CVE-2025-38147, CVE-2026-64048, CVE-2026-64114 +15 more CVEs: linux kernel 2.6.12; +1 more affected products

CVE-2025-38147

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-64048

Affected technology

linux kernel · from 5.10 (inclusive), before 5.10.266 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.217 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.142 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.92 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.34 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.11 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

Linux · a7c9c5f4af7f6098da68705fc5d86565d0728ef7 to before 903f7688ffeb9b323d70652c01f554bd4ba2a3d6, a7c9c5f4af7f6098da68705fc5d86565d0728ef7 to before dd2f9dd83c68abd7ba7ded7075290b016cb7ecd0, a7c9c5f4af7f6098da68705fc5d86565d0728ef7 to before 6927cacf2b10d4fa80c1a2d407512ef9397c59c6, a7c9c5f4af7f6098da68705fc5d86565d0728ef7 to before d38ba387244e5c5f7db3e11ea98bc2c7beccb0c0, a7c9c5f4af7f6098da68705fc5d86565d0728ef7 to before 53eb7bd09aace72fa17510d80e0caf5ca058c231, a7c9c5f4af7f6098da68705fc5d86565d0728ef7 to before afa9036b8c9963947b487c36e332df6a42c96fcb, a7c9c5f4af7f6098da68705fc5d86565d0728ef7 to before 65edb3b0822cfe5041be8fbabebd57e2e5ad9f4e, a7c9c5f4af7f6098da68705fc5d86565d0728ef7 to before 277740023def559a4a2ddc3e8e784ee37a0f16a9
Linux

Linux · 5.10
Linux

Component: Not specified by the source
File: net/smc/af_smc.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-64114

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.10.258 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.142 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.92 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.34 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.11 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1065b9efa4126df559b03a849c139ecfae92cd25, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bc20dbd48c26e743f7e0845020c11ed2ce8b15ee, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5a564f737ec54d63e8ee221d3ff396d07586d464, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3c5411fa4944ed99af3d9d1de750ea8169b6dac9, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 145e9afa5b905229b4788bb72c3255f5a5f77508, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7725cd3b471740fd23d25ed1da722c671fb2a5d3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bbe0be67de296176e7243c76e3d9f02f6ae9ff0b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 915fab69823a14c170dbaa3b41978768e0fe62fc
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: net/ipv4/raw.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-64266

Affected technology

linux kernel · from 2.6.35 (inclusive), before 5.10.261 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.212 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.178 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.145 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.96 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.39 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.1.4 (exclusive)
linux

Linux · c3021629a0d820247ee12b6c5192a1d5380e21c6 to before 1f9156714592356b4fda57beac7eab9c2a462dd3, c3021629a0d820247ee12b6c5192a1d5380e21c6 to before 5630da218a45ba80f0aba0846cbe8aa655da122b, c3021629a0d820247ee12b6c5192a1d5380e21c6 to before 1ca605cfa59377f0143fb35b5b01360f37d1b7c4, c3021629a0d820247ee12b6c5192a1d5380e21c6 to before 0e4a5a000123d81234e27a2f8187688cf608f755, c3021629a0d820247ee12b6c5192a1d5380e21c6 to before e6aa539720c3d8def69683ed0c07cf9faea4e8be, c3021629a0d820247ee12b6c5192a1d5380e21c6 to before be353caffa8640f5e25fb3714ce8b0cef5e410e5, c3021629a0d820247ee12b6c5192a1d5380e21c6 to before 65a1c2551f7e16085acbb54aedde1feaa559ba7a, c3021629a0d820247ee12b6c5192a1d5380e21c6 to before b5befa80fdbe287a98480effed9564712924add5
Linux

Linux · 2.6.35
Linux

Component: Not specified by the source
File: fs/fuse/dev.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-64481

Affected technology

Linux · 47ceabd99a28399f8971f4ca0a37ebc0a21dd2a8 to before 3e339c88b8c3044919fd1936a8b23124285d0de6, 47ceabd99a28399f8971f4ca0a37ebc0a21dd2a8 to before 8947215c0136c9d905e4a46d824824f8b48a2e5b, 47ceabd99a28399f8971f4ca0a37ebc0a21dd2a8 to before ce0a903d0591e3e2c790c5b628802b08d1b287cc, 47ceabd99a28399f8971f4ca0a37ebc0a21dd2a8 to before d6a40a4d083ef74d00c8f9516cb5ff07ac70720b, 47ceabd99a28399f8971f4ca0a37ebc0a21dd2a8 to before b65020d5398f499c09498c9786dba6d67ae57664
Linux

