By publication date

Exploited and new serious CVEs: August 2026

5,274 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 12 of 53

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2026-72389No exploit	bridge: stp: Fix a potential use-after-free when deleting a bridgelinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72390No exploit	net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAFlinux · linux Race condition	High7.8	—	0.1%	Aug 15, 2026
28Monitor	CVE-2026-72395No exploit	hwmon: (pmbus) Fix passing events to regulator corelinux · linux	High7.1	—	0.1%	Aug 15, 2026
28Monitor	CVE-2026-72397No exploit	hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid()linux · linux	High7.1	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72398No exploit	sctp: add INIT verification after cookie unpackinglinux · linux Pre-auth	Critical9.8	—	0.8%	Aug 15, 2026
31Monitor	CVE-2026-72400No exploit	seg6: validate SRH length before reading fixed fieldslinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72404No exploit	tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()linux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72405No exploit	net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_synclinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72406No exploit	net: sungem: fix probe error cleanuplinux · linux	High7.8	—	0.1%	Aug 15, 2026
30Monitor	CVE-2026-72409No exploit	net: mvneta: re-enable percpu interrupt on resumelinux · linux Pre-auth Denial of service	High7.5	—	0.7%	Aug 15, 2026
28Monitor	CVE-2026-72415No exploit	ASoC: SDCA: Validate written enum value in ge_put_enum_double()linux · linux	High7.1	—	0.1%	Aug 15, 2026
29Monitor	CVE-2026-72416No exploit	netfilter: nft_compat: ebtables emulation must reject non-bridge targetslinux · linux	High7.3	—	0.1%	Aug 15, 2026
30Monitor	CVE-2026-72418No exploit	netfilter: nf_conncount: prevent connlimit drops for early confirmed ctlinux · linux Pre-auth Denial of service	High7.5	—	0.7%	Aug 15, 2026
31Monitor	CVE-2026-72419No exploit	netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()linux · linux	High7.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72420No exploit	md/raid5: avoid R5_Overlap races while breaking stripe batcheslinux · linux	High8.8	—	0.6%	Aug 15, 2026
40Plan	CVE-2026-72421No exploit	ipv4: fib: Don't ignore error route in local/main tables.linux · linux Pre-auth	Critical10.0	—	0.5%	Aug 15, 2026
35Monitor	CVE-2026-72423No exploit	bpf: Guard conntrack opts error writeslinux · linux	High8.8	—	0.1%	Aug 15, 2026
28Monitor	CVE-2026-72425No exploit	ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()linux · linux Denial of service	High7.1	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72427No exploit	bpf: Fix effective prog array index with BPF_F_PREORDERlinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72434No exploit	netfilter: ipset: make sure gc is properly stoppedlinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72435No exploit	netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()linux · linux	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72436No exploit	netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash typeslinux · linux Pre-auth	Critical9.8	—	0.7%	Aug 15, 2026
30Monitor	CVE-2026-72438No exploit	md/raid10: fix writes_pending and barrier reference leaks on discard failureslinux · linux Pre-auth Denial of service	High7.5	—	0.5%	Aug 15, 2026
28Monitor	CVE-2026-72440No exploit	md/raid1: fix writes_pending and barrier reference leaks on write failureslinux · linux	High7.1	—	0.4%	Aug 15, 2026
31Monitor	CVE-2026-72444No exploit	flow_dissector: check device type before reading ETH_ADDRSlinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72449No exploit	drm/amdkfd: fix list_del corruption in kfd_criu_resume_svmlinux · linux Local privilege escalation	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72450No exploit	xfrm: validate selector family and prefixlen during matchlinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72452No exploit	drm/i915: clear CRTC color blob pointers after dropping refslinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72454No exploit	i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev()linux · linux	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72463No exploit	xfrm: Fix dev use-after-free in xfrm async resumptionlinux · linux Pre-auth	Critical9.8	—	0.4%	Aug 15, 2026
30Monitor	CVE-2026-72464No exploit	xprtrdma: Repost Receive buffers for malformed replieslinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 15, 2026
39Monitor	CVE-2026-72466No exploit	xprtrdma: Fix bcall rep leak and unbounded peeklinux · linux Pre-auth	Critical9.8	—	0.7%	Aug 15, 2026
35Monitor	CVE-2026-72469No exploit	xprtrdma: Fix ep kref imbalance on ADDR_CHANGElinux · linux Pre-auth	High8.8	—	0.3%	Aug 15, 2026
