By publication date

Exploited and new serious CVEs: August 2026

5,344 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 10 of 54

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2026-72112No exploit	io_uring/bpf-ops: reject re-registration of an already-bound opslinux · linux	High7.8	—	0.1%	Aug 15, 2026
33Monitor	CVE-2026-72133No exploit	spi: uniphier: Fix completion initialization order before devm_request_irq()linux · linux	High8.4	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72134No exploit	spi: imx: reconfigure for PIO when DMA cannot be startedlinux · linux	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72137No exploit	xfrm: nat_keepalive: avoid double free on send errorlinux · linux Pre-auth	Critical9.8	—	0.7%	Aug 15, 2026
39Monitor	CVE-2026-72139No exploit	tcp: defer md5sig_info kfree past RCU grace period in tcp_connectlinux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
30Monitor	CVE-2026-72141No exploit	i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ)linux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 15, 2026
33Monitor	CVE-2026-72146No exploit	dmaengine: sh: rz-dmac: Move interrupt request after everything is set uplinux · linux	High8.4	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72148No exploit	dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASKlinux · linux Pre-auth Race condition	High8.8	—	0.3%	Aug 15, 2026
33Monitor	CVE-2026-72151No exploit	tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_saltlinux · linux	High8.4	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72154No exploit	openrisc: Fix jump_label smp syncinglinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72171No exploit	mtd: slram: remove failed entries from the device listlinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72181No exploit	mips: sched: Fix CPUMASK_OFFSTACK memory corruptionlinux · linux	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72185No exploit	ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock()linux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
36Monitor	CVE-2026-72186No exploit	ntfs: make system files immutable to prevent corruptionlinux · linux Pre-auth	Critical9.1	—	0.5%	Aug 15, 2026
36Monitor	CVE-2026-72188No exploit	ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name()linux · linux Pre-auth	Critical9.1	—	0.5%	Aug 15, 2026
39Monitor	CVE-2026-72199No exploit	ntfs: validate resident index root values on lookuplinux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
39Monitor	CVE-2026-72201No exploit	ntfs: validate index entries on readinglinux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
30Monitor	CVE-2026-72202No exploit	ntfs: avoid heap allocation for free-cluster readahead statelinux · linux Pre-auth Denial of service	High7.5	—	0.4%	Aug 15, 2026
33Monitor	CVE-2026-72204No exploit	ntfs: centalize $INDEX_ROOT header validationlinux · linux	High8.4	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72206No exploit	ntfs: validate index block header more strictlylinux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
39Monitor	CVE-2026-72207No exploit	ntfs: not change 0-byte $DATA attribute to non-residentlinux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
39Monitor	CVE-2026-72208No exploit	ntfs: add bounds check before accessing EA entrieslinux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
39Monitor	CVE-2026-72209No exploit	ntfs: validate attribute values on lookuplinux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
39Monitor	CVE-2026-72210No exploit	ntfs: fix off-by-one in mapping pairs decoding bounds checkslinux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
39Monitor	CVE-2026-72211No exploit	ntfs: grow index root value before reparent header updatelinux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
39Monitor	CVE-2026-72217No exploit	SUNRPC: Bound-check xdr_buf_to_bvec() stores before writinglinux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
39Monitor	CVE-2026-72220No exploit	sunrpc: harden rq_procinfo lifecycle to prevent double-freelinux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
32Monitor	CVE-2026-72227No exploit	batman-adv: mcast: avoid OOB read of num_dests headerlinux · linux Pre-auth	High8.1	—	0.3%	Aug 15, 2026
37Monitor	CVE-2026-72239No exploit	x86/virt/sev: Revert "Drop WBINVD before setting MSR_AMD64_SYSCFG_SNP_EN"linux · linux	Critical9.3	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72248No exploit	netfilter: flowtable: support IPIP tunnel with direct xmitlinux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
39Monitor	CVE-2026-72249No exploit	netfilter: flowtable: use dst in this direction when pushing IPIP headerlinux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
37Monitor	CVE-2026-72277No exploit	KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memorylinux · linux	Critical9.3	—	0.1%	Aug 15, 2026
37Monitor	CVE-2026-72278No exploit	KVM: arm64: nv: Re-translate VNCR before injecting abortlinux · linux	Critical9.3	—	0.1%	Aug 15, 2026
36Monitor	CVE-2026-72279No exploit	KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCRlinux · linux	Critical9.0	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72283No exploit	KVM: x86: Nullify irqfd->producer if updating IRTE for bypass failslinux · linux	High8.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72285No exploit	KVM: TDX: Reject concurrent change to CPUID entry countlinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72287No exploit	KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into "normal" checkslinux · linux	High7.8	—	0.1%	Aug 15, 2026
