a4d604b4dbad92c85c4a8fdebb870
Linux

Linux · 5.13
Linux

Component: Not specified by the source
File: drivers/net/ethernet/microsoft/mana/hw_channel.c

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required

What an attacker can do

CVE-2026-64039

Affected technology

linux kernel · from 5.14 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.142 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.92 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.34 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.11 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

Linux · 98659487b845c05b6bed85d881713545db674c7c to before 8fb070cf95847b29ef6cb15ec2c0de2bf4704676, 98659487b845c05b6bed85d881713545db674c7c to before cecd34e046121d788a70b5c8b4f8a88916637953, 98659487b845c05b6bed85d881713545db674c7c to before 070e40acc59ef7bedba0314f59971ba87fcc8ab0, 98659487b845c05b6bed85d881713545db674c7c to before 1ef79be774706dddcfcace0331fa7ff32a73c73e, 98659487b845c05b6bed85d881713545db674c7c to before cdd1aaf0ee962f50810b9aef7928f2313989d55f, 98659487b845c05b6bed85d881713545db674c7c to before 0c90ececfad3fc5c4c43a75ece0e2d736ab3def1, 98659487b845c05b6bed85d881713545db674c7c to before 76824d2467feb1828b745d6add2541918d7be3da
Linux

Linux · 5.14
Linux

Component: Not specified by the source
File: drivers/gpu/drm/msm/disp/msm_disp_snapshot_util.c

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.7/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-64046

CVE-2026-64115

CVE-2026-64160

CVE-2026-64191

CVE-2026-64385

CVE-2026-64400

CVE-2026-64475

CVE-2026-64534

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-64535

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 4.0 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-64541

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-64548

CVE-2026-64555

CVE-2026-64586

CVE-2026-68136

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-68152

CVE-2026-68161

Affected technology

Linux · 046c052b475e7119b6a30e3483e2888fc606a2f8 to before c29affd44e6769e3073235d4b471d9b501fa8166, 046c052b475e7119b6a30e3483e2888fc606a2f8 to before c6eb2d615210b80339548ab07c0230edaab9a6c7, 046c052b475e7119b6a30e3483e2888fc606a2f8 to before 8ff78591d309c50a4fdab683b68dd8d512a270dd, 046c052b475e7119b6a30e3483e2888fc606a2f8 to before 3bf0e349cbb4f975f35eb22753acc346b89c66a0, 046c052b475e7119b6a30e3483e2888fc606a2f8 to before 37ff9794be48d0caa37687e04d09675f9c849121, 046c052b475e7119b6a30e3483e2888fc606a2f8 to before ffb2bd7ade36ec4da32c46a6eddbf4515316d08c
Linux

Linux · 5.11
Linux

Component: Not specified by the source
File: net/sctp/protocol.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

CVE-2026-68162

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-68198

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-68206

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-68209

CVE-2026-68228

CVE-2026-68381

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-68388

CVE-2026-68470

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 4.0): Adjacent network · No privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 4.0 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-72041

CVE-2026-72226

CVE-2026-72329

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Local · No privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-72339

CVE-2026-72436

CVE-2026-72472

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 4.0): Local · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 4.0 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-72495

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 4.0): Local · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 4.0 assessment rates confidentiality impact as none; integrity impact as low; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-72496

Affected technology

Linux · 0ac20faf5d837b59fb4c041ea320932ed47fd67f to before 00444baa8f74d220764ee5903f60759c120cabd5, 0ac20faf5d837b59fb4c041ea320932ed47fd67f to before 3c69ff7f4a761e18ce8abfa0c98e12097b39adaa, 0ac20faf5d837b59fb4c041ea320932ed47fd67f to before f956477c343aa73e9d9c8d6ebf32efac7cd4f4e2, 0ac20faf5d837b59fb4c041ea320932ed47fd67f to before 303f6fef95df5e5316970746d861cf6daeeca77f, 0ac20faf5d837b59fb4c041ea320932ed47fd67f to before 87267803a8c824616eb147c5dad7030a5db6f878
Linux

Linux · 6.5
Linux

Component: Not specified by the source
File: drivers/infiniband/hw/bnxt_re/qplib_res.c

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.2/10) rates confidentiality impact as low; integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-72499

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 4.0): Local · Low privileges required · No user interaction required

CVE-2026-74302

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-74305

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-74310

CVE-2026-74376

CVE-2026-74398

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-74401

CVE-2026-74407

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-74408

CVE-2026-74440

CVE-2026-74475

CVE-2026-74521

Affected technology

Linux · e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 7bde6f181fa307d2cc1ec2b0313ac8e9811c8232, e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 5a0367bf5ce420be7b19936def2e90adcf32a683, e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before ba2a5b66f1d414eb8403d655f8813783892cfc85, e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before a386c83043015a703e227775f778e40343f45911, e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before d535363299822c5caa543787b21bd5cfa3e41949, e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before e8bb506e6ef749ac0336f3e579d8d02396b7d832
Linux