Linux · 6.0
Linux

Component: Not specified by the source
File: sound/hda/codecs/side-codecs/cs35l41_hda.c, sound/hda/codecs/side-codecs/cs35l41_hda.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-64572

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-68202

Affected technology

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b7feeaca1f53b10df9b4de9eaf611767ca70dc92, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7478ef94b49bc9789cf1a003deec58b42283dde4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9d9be6fc30f384f92c4e1b8ed40bd9d4796b7833, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fb40d03ed792a8a8bf77aa0ee15df57b0ff78b07, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 24f0cabf173539f048946c8fc221131dc221f277, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6a10025c7fd09a7d2af37a3ae1da188569fce470, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 31a6163e301d832060f8236f1ed17cbc1ca198df, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2c4dc0ed50b05cd847a4b34b8cebf0775f19aeb9
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: sound/core/seq/seq_timer.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-68236

Affected technology

Linux · 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f to before 92b7c6e3a1546c6db868b07e93fa6fb950d1d3a0, 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f to before bf9c06c70f496f1ba4474caf95c69696c828340e, 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f to before 01ba5b36898d6258f584269537cc49e7b05cf7c6, 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f to before ba8bf1dcbb44773e7a0fd13b42925c644e0d5e76, 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f to before 5182e442e61397d446c36995b8f5676942d35b82, 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f to before 679f23f0a3606afcef1ffabd72222f00a54ad9e3, 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f to before 0676fecbb5242aa22c057e78326d6d6041db034c, 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f to before 9fa26b9eed6195bf840f39ac183b9a6237548755
Linux

Linux · 4.15
Linux

Component: Not specified by the source
File: drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-68245

Affected technology

Linux · b8f67b9ddf4f8fe6dd536590712b5912ad78f99c to before fe16a7e5336ae888751984e30c451fbf7cfa5df7, b8f67b9ddf4f8fe6dd536590712b5912ad78f99c to before 1173190412fb9d12e7efce76734118d9712ff970, b8f67b9ddf4f8fe6dd536590712b5912ad78f99c to before 5d5fb9124a2bba96a7807086d8fe0f7ce810d546, b8f67b9ddf4f8fe6dd536590712b5912ad78f99c to before 04cc4aa3617b0ed67e859f91f09de5d896a46f3a, 251840f22eff35c25de531a3fcb523df94c128c0, 6.6.160 to before 6.7
Linux

Linux · 6.9
Linux

Component: Not specified by the source
Function: from
File: drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-68278

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-68448

Affected technology

Linux · 5dae222a5ff0c269730393018a5539cc970a4726 to before 7e13e5b087375f1aee1e930503d20efa7084c0fa, 5dae222a5ff0c269730393018a5539cc970a4726 to before 46c296aa678828105842eee29a147508d803d926, 5dae222a5ff0c269730393018a5539cc970a4726 to before 9ec22c8113d8cf72ed7197bb61037dcad09e50d8, 5dae222a5ff0c269730393018a5539cc970a4726 to before 1f4a107439d2e43db176e34919933e617cb7f2c5, 5dae222a5ff0c269730393018a5539cc970a4726 to before a1e0eb8f55cfe09bb31a202a388babc411292656
Linux

Linux · 5.3
Linux

Component: Not specified by the source
File: fs/overlayfs/file.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-80536

Affected technology

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before acb4e26295e7f0e685815a3fd3d70bd8329cefa1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f3859c35a4fbc1c1c58431f684f808e43696891d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f7b5fa83e2c192be922121b764415fa8c7549ea1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b7528b42813f02724a78fce1da24d69d1bfc4d38, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7e32d4eebae6ca24f8a673c107fd7eca1f47afc2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f8288214459ead7e87d26e5822f62c14a4f2ed6b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before edaf5b6bd625356893da20d69a259b34a9de2694, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 813f8136a2ce1fee266d02a7df73db6e8a541604
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: fs/xfs/xfs_buf_item_recover.c

