Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-64555 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops() kvm_hyp_... | 2026-11-03 |
| CVE-2026-64554 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() br_i... | 2026-11-03 |
| CVE-2026-64552 | high | 8.4 | No | In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receive_big() receive_big() bounds the de... | 2026-11-03 |
| CVE-2026-64551 | critical | 9.1 | No | In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALE_COOKIE cause length before reading staleness When... | 2026-11-03 |
| CVE-2026-64550 | high | 7.3 | No | In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: validate MAP frame length before ingress parsing... | 2026-11-03 |
| CVE-2026-64548 | high | 8.4 | No | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() Whe... | 2026-11-03 |
| CVE-2026-64547 | high | 8.1 | No | In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packet_len before pad-byte access in rx_fix... | 2026-11-03 |
| CVE-2026-64546 | high | 7.1 | No | In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drm_parse_tiled_block() drm_parse_tiled_bloc... | 2026-11-03 |
| CVE-2026-64545 | high | 7.5 | No | In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdp_master_redirect() xdp_master_re... | 2026-11-03 |
| CVE-2026-64543 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() bearer_d... | 2026-11-03 |
| CVE-2026-64541 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket smc_cdc... | 2026-11-03 |
| CVE-2026-64540 | high | 8.1 | No | In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() genelink... | 2026-11-03 |
| CVE-2026-64539 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix stack OOB write when prepending the Flags AD eir_c... | 2026-11-03 |
| CVE-2026-64537 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: bridge: cfm: reject invalid CCM interval at configuration time ccm_tx_... | 2026-11-03 |
| CVE-2026-64536 | high | 8.1 | No | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop The loop... | 2026-11-03 |
| CVE-2026-64535 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar found vi... | 2026-11-03 |
| CVE-2026-64534 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error pa... | 2026-11-03 |
| CVE-2026-64533 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcns_follow in log_replay conversion log_replay() c... | 2026-11-03 |
| CVE-2026-64532 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocati... | 2026-11-03 |
| CVE-2026-64531 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch st... | 2026-11-03 |