Linux · 5.15
Linux

Component: Not specified by the source
File: fs/smb/server/smb2pdu.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality and integrity impact as high; availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-74538

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-74541

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-74556

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-74569

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published 15-Oct-2026 00:54 UTC

CVE: CVE-2024-43872, CVE-2024-44932, CVE-2024-44964, CVE-2024-49932, CVE-2024-49940, CVE-2024-50106, CVE-2024-50217, CVE-2024-52560, CVE-2024-53098, CVE-2024-56552, CVE-2024-56591, CVE-2024-57857, CVE-2024-58089, CVE-2024-58094, CVE-2024-58098, CVE-2024-58100, CVE-2024-58241, CVE-2025-10263, CVE-2025-21687, CVE-2025-21693, CVE-2025-21984, CVE-2025-21985, CVE-2025-22104, CVE-2025-22108, CVE-2025-22109, CVE-2025-23132, CVE-2025-37776, CVE-2025-37876, CVE-2025-37906, CVE-2025-38064, CVE-2025-38069, CVE-2025-38187, CVE-2025-38204, CVE-2025-38206, CVE-2025-38242, CVE-2025-38498, CVE-2025-38563, CVE-2025-38565, CVE-2025-38636, CVE-2025-38717, CVE-2025-39677, CVE-2025-39789, CVE-2025-39859, CVE-2025-39862, CVE-2025-39896, CVE-2025-39933, CVE-2025-39958, CVE-2025-39990, CVE-2025-40025, CVE-2025-40040, CVE-2025-40054, CVE-2025-40064, CVE-2025-40074, CVE-2025-40075, CVE-2025-40139, CVE-2025-40158, CVE-2025-40168, CVE-2025-40170, CVE-2025-40203, CVE-2025-40274, CVE-2025-40344, CVE-2025-40354, CVE-2025-68174, CVE-2025-68304, CVE-2025-68360, CVE-2025-68745, CVE-2025-68822, CVE-2025-71073, CVE-2025-71074, CVE-2025-71202, CVE-2025-71289, CVE-2026-23208, CVE-2026-23239, CVE-2026-23240, CVE-2026-23327, CVE-2026-23393, CVE-2026-23469, CVE-2026-31420, CVE-2026-31479, CVE-2026-31486, CVE-2026-31493, CVE-2026-31560, CVE-2026-31568, CVE-2026-31630, CVE-2026-31663, CVE-2026-31771, CVE-2026-43009, CVE-2026-43029, CVE-2026-43042, CVE-2026-43048, CVE-2026-43101, CVE-2026-43116, CVE-2026-43126, CVE-2026-43172, CVE-2026-43213, CVE-2026-43263, CVE-2026-43303, CVE-2026-43352, CVE-2026-43353, CVE-2026-43464, CVE-2026-45850, CVE-2026-45894, CVE-2026-45932, CVE-2026-45944, CVE-2026-46054, CVE-2026-46130, CVE-2026-46158, CVE-2026-46170, CVE-2026-46175, CVE-2026-46181, CVE-2026-46203, CVE-2026-46275, CVE-2026-46315, CVE-2026-46320, CVE-2026-46324, CVE-2026-46330, CVE-2026-52908, CVE-2026-52909, CVE-2026-52910, CVE-2026-52912, CVE-2026-52915, CVE-2026-52916, CVE-2026-52918, CVE-2026-52919, CVE-2026-52921, CVE-2026-52922, CVE-2026-52926, CVE-2026-52934, CVE-2026-52941, CVE-2026-52956, CVE-2026-52988, CVE-2026-52991, CVE-2026-53000, CVE-2026-53005, CVE-2026-53009, CVE-2026-53024, CVE-2026-53025, CVE-2026-53053, CVE-2026-53070, CVE-2026-53078, CVE-2026-53089, CVE-2026-53090, CVE-2026-53091, CVE-2026-53109, CVE-2026-53118, CVE-2026-53120, CVE-2026-53129, CVE-2026-53131, CVE-2026-53132, CVE-2026-53133, CVE-2026-53148, CVE-2026-53159, CVE-2026-53182, CVE-2026-53183, CVE-2026-53185, CVE-2026-53186, CVE-2026-53196, CVE-2026-53198, CVE-2026-53216, CVE-2026-53217