37Monitor	CVE-2026-72291No exploit	KVM: s390: Fix unlikely race in try_get_locked_pte()linux · linux	Critical9.3	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72294No exploit	LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt()linux · linux	High8.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72295No exploit	LoongArch: KVM: Validate irqchip index in irqfd routinglinux · linux	High8.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72328No exploit	accel/amdxdna: Fix potential amdxdna_umap lifetime racelinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72340No exploit	net: microchip: vcap: fix races on the shared Super VCAP blocklinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72344No exploit	net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailablelinux · linux	High7.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72353No exploit	ntfs: avoid stale runlist element dereference in fallocatelinux · linux	High8.8	—	0.5%	Aug 15, 2026
35Monitor	CVE-2026-72354No exploit	ntfs: avoid stale runlist element dereference in MFT writebacklinux · linux	High8.8	—	0.5%	Aug 15, 2026
39Monitor	CVE-2026-72355No exploit	netfs: Fix barriering when walking subrequest listlinux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
30Monitor	CVE-2026-72356No exploit	cifs: Fix missing credit release on failure in cifs_issue_read()linux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 15, 2026
31Monitor	CVE-2026-72357No exploit	uprobes/x86: Use proper mm_struct in __in_uprobe_trampolinelinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72358No exploit	drm/xe/pt: prevent invalid cursor access for purged BOslinux · linux	High7.8	—	0.1%	Aug 15, 2026
28Monitor	CVE-2026-72364No exploit	netfs: Fix writeback error handlinglinux · linux	High7.1	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72368No exploit	cachefiles: Fix double unlock in nomem_d_alloc error pathlinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72369No exploit	minix: avoid overflow in bitmap block count calculationlinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72372No exploit	afs: Fix lack of locking around modifications of net->cells_dyn_inolinux · linux	High7.8	—	0.1%	Aug 15, 2026
30Monitor	CVE-2026-72378No exploit	afs: Fix error code in afs_extract_vl_addrs()linux · linux Pre-auth Denial of service	High7.5	—	0.7%	Aug 15, 2026
39Monitor	CVE-2026-72381No exploit	ksmbd: fix use-after-free of fp->owner.name in durable handle owner checklinux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
39Monitor	CVE-2026-72393No exploit	eth: fbnic: don't cache shinfo across skb realloclinux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
39Monitor	CVE-2026-72399No exploit	net: enetc: check the number of BDs needed for xdp_framelinux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
40Plan	CVE-2026-72407No exploit	geneve: validate inner network offset in geneve_gro_complete()linux · linux Pre-auth	Critical10.0	—	0.5%	Aug 15, 2026
40Plan	CVE-2026-72408No exploit	geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hintlinux · linux Pre-auth	Critical10.0	—	0.5%	Aug 15, 2026
31Monitor	CVE-2026-72410No exploit	octeontx2-af: Validate NIX maximum LFs correctlylinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72411No exploit	net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_worklinux · linux	High7.8	—	0.1%	Aug 15, 2026
37Monitor	CVE-2026-72412No exploit	s390/mm: Fix handling of _PAGE_UNUSED pte bitlinux · linux	Critical9.3	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72417No exploit	netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto()linux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
39Monitor	CVE-2026-72422No exploit	ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATElinux · linux Pre-auth	Critical9.8	—	0.7%	Aug 15, 2026
33Monitor	CVE-2026-72426No exploit	bpf: Preserve pointer spill metadata during half-slot cleanuplinux · linux	High8.4	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72429No exploit	ipv6: ioam: fix type confusion of dst_entrylinux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
39Monitor	CVE-2026-72442No exploit	netfilter: flowtable: fix and simplify IP6IP6 tunnel handlinglinux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
31Monitor	CVE-2026-72446No exploit	ALSA: usb-audio: qcom: reject stream disable with no active interfacelinux · linux	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72451No exploit	xfrm: Fix xfrm state cache insertion racelinux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
28Monitor	CVE-2026-72455No exploit	apparmor: fix uninitialised pointer passed to audit_log_untrustedstring()linux · linux	High7.1	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72459No exploit	apparmor: aa_label_alloc use aa_label_free on alloc failurelinux · linux	High7.8	—	0.1%	Aug 15, 2026
28Monitor	CVE-2026-72460No exploit	apparmor: check label build before no_new_privs testlinux · linux	High7.1	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72461No exploit	apparmor: fix refcount leak when updating the sk_ctxlinux · linux	High7.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72462No exploit	apparmor: fix race in unix socket mediation when peer_path is usedlinux · linux	High8.8	—	0.1%	Aug 15, 2026
