Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-72494 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Replace waitqueue and flag with completion The driver prev... | 2026-10-30 |
| CVE-2026-72488 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: soundwire: fix bug in sdw_add_element_group_count found by syzkaller T... | 2026-10-30 |
| CVE-2026-72472 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: nfs: use nfsi->rwsem to protect traversal of the file lock list Lingfe... | 2026-10-30 |
| CVE-2026-72470 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: resize log->one_page_buf when adopting on-disk page size log... | 2026-10-30 |
| CVE-2026-72463 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resumption xfrm async resum... | 2026-10-30 |
| CVE-2026-72453 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error... | 2026-10-30 |
| CVE-2026-72440 | high | 7.1 | No | In the Linux kernel, the following vulnerability has been resolved: md/raid1: fix writes_pending and barrier reference leaks on write failu... | 2026-10-30 |
| CVE-2026-72439 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes_pending leak on write request failures raid10_ma... | 2026-10-30 |
| CVE-2026-72438 | high | 7.5 | No | In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes_pending and barrier reference leaks on discard fa... | 2026-10-30 |
| CVE-2026-72423 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Guard conntrack opts error writes The conntrack lookup and alloca... | 2026-10-30 |
| CVE-2026-72420 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5_Overlap races while breaking stripe batches KCSAN r... | 2026-10-30 |
| CVE-2026-72416 | high | 7.3 | No | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_compat: ebtables emulation must reject non-bridge target... | 2026-10-30 |
| CVE-2026-72405 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync... | 2026-10-30 |
| CVE-2026-72404 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()... | 2026-10-30 |
| CVE-2026-72398 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification after cookie unpacking In SCTP handshake,... | 2026-10-30 |
| CVE-2026-72395 | high | 7.1 | No | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus) Fix passing events to regulator core Sashiko reports:... | 2026-10-30 |
| CVE-2026-72383 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: sctp: fix addr_wq_timer race in sctp_free_addr_wq() sctp_free_addr_wq(... | 2026-10-30 |
| CVE-2026-72382 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject undersized DACLs before parsing ACEs parse_dacl() limits... | 2026-10-30 |
| CVE-2026-72380 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: xen/pvcalls: bound backend response req_id before indexing rsp[] pvcal... | 2026-10-30 |
| CVE-2026-72379 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid vfs_tmpf... | 2026-10-30 |