The Linux kernel — the core of the OS that runs every container and drives the hardware.
Version: 6.18.45
Type: Kernel
License:
| Expand | CVE | Title | ||
|---|---|---|---|---|
| CVE-2026-100075 Open CVE-2026-100075 in a new tab | RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters | Not affected | Critical | |
| CVE-2026-31501 Open CVE-2026-31501 in a new tab | net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path | Not affected | Critical | |
| CVE-2026-43414 Open CVE-2026-43414 in a new tab | scsi: qla2xxx: Completely fix fcport double free | Not affected | Critical | |
| CVE-2026-64067 Open CVE-2026-64067 in a new tab | netfs: Fix missing barriers when accessing stream->subrequests locklessly | Not affected | Critical | |
| CVE-2026-64068 Open CVE-2026-64068 in a new tab | netfs: Fix missing locking around retry adding new subreqs | Not affected | Critical | |
| CVE-2026-64160 Open CVE-2026-64160 in a new tab | netfs: Fix potential for tearing in ->remote_i_size and ->zero_point | Not affected | Critical | |
| CVE-2026-68082 Open CVE-2026-68082 in a new tab | libceph: fix two unsafe bare decodes in decode_lockers() | Not affected | Critical | |
| CVE-2026-68159 Open CVE-2026-68159 in a new tab | libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE | Not affected | Critical | |
| CVE-2026-68431 Open CVE-2026-68431 in a new tab | ksmbd: validate minimum PDU size for transform requests | Not affected | Critical | |
| CVE-2026-72064 Open CVE-2026-72064 in a new tab | net: mana: Sync page pool RX frags for CPU | Not affected | Critical | |
| CVE-2026-72329 Open CVE-2026-72329 in a new tab | net/liquidio: drop cached VF pci_dev LUT | Not affected | Critical | |
| CVE-2026-72355 Open CVE-2026-72355 in a new tab | netfs: Fix barriering when walking subrequest list | Not affected | Critical | |
| CVE-2026-72477 Open CVE-2026-72477 in a new tab | fs/ntfs3: call _ntfs_bad_inode() when failing to rename | Not affected | Critical | |
| CVE-2026-72493 Open CVE-2026-72493 in a new tab | net: serialize netif_running() check in enqueue_to_backlog() | Not affected | Critical | |
| CVE-2026-72494 Open CVE-2026-72494 in a new tab | RDMA/irdma: Replace waitqueue and flag with completion | Not affected | Critical | |
| CVE-2026-72496 Open CVE-2026-72496 in a new tab | RDMA/bnxt_re: Proper rollback if the ioremap fails | Not affected | Critical | |
| CVE-2026-74269 Open CVE-2026-74269 in a new tab | bnxt: fix head underflow on XDP head-grow | Not affected | Critical | |
| CVE-2026-74350 Open CVE-2026-74350 in a new tab | ocfs2: validate fast symlink target during inode read | Not affected | Critical | |
| CVE-2026-74517 Open CVE-2026-74517 in a new tab | KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs | Not affected | Critical | |
| CVE-2026-74521 Open CVE-2026-74521 in a new tab | ksmbd: use memcmp() to compare ClientGUIDs | Not affected | Critical | |
| CVE-2026-74568 Open CVE-2026-74568 in a new tab | KVM: arm64: vgic: Fix race between LPI release and re-registration | Not affected | Critical | |
| CVE-2026-74723 Open CVE-2026-74723 in a new tab | btrfs: lzo: reject inline extents without valid headers | Not affected | Critical | |
| CVE-2026-74737 Open CVE-2026-74737 in a new tab | net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG | Not affected | Critical | |
| CVE-2026-74743 Open CVE-2026-74743 in a new tab | macvlan: inherit needed_headroom and needed_tailroom from lowerdev | Not affected | Critical | |
| CVE-2026-74744 Open CVE-2026-74744 in a new tab | ipvlan: inherit needed_headroom and needed_tailroom from phy_dev | Not affected | Critical | |
| CVE-2026-74746 Open CVE-2026-74746 in a new tab | netfilter: flowtable: publish GC-visible tuple last | Not affected | Critical | |
| CVE-2026-74752 Open CVE-2026-74752 in a new tab | sctp: validate cookie AUTH state before use | Not affected | Critical | |
| CVE-2026-80519 Open CVE-2026-80519 in a new tab | ovpn: finish crypto callback cleanup before peer release | Not affected | Critical | |
| CVE-2026-80528 Open CVE-2026-80528 in a new tab | ceph: avoid fs reclaim while using current->journal_info | Not affected | Critical | |
| CVE-2026-80551 Open CVE-2026-80551 in a new tab | s390/vfio_ccw: Ensure first IDAW remains constant | Not affected | Critical | |
| CVE-2026-80554 Open CVE-2026-80554 in a new tab | s390/vfio_ccw: Limit the number of channel program segments | Not affected | Critical | |
| CVE-2026-80557 Open CVE-2026-80557 in a new tab | libceph: fix OOB read in decode_watchers() via missing bounds check | Not affected | Critical | |
| CVE-2026-80558 Open CVE-2026-80558 in a new tab | libceph: Avoid using invalid osd indices from primary_temp | Not affected | Critical | |
| CVE-2026-80561 Open CVE-2026-80561 in a new tab | libceph: fix multiple unsafe decodes in decode_locker() | Not affected | Critical | |
| CVE-2026-80585 Open CVE-2026-80585 in a new tab | mptcp: fastopen: only mark MPTFO subflows with SYN data | Not affected | Critical | |