, CVE-2026-53221, CVE-2026-53230, CVE-2026-53232, CVE-2026-53239, CVE-2026-53250, CVE-2026-53254, CVE-2026-53256, CVE-2026-53262, CVE-2026-53264, CVE-2026-53266, CVE-2026-53269, CVE-2026-53270, CVE-2026-53273, CVE-2026-53275, CVE-2026-53281, CVE-2026-53284, CVE-2026-53354, CVE-2026-53355, CVE-2026-53357, CVE-2026-53358, CVE-2026-53361, CVE-2026-53368, CVE-2026-53384, CVE-2026-53398, CVE-2026-53399, CVE-2026-63795, CVE-2026-63796, CVE-2026-63797, CVE-2026-63800, CVE-2026-63801, CVE-2026-63804, CVE-2026-63807, CVE-2026-63808, CVE-2026-63815, CVE-2026-63818, CVE-2026-63825, CVE-2026-63828, CVE-2026-63829, CVE-2026-63830, CVE-2026-63831, CVE-2026-63853, CVE-2026-63858, CVE-2026-63886, CVE-2026-63887, CVE-2026-63888, CVE-2026-63893, CVE-2026-63906, CVE-2026-63912, CVE-2026-63914, CVE-2026-63915, CVE-2026-63916, CVE-2026-63917, CVE-2026-63919, CVE-2026-63921, CVE-2026-63922, CVE-2026-63924, CVE-2026-63926, CVE-2026-63940, CVE-2026-63944, CVE-2026-63945, CVE-2026-63946, CVE-2026-63947, CVE-2026-63948, CVE-2026-63952, CVE-2026-63974, CVE-2026-63975, CVE-2026-63976, CVE-2026-63978, CVE-2026-63979, CVE-2026-63980, CVE-2026-63984, CVE-2026-63992, CVE-2026-63993, CVE-2026-63994, CVE-2026-64000, CVE-2026-64007, CVE-2026-64010, CVE-2026-64011, CVE-2026-64015, CVE-2026-64018, CVE-2026-64025, CVE-2026-64029, CVE-2026-64032, CVE-2026-64033, CVE-2026-64034, CVE-2026-64039, CVE-2026-64046, CVE-2026-64047, CVE-2026-64048, CVE-2026-64051, CVE-2026-64055, CVE-2026-64056, CVE-2026-64064, CVE-2026-64073, CVE-2026-64076, CVE-2026-64077, CVE-2026-64082, CVE-2026-64083, CVE-2026-64084, CVE-2026-64085, CVE-2026-64086, CVE-2026-64087, CVE-2026-64088, CVE-2026-64089, CVE-2026-64091, CVE-2026-64092, CVE-2026-64093, CVE-2026-64096, CVE-2026-64097, CVE-2026-64098, CVE-2026-64099, CVE-2026-64102, CVE-2026-64103, CVE-2026-64106, CVE-2026-64108, CVE-2026-64109, CVE-2026-64111, CVE-2026-64112, CVE-2026-64113, CVE-2026-64114, CVE-2026-64115, CVE-2026-64116, CVE-2026-64117, CVE-2026-64118, CVE-2026-64121, CVE-2026-64125, CVE-2026-64126, CVE-2026-64127, CVE-2026-64128, CVE-2026-64133, CVE-2026-64134, CVE-2026-64135, CVE-2026-64136, CVE-2026-64137, CVE-2026-64138, CVE-2026-64144, CVE-2026-64147, CVE-2026-64148, CVE-2026-64153, CVE-2026-64155, CVE-2026-64160, CVE-2026-64163, CVE-2026-64165, CVE-2026-64166, CVE-2026-64168, CVE-2026-64170, CVE-2026-64173, CVE-2026-64174, CVE-2026-64177, CVE-2026-64178, CVE-2026-64179, CVE-2026-64180, CVE-2026-64182, CVE-2026-64183, CVE-2026-64184, CVE-2026-64185, CVE-2026-64191, CVE-2026-64206, CVE-2026-64214, CVE-2026-64217, CVE-2026-64218, CVE-2026-64219, CVE-2026-64220, CVE-2026-64221, CVE-2026-64225, CVE-2026-64231, CVE-2026-64237, CVE-2026-64247, CVE-2026-64249, CVE-2026-64268, CVE-2026-64269, CVE-2026-64280, CVE-2026-64303, CVE-2026-64313, CVE-2026-64315, CVE-2026-64319, CVE-2026-64320, CVE-2026-64355, CVE-2026-64361, CVE-2026-64364, CVE-2026-64382, CVE-2026-64383, CVE-2026-64384, CVE-2026-64385, CVE-2026-64386, CVE-2026-64387, CVE-2026-64390, CVE-2026-64391, CVE-2026-64392, CVE-2026-64393, CVE-2026-64394, CVE-2026-64396, CVE-2026-64397, CVE-2026-64399, CVE-2026-64400, CVE-2026-64408, CVE-2026-64438, CVE-2026-64441, CVE-2026-64445, CVE-2026-64450, CVE-2026-64475, CVE-2026-64510, CVE-2026-64518, CVE-2026-64523, CVE-2026-64529, CVE-2026-64530, CVE-2026-64534, CVE-2026-64535, CVE-2026-64541, CVE-2026-64548, CVE-2026-64551, CVE-2026-64552, CVE-2026-64554, CVE-2026-64555, CVE-2026-64557, CVE-2026-64561, CVE-2026-64562, CVE-2026-64564, CVE-2026-64586, CVE-2026-64597, CVE-2026-64598, CVE-2026-68082, CVE-2026-68083, CVE-2026-68117, CVE-2026-68123, CVE-2026-68124, CVE-2026-68127, CVE-2026-68136, CVE-2026-68137, CVE-2026-68138, CVE-2026-68144, CVE-2026-68147, CVE-2026-68152, CVE-2026-68154, CVE-2026-68156, CVE-2026-68158, CVE-2026-68159, CVE-2026-68160, CVE-2026-68161, CVE-2026-68162, CVE-2026-68198, CVE-2026-68206, CVE-2026-68209, CVE-2026-68210, CVE-2026-68213, CVE-2026-68228, CVE-2026-68229, CVE-2026-68300, CVE-2026-68302, CVE-2026-68343, CVE-2026-68381, CVE-2026-68388, CVE-2026-68426, CVE-2026-68431, CVE-2026-68457, CVE-2026-68461, CVE-2026-68470, CVE-2026-68476, CVE-2026-68477, CVE-2026-72014, CVE-2026-72020, CVE-2026-72033, CVE-2026-72041, CVE-2026-72065, CVE-2026-72069, CVE-2026-72071, CVE-2026-72083, CVE-2026-72084, CVE-2026-72085, CVE-2026-72098, CVE-2026-72111, CVE-2026-72124, CVE-2026-72125, CVE-2026-72126, CVE-2026-72129, CVE-2026-72130, CVE-2026-72191, CVE-2026-72192, CVE-2026-72194, CVE-2026-72200, CVE-2026-72217, CVE-2026-72221, CVE-2026-72222, CVE-2026-72226, CVE-2026-72234, CVE-2026-72251, CVE-2026-72255, CVE-2026-72288, CVE-2026-72289, CVE-2026-72296, CVE-2026-72299, CVE-2026-72317, CVE-2026-72318, CVE-2026-72319, CVE-2026-72320, CVE-2026-72322, CVE-2026-72323, CVE-2026-72329, CVE-2026-72339, CVE-2026-72348, CVE-2026-72351, CVE-2026-72380, CVE-2026-72383, CVE-2026-72398, CVE-2026-72399, CVE-2026-72421, CVE-2026-72422, CVE-2026-72434, CVE-2026-72436, CVE-2026-72451, CVE-2026-72454, CVE-2026-72466, CVE-2026-72472, CVE-2026-72473, CVE-2026-72487, CVE-2026-72488, CVE-2026-72489, CVE-2026-72491, CVE-2026-72494, CVE-2026-72495, CVE-2026-72496, CVE-2026-72499, CVE-2026-74255, CVE-2026-74264, CVE-2026-74267, CVE-2026-74268, CVE-2026-74269, CVE-2026-74279, CVE-2026-74280, CVE-2026-74287, CVE-2026-74302, CVE-2026-74305, CVE-2026-74310, CVE-2026-74345, CVE-2026-74350, CVE-2026-74376, CVE-2026-74384, CVE-2026-74394, CVE-2026-74398, CVE-2026-74401, CVE-2026-74405, CVE-2026-74406, CVE-2026-74407, CVE-2026-74408, CVE-2026-74410, CVE-2026-74411, CVE-2026-74417, CVE-2026-74427, CVE-2026-74436, CVE-2026-74439, CVE-2026-74440, CVE-2026-74473, CVE-2026-74474, CVE-2026-74475, CVE-2026-74476, CVE-2026-74478, CVE-2026-74480, CVE-2026-74493, CVE-2026-74495, CVE-2026-74521, CVE-2026-74538, CVE-2026-74541, CVE-2026-74556, CVE-2026-74569
CWE: CWE-125, CWE-129, CWE-131, CWE-362, CWE-367, CWE-416, CWE-787
Product: linux-nvidia-tegra
CCR priority: 0.0 /100 (P5)
EPSS: 0.00114 · percentile 0.01401 · 2026-10-13
KEV: no

Provenance

OSV.dev · Source record · observed 2026-10-14 16:28:58.499616+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2024-14040.html