30Monitor	CVE-2026-72465No exploit	xprtrdma: Sanitize the reply credit grant after parsinglinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 15, 2026
28Monitor	CVE-2026-72471No exploit	fs/ntfs3: prevent potential lcn remains uninitializedlinux · linux	High7.1	—	0.3%	Aug 15, 2026
31Monitor	CVE-2026-72480No exploit	iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handlinglinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72482No exploit	gpib: fix double decrement of descriptor_busy in command_ioctl()linux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72483No exploit	usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control()linux · linux	High7.8	—	0.1%	Aug 15, 2026
33Monitor	CVE-2026-72489No exploit	staging: nvec: fix use-after-free in nvec_rx_completed()linux · linux	High8.4	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72492No exploit	ksmbd: fix use-after-free in same_client_has_lease()linux · linux	High8.8	—	0.6%	Aug 15, 2026
33Monitor	CVE-2026-74275No exploit	cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach()linux · linux	High8.4	—	0.1%	Aug 15, 2026
40Plan	CVE-2026-74280No exploit	crypto: marvell/octeontx - fix DMA cleanup using wrong loop indexlinux · linux Pre-auth	Critical10.0	—	0.7%	Aug 15, 2026
35Monitor	CVE-2026-74285No exploit	net: Stop leased rxq before uninstalling its memory providerlinux · linux	High8.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74306No exploit	vfio/qat: fix f_pos race in qat_vf_resume_write()linux · linux	High7.8	—	0.1%	Aug 15, 2026
40Plan	CVE-2026-74309No exploit	vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handlerlinux · linux Pre-auth	Critical10.0	—	0.6%	Aug 15, 2026
31Monitor	CVE-2026-74311No exploit	virtio: rtc: tear down old virtqueues before restorelinux · linux	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-74315No exploit	lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file()linux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
35Monitor	CVE-2026-74328No exploit	iommufd: Destroy the pages content after detaching from dmabuflinux · linux	High8.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74343No exploit	kernfs: fix xattr race condition with multiple superblockslinux · linux Race condition	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74357No exploit	drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu_coredump ring dumplinux · linux	High7.8	—	0.1%	Aug 15, 2026
28Monitor	CVE-2026-74364No exploit	bpf: Reject exclusive maps as inner maps in map-in-maplinux · linux	High7.1	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74371No exploit	bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compatlinux · linux	High7.8	—	0.1%	Aug 15, 2026
33Monitor	CVE-2026-74383No exploit	nvme-pci: fix out-of-bounds access in nvme_setup_descriptor_poolslinux · linux	High8.4	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74403No exploit	crypto: ccp - Check for page allocation failure correctly in TIOlinux · linux	High7.8	—	0.1%	Aug 15, 2026
29Monitor	CVE-2026-74419No exploit	accel/amdxdna: Adjust size for copy_to_user()linux · linux	High7.3	—	0.1%	Aug 15, 2026
30Monitor	CVE-2026-74425No exploit	afs: handle CB.InitCallBackState3 requests without a server recordlinux · linux Pre-auth Denial of service	High7.5	—	0.3%	Aug 15, 2026
39Monitor	CVE-2026-74428No exploit	rxrpc: Fix double unlock in rxrpc_recvmsg()linux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
30Monitor	CVE-2026-74429No exploit	rxrpc: Fix the reception of a reply packet before data transmissionlinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 15, 2026
30Monitor	CVE-2026-74430No exploit	rxrpc: Fix ACKALL packet handlinglinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 15, 2026

CVE-2026-72112
31Monitor
io_uring/bpf-ops: reject re-registration of an already-bound ops
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72133
33Monitor
spi: uniphier: Fix completion initialization order before devm_request_irq()
HighCVSS 8.4No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72134
31Monitor
spi: imx: reconfigure for PIO when DMA cannot be started
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72137
39Monitor
xfrm: nat_keepalive: avoid double free on send error
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72139
39Monitor
tcp: defer md5sig_info kfree past RCU grace period in tcp_connect
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72141
30Monitor
i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-72146
33Monitor
dmaengine: sh: rz-dmac: Move interrupt request after everything is set up
HighCVSS 8.4No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72148
35Monitor
dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Race condition
linux · linuxAug 15, 2026
CVE-2026-72151
33Monitor
tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_salt
HighCVSS 8.4No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72154
31Monitor
openrisc: Fix jump_label smp syncing
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72171
31Monitor
mtd: slram: remove failed entries from the device list
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72181
31Monitor
mips: sched: Fix CPUMASK_OFFSTACK memory corruption
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72185