31Monitor	CVE-2026-72470No exploit	fs/ntfs3: resize log->one_page_buf when adopting on-disk page sizelinux · linux	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72472No exploit	nfs: use nfsi->rwsem to protect traversal of the file lock listlinux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
39Monitor	CVE-2026-72473No exploit	xprtrdma: Decouple req recycling from RPC completionlinux · linux Pre-auth	Critical9.8	—	0.7%	Aug 15, 2026
31Monitor	CVE-2026-72476No exploit	dmaengine: Fix possible use after freelinux · linux	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72477No exploit	fs/ntfs3: call _ntfs_bad_inode() when failing to renamelinux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
33Monitor	CVE-2026-72478No exploit	fs/ntfs3: add bounds check to run_get_highest_vcn()linux · linux	High8.4	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72485No exploit	coresight: platform: defer connection counter increment until alloc succeedslinux · linux	High7.8	—	0.1%	Aug 15, 2026
30Monitor	CVE-2026-72487No exploit	PCI: Check ROM header and data structure addr before accessinglinux · linux	High7.7	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72488No exploit	soundwire: fix bug in sdw_add_element_group_count found by syzkallerlinux · linux	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72491No exploit	net/9p: fix race condition on rdma->state in trans_rdma.clinux · linux Pre-auth Race condition	Critical9.8	—	0.7%	Aug 15, 2026
39Monitor	CVE-2026-72493No exploit	net: serialize netif_running() check in enqueue_to_backlog()linux · linux Race condition	Critical9.9	—	0.4%	Aug 15, 2026
39Monitor	CVE-2026-72494No exploit	RDMA/irdma: Replace waitqueue and flag with completionlinux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
37Monitor	CVE-2026-72495No exploit	RDMA/bnxt_re: Avoid repeated requests to allocate WC pageslinux · linux	Critical9.3	—	0.1%	Aug 15, 2026
36Monitor	CVE-2026-72496No exploit	RDMA/bnxt_re: Proper rollback if the ioremap failslinux · linux	Critical9.2	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72497No exploit	RDMA/bnxt_re: Add a max slot check for SQlinux · linux	High8.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72499No exploit	RDMA/bnxt_re: Free CQ toggle page after firmware teardownlinux · linux	High8.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72500No exploit	RDMA/bnxt_re: Free SRQ toggle page after firmware teardownlinux · linux	High8.8	—	0.1%	Aug 15, 2026
30Monitor	CVE-2026-72502No exploit	tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)linux · linux Pre-auth Denial of service	High7.5	—	0.7%	Aug 15, 2026
39Monitor	CVE-2026-74255No exploit	tipc: fix UAF in tipc_l2_send_msg()linux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
33Monitor	CVE-2026-74256No exploit	bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds checklinux · linux	High8.4	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74257No exploit	sockmap: Fix use-after-free in udp_bpf_recvmsg()linux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74258No exploit	bpf: Guard __get_user acesss with access_ok for uprobe_multi datalinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74260No exploit	netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use themlinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74262No exploit	kcm: use WRITE_ONCE() when changing lower socket callbackslinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74264No exploit	net: watchdog: fix refcount tracking raceslinux · linux Race condition	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-74267No exploit	net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlenlinux · linux Pre-auth	Critical9.8	—	0.7%	Aug 15, 2026
39Monitor	CVE-2026-74268No exploit	tcp: clear sock_ops cb flags before force-closing a child socketlinux · linux Pre-auth	Critical9.8	—	0.7%	Aug 15, 2026
39Monitor	CVE-2026-74269No exploit	bnxt: fix head underflow on XDP head-growlinux · linux Pre-auth	Critical9.8	—	0.4%	Aug 15, 2026
31Monitor	CVE-2026-74270No exploit	handshake: Require admin permission for DONE commandlinux · linux Local privilege escalation	High7.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-74277No exploit	iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA pathlinux · linux	High8.8	—	0.1%	Aug 15, 2026
40Plan	CVE-2026-74279No exploit	crypto: cavium/cpt - fix DMA cleanup using wrong loop indexlinux · linux Pre-auth	Critical10.0	—	0.7%	Aug 15, 2026
30Monitor	CVE-2026-74281No exploit	tipc: reject inverted service ranges from peer bindingslinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 15, 2026
30Monitor	CVE-2026-74282No exploit	tipc: prevent snt_unacked underflow on CONN_ACKlinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 15, 2026
31Monitor	CVE-2026-74283No exploit	tipc: require net admin for TIPCv2 netlink mutatorslinux · linux Local privilege escalation	High7.8	—	0.1%	Aug 15, 2026
