The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

38,897 matching vulnerabilities · Page 129 of 778

Linux50 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-63887 · Linux Linux

scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf

EPSS 0.8%CVSS 9.8

CVE-2026-63888 · Linux Linux

scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()

EPSS 0.8%CVSS 9.8

CVE-2026-63795 · Linux Linux

9p: avoid putting oldfid in p9_client_walk() error path

EPSS 0.6%CVSS 10.0

CVE-2026-63800 · Linux Linux

pNFS: Fix use-after-free in pnfs_update_layout()

EPSS 0.6%CVSS 9.8

CVE-2026-63886 · Linux Linux

scsi: target: iscsi: Validate CHAP_R length before base64 decode

EPSS 0.7%CVSS 9.8

CVE-2026-63912 · Linux Linux

xfrm: esp: restore combined single-frag length gate

EPSS 0.7%CVSS 9.8

CVE-2026-63922 · Linux Linux

ipv6: exthdrs: refresh nh after handling HAO option

EPSS 0.7%CVSS 9.8

CVE-2026-63924 · Linux Linux

ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()

EPSS 0.7%CVSS 9.8

CVE-2026-63979 · Linux Linux

net/handshake: hand off the pinned file reference to accept_doit

EPSS 0.6%CVSS 9.8

CVE-2026-64016 · Linux Linux

ksmbd: fix durable reconnect error path file lifetime

EPSS 0.7%CVSS 9.8

CVE-2026-64066 · Linux Linux

netfs: Fix netfs_read_to_pagecache() to pause on subreq failure

EPSS 0.6%CVSS 9.8

CVE-2026-64069 · Linux Linux

netfs: Fix cancellation of a DIO and single read subrequests

EPSS 0.6%CVSS 9.8

CVE-2026-64122 · Linux Linux

net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover

EPSS 0.6%CVSS 9.8

CVE-2026-64056 · Linux Linux

net: ethernet: cortina: Make RX SKB per-port

EPSS 0.6%CVSS 9.8

CVE-2026-64089 · Linux Linux

batman-adv: tt: fix negative last_changeset_len

EPSS 0.6%CVSS 9.8

CVE-2026-64125 · Linux Linux

net: bcmgenet: keep RBUF EEE/PM disabled

EPSS 0.6%CVSS 9.8

CVE-2026-63808 · Linux Linux

exfat: fix potential use-after-free in exfat_find_dir_entry()

EPSS 0.5%CVSS 9.8

CVE-2026-63825 · Linux Linux

gcov: use atomic counter updates to fix concurrent access crashes

EPSS 0.5%CVSS 9.8

CVE-2026-63978 · Linux Linux

net/handshake: Drain pending requests at net namespace exit

EPSS 0.5%CVSS 9.8

CVE-2026-63984 · Linux Linux

ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()

EPSS 0.5%CVSS 9.8

CVE-2026-63993 · Linux Linux

vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()

EPSS 0.5%CVSS 9.8

CVE-2026-63994 · Linux Linux

tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()

EPSS 0.5%CVSS 9.8

CVE-2026-64000 · Linux Linux

net: hsr: fix potential OOB access in supervision frame handling

EPSS 0.5%CVSS 9.8

CVE-2026-64007 · Linux Linux

netfilter: synproxy: refresh tcphdr after skb_ensure_writable

EPSS 0.5%CVSS 9.8

CVE-2026-64033 · Linux Linux

RDMA/rtrs: Fix use-after-free in path file creation cleanup

EPSS 0.5%CVSS 9.8

CVE-2026-64046 · Linux Linux

net: tls: prevent chain-after-chain in plain text SG

EPSS 0.5%CVSS 9.8

CVE-2026-64047 · Linux Linux

net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring

EPSS 0.5%CVSS 9.8

CVE-2026-64055 · Linux Linux

net: ethernet: cortina: Carry over frag counter

EPSS 0.5%CVSS 9.8

CVE-2026-64061 · Linux Linux

netfs: Fix early put of sink folio in netfs_read_gaps()

EPSS 0.5%CVSS 9.8

CVE-2026-64067 · Linux Linux

netfs: Fix missing barriers when accessing stream->subrequests locklessly

EPSS 0.5%CVSS 9.8

CVE-2026-64102 · Linux Linux

RDMA/siw: Reject MPA FPDU length underflow before signed receive math

EPSS 0.5%CVSS 9.8

CVE-2026-64113 · Linux Linux

ixgbevf: fix use-after-free in VEPA multicast source pruning

EPSS 0.5%CVSS 9.8

CVE-2026-64132 · Linux Linux

ipv6: ioam: refresh hdr pointer before ioam6_event()

EPSS 0.5%CVSS 9.8

CVE-2026-64035 · Linux Linux

igc: set tx buffer type for SMD frames

EPSS 0.4%CVSS 9.8

CVE-2026-64037 · Linux Linux

wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled

EPSS 0.4%CVSS 9.8

CVE-2026-64091 · Linux Linux

batman-adv: tt: fix TOCTOU race for reported vlans

EPSS 0.4%CVSS 9.8

CVE-2026-63830 · Linux Linux

net: skmsg: preserve sg.copy across SG transforms

EPSS 0.4%CVSS 9.4

CVE-2026-63857 · Linux Linux

net: airoha: Do not read uninitialized fragment address in airoha_dev_xmit()

EPSS 0.4%CVSS 9.8

CVE-2026-63992 · Linux Linux

tunnels: do not assume transport header in iptunnel_pmtud_check_icmp()

EPSS 0.5%CVSS 9.1

CVE-2026-64025 · Linux Linux

bpf, skmsg: fix verdict sk_data_ready racing with ktls rx

EPSS 0.4%CVSS 9.8

CVE-2026-64136 · Linux Linux

smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()

EPSS 0.4%CVSS 9.8

CVE-2026-64068 · Linux Linux

netfs: Fix missing locking around retry adding new subreqs

EPSS 0.4%CVSS 9.8

CVE-2026-64024 · Linux Linux

tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction

EPSS 0.3%CVSS 9.4

CVE-2026-63938 · Linux Linux

KVM: SEV: Check PSC request indices against the actual size of the buffer

EPSS 0.2%CVSS 9.3

CVE-2026-63939 · Linux Linux

KVM: SEV: Compute the correct max length of the in-GHCB scratch area

EPSS 0.2%CVSS 9.3

CVE-2026-63940 · Linux Linux

KVM: SEV: Ignore Port I/O requests of length '0'

EPSS 0.2%CVSS 9.3

CVE-2026-64080 · Linux Linux

firmware: arm_ffa: Snapshot notifier callbacks under lock

EPSS 0.2%CVSS 9.3

CVE-2026-64018 · Linux Linux

net: mana: validate rx_req_idx to prevent out-of-bounds array access

EPSS 0.1%CVSS 9.3

CVE-2026-64034 · Linux Linux

net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer

EPSS 0.1%CVSS 9.3

CVE-2026-64106 · Linux Linux

KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits

EPSS 0.1%CVSS 9.0