39Monitor
ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock()
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72186
36Monitor
ntfs: make system files immutable to prevent corruption
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72188
36Monitor
ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name()
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72199
39Monitor
ntfs: validate resident index root values on lookup
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72201
39Monitor
ntfs: validate index entries on reading
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72202
30Monitor
ntfs: avoid heap allocation for free-cluster readahead state
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-72204
33Monitor
ntfs: centalize $INDEX_ROOT header validation
HighCVSS 8.4No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72206
39Monitor
ntfs: validate index block header more strictly
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72207
39Monitor
ntfs: not change 0-byte $DATA attribute to non-resident
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72208
39Monitor
ntfs: add bounds check before accessing EA entries
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72209
39Monitor
ntfs: validate attribute values on lookup
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72210
39Monitor
ntfs: fix off-by-one in mapping pairs decoding bounds checks
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72211
39Monitor
ntfs: grow index root value before reparent header update
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72217
39Monitor
SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72220
39Monitor
sunrpc: harden rq_procinfo lifecycle to prevent double-free
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72227
32Monitor
batman-adv: mcast: avoid OOB read of num_dests header
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72239
37Monitor
x86/virt/sev: Revert "Drop WBINVD before setting MSR_AMD64_SYSCFG_SNP_EN"
CriticalCVSS 9.3No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72248
39Monitor
netfilter: flowtable: support IPIP tunnel with direct xmit
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72249
39Monitor
netfilter: flowtable: use dst in this direction when pushing IPIP header
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72277
37Monitor
KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory
CriticalCVSS 9.3No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72278
37Monitor
KVM: arm64: nv: Re-translate VNCR before injecting abort
CriticalCVSS 9.3No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72279
36Monitor
KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR
CriticalCVSS 9.0No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72283
35Monitor
KVM: x86: Nullify irqfd->producer if updating IRTE for bypass fails
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72285
31Monitor
KVM: TDX: Reject concurrent change to CPUID entry count
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72287
31Monitor
KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into "normal" checks
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72291
37Monitor
KVM: s390: Fix unlikely race in try_get_locked_pte()
CriticalCVSS 9.3No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72294
35Monitor
LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt()
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72295
35Monitor
LoongArch: KVM: Validate irqchip index in irqfd routing
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72328
31Monitor
accel/amdxdna: Fix potential amdxdna_umap lifetime race
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72340
31Monitor
net: microchip: vcap: fix races on the shared Super VCAP block
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72344
31Monitor
net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72353
35Monitor
ntfs: avoid stale runlist element dereference in fallocate
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72354
35Monitor
ntfs: avoid stale runlist element dereference in MFT writeback
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72355
39Monitor
netfs: Fix barriering when walking subrequest list
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72356
30Monitor
cifs: Fix missing credit release on failure in cifs_issue_read()
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-72357
31Monitor
uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72358
31Monitor
drm/xe/pt: prevent invalid cursor access for purged BOs
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72364
28Monitor
netfs: Fix writeback error handling
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72368
31Monitor
cachefiles: Fix double unlock in nomem_d_alloc error path
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72369
31Monitor
minix: avoid overflow in bitmap block count calculation
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72372
31Monitor
afs: Fix lack of locking around modifications of net->cells_dyn_ino
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72378
30Monitor
afs: Fix error code in afs_extract_vl_addrs()
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-72381
39Monitor
ksmbd: fix use-after-free of fp->owner.name in durable handle owner check
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72393
39Monitor