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.4/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-80590

Affected technology

Linux · f43798c27684ab925adde7d8acc34c78c6e50df8 to before cfdbc8c2e6f9ef5d8b8e54859da03dfe682b0bee, f43798c27684ab925adde7d8acc34c78c6e50df8 to before 29dda278a5ed272f2230ff4eaa23cf403107bba0, f43798c27684ab925adde7d8acc34c78c6e50df8 to before 14a8f3e10fa9a5abd6cedcdaa0c0b7ea9a09f234, f43798c27684ab925adde7d8acc34c78c6e50df8 to before 3edf721bb4b99d272c336631b44e3d8ff9a4f31b, f43798c27684ab925adde7d8acc34c78c6e50df8 to before dec2edb7aaf12a8878b3a03172ea8fc277b8eaad, f43798c27684ab925adde7d8acc34c78c6e50df8 to before c49f04e8d2b94dbb8d9fd99731dd3f00589c8ace, f43798c27684ab925adde7d8acc34c78c6e50df8 to before 69b73b74d9eb45f5560a8fe4fa406ada580e1340, f43798c27684ab925adde7d8acc34c78c6e50df8 to before da857e448322a2e871ce3ecc2900027041160d43, f43798c27684ab925adde7d8acc34c78c6e50df8 to before d5dc1e69fd7258ea605c9952e5d5947539159ae3
Linux

Linux · 2.6.27
Linux

Component: Not specified by the source
File: net/ipv4/inet_fragment.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.6/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-80887

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-89791

Affected technology

Linux · 59741451b49ce9964a9758c19d6f7df2a1255c75 to before 929cb3b9dc818dd9fa89d510d4ff2b255e42badd, 59741451b49ce9964a9758c19d6f7df2a1255c75 to before 0c739f54f1c77f3a4643160cd2e031b6c2f2aab6, 59741451b49ce9964a9758c19d6f7df2a1255c75 to before 58a8108bc73de0740d5b88150465d6690ea5f85f
Linux

Linux · 6.18
Linux

Component: Not specified by the source
File: kernel/events/core.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could gain higher privileges under the conditions described by the source. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.

CVE-2026-89811

Affected technology

Linux · cc009e613de6560eb499f8bc92c80a737752cb30 to before 5bbd7f283312d0209a0fedcc9d2d33b5afa5a7b1, cc009e613de6560eb499f8bc92c80a737752cb30 to before bbf5ad5268f36d7ebb7e99ae78fc73cffe98d372, cc009e613de6560eb499f8bc92c80a737752cb30 to before e230c546ed93741833ab5babb0b202f9c2052b45, cc009e613de6560eb499f8bc92c80a737752cb30 to before 6aae545c87087e4dc96e205452243813bfa73ba2, cc009e613de6560eb499f8bc92c80a737752cb30 to before 94e25cb6ab7f4f025bcdcd8ea79fda30f12843a4
Linux

Linux · 5.19
Linux

Component: Not specified by the source
File: drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-93817

Affected technology

Linux · 375637bc524952f1122ea22caf5a8f1fecad8228 to before 1d8e1e99b063de4179cc8af14d08115d74a37abf, 375637bc524952f1122ea22caf5a8f1fecad8228 to before cd8dab11046c03ab07899ce3fe2aa7d1a9702cf1, 375637bc524952f1122ea22caf5a8f1fecad8228 to before 6f1853b2b9f38f1343790bae8c0601b3f7554754, 375637bc524952f1122ea22caf5a8f1fecad8228 to before e62d4192e593630f355094adc467058a05bdc935
Linux

Linux · 4.7
Linux

Component: Not specified by the source
File: kernel/events/core.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-97493

Affected technology

Linux · d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 0786b38af822fcd153d565cc85be7dbd9fed4d25, d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 6db45123306c7167c6867ca3d24924bd7960d947, d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before f8f0985375c3b977757fd73e2b691ff1bf1ea7b9, d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before a99cd231cd924b7160fecb9fb3a94b801522323b
Linux

Linux · 4.2
Linux

Component: Not specified by the source
File: drivers/gpu/drm/amd/amdgpu/amdgpu_atombios.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · High privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality impact as low; integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.