CVE-2025-22063, CVE-2025-38147, CVE-2026-64481 +5 more CVEs: Linux 6.0, 2.6.12, 4.2 (+2 more affected versions)

CVE-2025-22063

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38147

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-64481

Affected technology

Linux · 47ceabd99a28399f8971f4ca0a37ebc0a21dd2a8 to before 3e339c88b8c3044919fd1936a8b23124285d0de6, 47ceabd99a28399f8971f4ca0a37ebc0a21dd2a8 to before 8947215c0136c9d905e4a46d824824f8b48a2e5b, 47ceabd99a28399f8971f4ca0a37ebc0a21dd2a8 to before ce0a903d0591e3e2c790c5b628802b08d1b287cc, 47ceabd99a28399f8971f4ca0a37ebc0a21dd2a8 to before d6a40a4d083ef74d00c8f9516cb5ff07ac70720b, 47ceabd99a28399f8971f4ca0a37ebc0a21dd2a8 to before b65020d5398f499c09498c9786dba6d67ae57664
Linux

Linux · 6.0
Linux

Component: Not specified by the source
File: sound/hda/codecs/side-codecs/cs35l41_hda.c, sound/hda/codecs/side-codecs/cs35l41_hda.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-68202

Affected technology

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b7feeaca1f53b10df9b4de9eaf611767ca70dc92, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7478ef94b49bc9789cf1a003deec58b42283dde4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9d9be6fc30f384f92c4e1b8ed40bd9d4796b7833, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fb40d03ed792a8a8bf77aa0ee15df57b0ff78b07, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 24f0cabf173539f048946c8fc221131dc221f277, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6a10025c7fd09a7d2af37a3ae1da188569fce470, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 31a6163e301d832060f8236f1ed17cbc1ca198df, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2c4dc0ed50b05cd847a4b34b8cebf0775f19aeb9
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: sound/core/seq/seq_timer.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-68299

Affected technology

Linux · 45dac1d6ea045ae56e4df8d9c70c92c7412bd4fc to before 2ddf51fcb6dd7d55ceef38e2e1a5ab2ab7fd47b0, 45dac1d6ea045ae56e4df8d9c70c92c7412bd4fc to before fbab6b73cc086e32698c86e43d1b16bf17d24c36, 45dac1d6ea045ae56e4df8d9c70c92c7412bd4fc to before 28e382646417c7e2be9c9a7079eddf627ff52b90, 45dac1d6ea045ae56e4df8d9c70c92c7412bd4fc to before 667b6e52048eaf4dbcf1707ed87ffd44abb9cb38, 45dac1d6ea045ae56e4df8d9c70c92c7412bd4fc to before 28cb5d8d13b4c1faf3f688f62e5df82fe7b438d8, 45dac1d6ea045ae56e4df8d9c70c92c7412bd4fc to before 4fdb0f162ccdbe9626863b10003855703253fa29, 45dac1d6ea045ae56e4df8d9c70c92c7412bd4fc to before b28596baf87e25a078789f1c05817c8a3bf71257, 45dac1d6ea045ae56e4df8d9c70c92c7412bd4fc to before 34a71f5361fc3adb5b7138da78750b0d535a8252
Linux

Linux · 4.2
Linux

Component: Not specified by the source
Function: cannot, to
File: drivers/net/vmxnet3/vmxnet3_drv.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-68448

Affected technology

Linux · 5dae222a5ff0c269730393018a5539cc970a4726 to before 7e13e5b087375f1aee1e930503d20efa7084c0fa, 5dae222a5ff0c269730393018a5539cc970a4726 to before 46c296aa678828105842eee29a147508d803d926, 5dae222a5ff0c269730393018a5539cc970a4726 to before 9ec22c8113d8cf72ed7197bb61037dcad09e50d8, 5dae222a5ff0c269730393018a5539cc970a4726 to before 1f4a107439d2e43db176e34919933e617cb7f2c5, 5dae222a5ff0c269730393018a5539cc970a4726 to before a1e0eb8f55cfe09bb31a202a388babc411292656
Linux

Linux · 5.3
Linux

Component: Not specified by the source
File: fs/overlayfs/file.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-80530

Affected technology

Linux · 966ceafc7a437105ecfe1cadb3747b2965a260ca to before 2efbd8890b53f4756fdc7b0ef346fa514ffb7d66, 966ceafc7a437105ecfe1cadb3747b2965a260ca to before 0f27b22343b63e10773e6781344640c2c753eec3, 966ceafc7a437105ecfe1cadb3747b2965a260ca to before 03c9c9116e6da641424681f705698d7f5e2128e0, 966ceafc7a437105ecfe1cadb3747b2965a260ca to before b2d5a81dae385333f9734910277fbf94c78bd17f
Linux

Linux · 6.10
Linux

Component: Not specified by the source
File: fs/xfs/libxfs/xfs_exchmaps.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and integrity impact as high; availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-80536

Affected technology

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before acb4e26295e7f0e685815a3fd3d70bd8329cefa1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f3859c35a4fbc1c1c58431f684f808e43696891d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f7b5fa83e2c192be922121b764415fa8c7549ea1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b7528b42813f02724a78fce1da24d69d1bfc4d38, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7e32d4eebae6ca24f8a673c107fd7eca1f47afc2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f8288214459ead7e87d26e5822f62c14a4f2ed6b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before edaf5b6bd625356893da20d69a259b34a9de2694, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 813f8136a2ce1fee266d02a7df73db6e8a541604
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: fs/xfs/xfs_buf_item_recover.c

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.4/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.