eth: fbnic: don't cache shinfo across skb realloc
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72399
39Monitor
net: enetc: check the number of BDs needed for xdp_frame
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72407
40Plan
geneve: validate inner network offset in geneve_gro_complete()
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72408
40Plan
geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72410
31Monitor
octeontx2-af: Validate NIX maximum LFs correctly
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72411
31Monitor
net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72412
37Monitor
s390/mm: Fix handling of _PAGE_UNUSED pte bit
CriticalCVSS 9.3No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72417
39Monitor
netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto()
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72422
39Monitor
ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72426
33Monitor
bpf: Preserve pointer spill metadata during half-slot cleanup
HighCVSS 8.4No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72429
39Monitor
ipv6: ioam: fix type confusion of dst_entry
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72442
39Monitor
netfilter: flowtable: fix and simplify IP6IP6 tunnel handling
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72446
31Monitor
ALSA: usb-audio: qcom: reject stream disable with no active interface
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72451
39Monitor
xfrm: Fix xfrm state cache insertion race
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72455
28Monitor
apparmor: fix uninitialised pointer passed to audit_log_untrustedstring()
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72459
31Monitor
apparmor: aa_label_alloc use aa_label_free on alloc failure
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72460
28Monitor
apparmor: check label build before no_new_privs test
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72461
31Monitor
apparmor: fix refcount leak when updating the sk_ctx
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72462
35Monitor
apparmor: fix race in unix socket mediation when peer_path is used
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72465
30Monitor
xprtrdma: Sanitize the reply credit grant after parsing
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-72471
28Monitor
fs/ntfs3: prevent potential lcn remains uninitialized
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72480
31Monitor
iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72482
31Monitor
gpib: fix double decrement of descriptor_busy in command_ioctl()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72483
31Monitor
usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72489
33Monitor
staging: nvec: fix use-after-free in nvec_rx_completed()
HighCVSS 8.4No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72492
35Monitor
ksmbd: fix use-after-free in same_client_has_lease()
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74275
33Monitor
cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach()
HighCVSS 8.4No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74280
40Plan
crypto: marvell/octeontx - fix DMA cleanup using wrong loop index
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74285
35Monitor
net: Stop leased rxq before uninstalling its memory provider
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74306
31Monitor
vfio/qat: fix f_pos race in qat_vf_resume_write()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74309
40Plan
vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74311
31Monitor
virtio: rtc: tear down old virtqueues before restore
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74315
39Monitor
lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file()
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74328
35Monitor
iommufd: Destroy the pages content after detaching from dmabuf
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74343
31Monitor
kernfs: fix xattr race condition with multiple superblocks
HighCVSS 7.8No exploitEPSS 0%
- Race condition
linux · linuxAug 15, 2026
CVE-2026-74357
31Monitor
drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu_coredump ring dump
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74364
28Monitor
bpf: Reject exclusive maps as inner maps in map-in-map
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74371
31Monitor
bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74383
33Monitor
nvme-pci: fix out-of-bounds access in nvme_setup_descriptor_pools
HighCVSS 8.4No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74403
31Monitor
crypto: ccp - Check for page allocation failure correctly in TIO
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74419
29Monitor
accel/amdxdna: Adjust size for copy_to_user()
HighCVSS 7.3No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74425
30Monitor
afs: handle CB.InitCallBackState3 requests without a server record
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74428
39Monitor
rxrpc: Fix double unlock in rxrpc_recvmsg()
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74429
30Monitor
rxrpc: Fix the reception of a reply packet before data transmission
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74430
30Monitor
rxrpc: Fix ACKALL packet handling
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026