| CVE-2026-80586 Open CVE-2026-80586 in a new tab | mptcp: options: reset DSS fields in case of unexpected size | Not affected | Critical | |
| CVE-2026-80587 Open CVE-2026-80587 in a new tab | mptcp: avoid combining some incoming suboptions | Not affected | Critical | |
| CVE-2026-80589 Open CVE-2026-80589 in a new tab | block: stop the timeout timer when releasing a never added disk | Not affected | Critical | |
| CVE-2026-80634 Open CVE-2026-80634 in a new tab | netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag | Not affected | Critical | |
| CVE-2026-80693 Open CVE-2026-80693 in a new tab | idpf: bound interrupt-vector register fill to the allocated array | Not affected | Critical | |
| CVE-2026-80725 Open CVE-2026-80725 in a new tab | net: gro: properly validate BIG TCP aggregation criteria | Not affected | Critical | |
| CVE-2026-80945 Open CVE-2026-80945 in a new tab | crypto: iaa - unmap dst before software fallback on decompress | Not affected | Critical | |
| CVE-2026-80976 Open CVE-2026-80976 in a new tab | seg6: reset IP6CB after IPv6 decapsulation | Not affected | Critical | |
| CVE-2026-80980 Open CVE-2026-80980 in a new tab | net/smc: stop killed, freed and out_of_sync sharing a byte | Not affected | Critical | |
| CVE-2026-80981 Open CVE-2026-80981 in a new tab | net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() | Not affected | Critical | |
| CVE-2026-80986 Open CVE-2026-80986 in a new tab | net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages | Not affected | Critical | |
| CVE-2026-81002 Open CVE-2026-81002 in a new tab | xdp: fix zero-copy frame layout | Not affected | Critical | |
| CVE-2026-89448 Open CVE-2026-89448 in a new tab | iommu/vt-d: Force requesting ACS when tboot is enabled | Not affected | Critical | |
| CVE-2026-89478 Open CVE-2026-89478 in a new tab | sctp: drop a chunk if its transport was removed | Not affected | Critical | |
| CVE-2026-89479 Open CVE-2026-89479 in a new tab | sctp: stop processing a packet once its association is deleted | Not affected | Critical |
RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters
net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path
scsi: qla2xxx: Completely fix fcport double free
netfs: Fix missing barriers when accessing stream->subrequests locklessly
netfs: Fix missing locking around retry adding new subreqs
netfs: Fix potential for tearing in ->remote_i_size and ->zero_point
libceph: fix two unsafe bare decodes in decode_lockers()
libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE
ksmbd: validate minimum PDU size for transform requests
net: mana: Sync page pool RX frags for CPU
net/liquidio: drop cached VF pci_dev LUT
netfs: Fix barriering when walking subrequest list
fs/ntfs3: call _ntfs_bad_inode() when failing to rename
net: serialize netif_running() check in enqueue_to_backlog()
RDMA/irdma: Replace waitqueue and flag with completion
RDMA/bnxt_re: Proper rollback if the ioremap fails
bnxt: fix head underflow on XDP head-grow
ocfs2: validate fast symlink target during inode read
KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs
ksmbd: use memcmp() to compare ClientGUIDs
KVM: arm64: vgic: Fix race between LPI release and re-registration
btrfs: lzo: reject inline extents without valid headers
net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG
macvlan: inherit needed_headroom and needed_tailroom from lowerdev
ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
netfilter: flowtable: publish GC-visible tuple last
sctp: validate cookie AUTH state before use
ovpn: finish crypto callback cleanup before peer release
ceph: avoid fs reclaim while using current->journal_info
s390/vfio_ccw: Ensure first IDAW remains constant
s390/vfio_ccw: Limit the number of channel program segments
libceph: fix OOB read in decode_watchers() via missing bounds check
libceph: Avoid using invalid osd indices from primary_temp
libceph: fix multiple unsafe decodes in decode_locker()
mptcp: fastopen: only mark MPTFO subflows with SYN data
mptcp: options: reset DSS fields in case of unexpected size
mptcp: avoid combining some incoming suboptions
block: stop the timeout timer when releasing a never added disk
netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag
idpf: bound interrupt-vector register fill to the allocated array
net: gro: properly validate BIG TCP aggregation criteria
crypto: iaa - unmap dst before software fallback on decompress
seg6: reset IP6CB after IPv6 decapsulation
net/smc: stop killed, freed and out_of_sync sharing a byte
net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link()
net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages
xdp: fix zero-copy frame layout
iommu/vt-d: Force requesting ACS when tboot is enabled
sctp: drop a chunk if its transport was removed
sctp: stop processing a packet once its association is deleted
Showing 1–50 of 3303