36Monitor	CVE-2026-74287No exploit	sctp: validate embedded address parameter lengthlinux · linux Pre-auth	Critical9.1	—	0.5%	Aug 15, 2026
31Monitor	CVE-2026-74288No exploit	net: fib_rules: Don't dump dying fib_rule in fib_rules_dump().linux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74289No exploit	ipv4: fib: Don't dump dying fib_info in fib_leaf_notify().linux · linux	High7.8	—	0.1%	Aug 15, 2026
28Monitor	CVE-2026-74292No exploit	ASoC: tegra: tegra210_ahub: Validate written enum valuelinux · linux	High7.1	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74293No exploit	ASoC: fsl: fsl_audmix: Validate written enum valueslinux · linux	High7.8	—	0.1%	Aug 15, 2026
29Monitor	CVE-2026-74294No exploit	ASoC: meson: aiu: Validate written enum valueslinux · linux	High7.3	—	0.1%	Aug 15, 2026
28Monitor	CVE-2026-74295No exploit	ASoC: codecs: hdac_hdmi: Validate written enum valuelinux · linux	High7.1	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74296No exploit	RDMA/mlx5: Release the HW‑provided UAR index rather than the SW onelinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74297No exploit	RDMA/mlx5: Fix undefined shift of user RQ WQE sizelinux · linux	High7.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-74300No exploit	Bluetooth: hci: validate codec capability element lengthlinux · linux Pre-auth	High8.8	—	0.4%	Aug 15, 2026
31Monitor	CVE-2026-74302No exploit	Bluetooth: hci_core: Fix UAF in hci_unregister_dev()linux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74305No exploit	bpf: Tighten cgroup storage cookie checks for prog arrayslinux · linux	High7.8	—	0.1%	Aug 15, 2026
37Monitor	CVE-2026-74310No exploit	vhost/net: complete zerocopy ubufs only oncelinux · linux	Critical9.3	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74312No exploit	vhost/vdpa: validate virtqueue index in mmap and fault pathslinux · linux	High7.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-74313No exploit	vduse: hold vduse_lock across IDR lookup in open pathlinux · linux	High8.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74314No exploit	bpf: Cancel special fields on map value recyclelinux · linux	High7.8	—	0.1%	Aug 15, 2026
30Monitor	CVE-2026-74316No exploit	NFSD: Handle layout stid in nfsd4_drop_revoked_stid()linux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 15, 2026
31Monitor	CVE-2026-74317No exploit	ixgbe: do not configure xps for XDP queueslinux · linux	High7.8	—	0.1%	Aug 15, 2026
30Monitor	CVE-2026-74321No exploit	btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()linux · linux Pre-auth Denial of service	High7.5	—	0.7%	Aug 15, 2026
35Monitor	CVE-2026-74323No exploit	wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb()linux · linux Pre-auth	High8.8	—	0.3%	Aug 15, 2026
31Monitor	CVE-2026-74325No exploit	wifi: mt76: use kfree_rcu for offchannel link in mt76_put_vif_phy_linklinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74330No exploit	configfs: fix lockless traversals of ->s_childrenlinux · linux	High7.8	—	0.1%	Aug 15, 2026
33Monitor	CVE-2026-74332No exploit	ASoC: amd: acp-sdw-sof: Bound DAI link iterationlinux · linux	High8.4	—	0.1%	Aug 15, 2026
33Monitor	CVE-2026-74333No exploit	ASoC: amd: acp-sdw-legacy: Bound DAI link iterationlinux · linux	High8.4	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74334No exploit	RDMA/nldev: Fix locking when accessing mr->pdlinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74338No exploit	bpf: Reject sleepable BPF_LSM_CGROUP programs at load timelinux · linux	High7.8	—	0.1%	Aug 15, 2026
32Monitor	CVE-2026-74340No exploit	wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indicationlinux · linux Pre-auth	High8.1	—	0.4%	Aug 15, 2026
35Monitor	CVE-2026-74341No exploit	wifi: wcn36xx: fix heap overflow from oversized firmware HAL responselinux · linux Pre-auth	High8.8	—	0.5%	Aug 15, 2026
31Monitor	CVE-2026-74344No exploit	bpf: Clear rb node linkage when freeing bpf_rb_rootlinux · linux	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-74345No exploit	RDMA/siw: Fix endpoint/socket association handlinglinux · linux Pre-auth	Critical9.8	—	0.4%	Aug 15, 2026
31Monitor	CVE-2026-74347No exploit	netfilter: cttimeout: detach dataplane timeout policy and repurpose refcountlinux · linux	High7.8	—	0.1%	Aug 15, 2026
28Monitor	CVE-2026-74349No exploit	ocfs2: reject FITRIM ranges shorter than a clusterlinux · linux	High7.1	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-74350No exploit	ocfs2: validate fast symlink target during inode readlinux · linux Pre-auth	Critical9.8	—	0.4%	Aug 15, 2026

CVE-2026-72389
31Monitor
bridge: stp: Fix a potential use-after-free when deleting a bridge
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72390
31Monitor
net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF
HighCVSS 7.8No exploitEPSS 0%
- Race condition
linux · linuxAug 15, 2026
CVE-2026-72395
28Monitor
hwmon: (pmbus) Fix passing events to regulator core
