by Kastro CVE-2026-72226 · Linux Linux
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,809 matching vulnerabilities · Page 96 of 777
Linux
CVE-2026-72398 · Linux Linux
sctp: add INIT verification after cookie unpacking
CVE-2026-72217 · Linux Linux
SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing
CVE-2026-72220 · Linux Linux
sunrpc: harden rq_procinfo lifecycle to prevent double-free
CVE-2026-72221 · Linux Linux
sunrpc: wait for in-flight TLS handshake callback when cancel loses race
CVE-2026-72222 · Linux Linux
sunrpc: pin svc_xprt across the asynchronous TLS handshake callback
CVE-2026-72234 · Linux Linux
batman-adv: access unicast_ttvn skb->data only after skb realloc
CVE-2026-72251 · Linux Linux
netfilter: nf_nat_sip: reload possible stale data pointer
CVE-2026-72299 · Linux Linux
tipc: restrict socket queue dumps in enqueue tracepoints
CVE-2026-72317 · Linux Linux
SUNRPC: pin upper rpc_clnt across the TLS connect_worker
CVE-2026-72319 · Linux Linux
ipvs: ensure inner headers in ICMP errors are in headroom
CVE-2026-72322 · Linux Linux
ipv6: mcast: Fix potential UAF in MLD delayed work
CVE-2026-72323 · Linux Linux
ipv4: igmp: Fix potential UAF in igmp_gq_start_timer()
CVE-2026-72339 · Linux Linux
qede: fix off-by-one in BD ring consumption on build_skb failure
CVE-2026-72351 · Linux Linux
gue: validate REMCSUM private option length
CVE-2026-72355 · Linux Linux
netfs: Fix barriering when walking subrequest list
CVE-2026-72366 · Linux Linux
netfs: Fix netfs_create_write_req() to handle async cache object creation
CVE-2026-72381 · Linux Linux
ksmbd: fix use-after-free of fp->owner.name in durable handle owner check
CVE-2026-72393 · Linux Linux
eth: fbnic: don't cache shinfo across skb realloc
CVE-2026-72399 · Linux Linux
net: enetc: check the number of BDs needed for xdp_frame
CVE-2026-72421 · Linux Linux
ipv4: fib: Don't ignore error route in local/main tables.
CVE-2026-72422 · Linux Linux
ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE
CVE-2026-72429 · Linux Linux
ipv6: ioam: fix type confusion of dst_entry
CVE-2026-72436 · Linux Linux
netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types
CVE-2026-72451 · Linux Linux
xfrm: Fix xfrm state cache insertion race
CVE-2026-72466 · Linux Linux
xprtrdma: Fix bcall rep leak and unbounded peek
CVE-2026-72472 · Linux Linux
nfs: use nfsi->rwsem to protect traversal of the file lock list
CVE-2026-72473 · Linux Linux
xprtrdma: Decouple req recycling from RPC completion
CVE-2026-72477 · Linux Linux
fs/ntfs3: call _ntfs_bad_inode() when failing to rename
CVE-2026-72211 · Linux Linux
ntfs: grow index root value before reparent header update
CVE-2026-72248 · Linux Linux
netfilter: flowtable: support IPIP tunnel with direct xmit
CVE-2026-72249 · Linux Linux
netfilter: flowtable: use dst in this direction when pushing IPIP header
CVE-2026-72407 · Linux Linux
geneve: validate inner network offset in geneve_gro_complete()
CVE-2026-72408 · Linux Linux
geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint
CVE-2026-72417 · Linux Linux
netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto()
CVE-2026-72442 · Linux Linux
netfilter: flowtable: fix and simplify IP6IP6 tunnel handling
CVE-2026-72296 · Linux Linux
net: ife: require ETH_HLEN to be pullable in ife_decode()
CVE-2026-72318 · Linux Linux
cifs: validate DFS referral string offsets
CVE-2026-72320 · Linux Linux
netfilter: nft_lookup: fix catchall element handling with inverted lookups
CVE-2026-72348 · Linux Linux
netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop
CVE-2026-72463 · Linux Linux
xfrm: Fix dev use-after-free in xfrm async resumption
CVE-2026-72277 · Linux Linux
KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory
CVE-2026-72278 · Linux Linux
KVM: arm64: nv: Re-translate VNCR before injecting abort
CVE-2026-72288 · Linux Linux
KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling
CVE-2026-72289 · Linux Linux
KVM: arm64: vgic: Check the interrupt is still ours before migrating it
CVE-2026-72329 · Linux Linux
net/liquidio: drop cached VF pci_dev LUT
CVE-2026-72239 · Linux Linux
x86/virt/sev: Revert "Drop WBINVD before setting MSR_AMD64_SYSCFG_SNP_EN"
CVE-2026-72279 · Linux Linux
KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR
CVE-2026-72291 · Linux Linux
KVM: s390: Fix unlikely race in try_get_locked_pte()
CVE-2026-72412 · Linux Linux