Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-68081 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid gue... | 2026-10-30 |
| CVE-2026-64444 | high | 8.1 | No | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop The IE parsin... | 2026-10-30 |
| CVE-2026-64400 | high | 8.6 | No | In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent path traversal bypass by restricting caseless retry ksm... | 2026-10-30 |
| CVE-2026-64392 | critical | 9.1 | No | In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for delete-on-close Delete-on-close can... | 2026-10-30 |
| CVE-2026-64391 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for ADS I/O Alternate data streams are s... | 2026-10-30 |
| CVE-2026-64389 | high | 8.2 | No | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate NTLMv2 response before updating session key ksmbd_auth... | 2026-10-30 |
| CVE-2026-64388 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp with SMB3 POSIX Extensions Ownership (chow... | 2026-10-30 |
| CVE-2026-64345 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_printer: take kref only for successful open printer_ope... | 2026-10-30 |
| CVE-2026-64320 | critical | 9.1 | No | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page... | 2026-10-30 |
| CVE-2026-64319 | critical | 9.1 | No | In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bounds against transfer leng... | 2026-10-30 |
| CVE-2026-64163 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: test_kprobes: clear kprobes between test runs Running the kprobes sani... | 2026-10-30 |
| CVE-2026-64138 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate SID in parent security descriptor during ACL inheritanc... | 2026-10-30 |
| CVE-2026-64136 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlo... | 2026-10-30 |
| CVE-2026-64077 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: move to two-stage removal scheme Like previous pa... | 2026-10-30 |
| CVE-2026-64076 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: eb_tables: close module init race sashiko reports f... | 2026-10-30 |
| CVE-2026-64038 | medium | 4.7 | No | In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Stop work before releasing hwmon device Sashiko reports:... | 2026-10-30 |
| CVE-2026-64036 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: cgroup/rstat: validate cpu before css_rstat_cpu() access css_rstat_upd... | 2026-10-30 |
| CVE-2026-64025 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx sk_psock_str... | 2026-10-30 |
| CVE-2026-64017 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: blk-mq: pop cached request if it is usable When submitting a bio to bl... | 2026-10-30 |
| CVE-2026-64015 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: security/keys: fix missed RCU read section on lookup Nicholas Carlini... | 2026-10-30 |