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72397
28Monitor
hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid()
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72398
39Monitor
sctp: add INIT verification after cookie unpacking
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72400
31Monitor
seg6: validate SRH length before reading fixed fields
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72404
31Monitor
tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72405
31Monitor
net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72406
31Monitor
net: sungem: fix probe error cleanup
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72409
30Monitor
net: mvneta: re-enable percpu interrupt on resume
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-72415
28Monitor
ASoC: SDCA: Validate written enum value in ge_put_enum_double()
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72416
29Monitor
netfilter: nft_compat: ebtables emulation must reject non-bridge targets
HighCVSS 7.3No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72418
30Monitor
netfilter: nf_conncount: prevent connlimit drops for early confirmed ct
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-72419
31Monitor
netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72420
35Monitor
md/raid5: avoid R5_Overlap races while breaking stripe batches
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72421
40Plan
ipv4: fib: Don't ignore error route in local/main tables.
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72423
35Monitor
bpf: Guard conntrack opts error writes
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72425
28Monitor
ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-72427
31Monitor
bpf: Fix effective prog array index with BPF_F_PREORDER
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72434
31Monitor
netfilter: ipset: make sure gc is properly stopped
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72435
31Monitor
netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72436
39Monitor
netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72438
30Monitor
md/raid10: fix writes_pending and barrier reference leaks on discard failures
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-72440
28Monitor
md/raid1: fix writes_pending and barrier reference leaks on write failures
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72444
31Monitor
flow_dissector: check device type before reading ETH_ADDRS
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72449
31Monitor
drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
linux · linuxAug 15, 2026
CVE-2026-72450
31Monitor
xfrm: validate selector family and prefixlen during match
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72452
31Monitor
drm/i915: clear CRTC color blob pointers after dropping refs
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72454
31Monitor
i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72463
39Monitor
xfrm: Fix dev use-after-free in xfrm async resumption
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72464
30Monitor
xprtrdma: Repost Receive buffers for malformed replies
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-72466
39Monitor
xprtrdma: Fix bcall rep leak and unbounded peek
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72469
35Monitor
xprtrdma: Fix ep kref imbalance on ADDR_CHANGE
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72470
31Monitor
fs/ntfs3: resize log->one_page_buf when adopting on-disk page size
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72472
39Monitor
nfs: use nfsi->rwsem to protect traversal of the file lock list
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72473
39Monitor
xprtrdma: Decouple req recycling from RPC completion
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72476
31Monitor
dmaengine: Fix possible use after free
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72477
39Monitor
fs/ntfs3: call _ntfs_bad_inode() when failing to rename
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72478
33Monitor
fs/ntfs3: add bounds check to run_get_highest_vcn()
HighCVSS 8.4No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72485
31Monitor
coresight: platform: defer connection counter increment until alloc succeeds
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72487
30Monitor
PCI: Check ROM header and data structure addr before accessing
HighCVSS 7.7No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72488
31Monitor
soundwire: fix bug in sdw_add_element_group_count found by syzkaller
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72491
39Monitor
net/9p: fix race condition on rdma->state in trans_rdma.c
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Race condition
linux · linuxAug 15, 2026
CVE-2026-72493
39Monitor
net: serialize netif_running() check in enqueue_to_backlog()
CriticalCVSS 9.9No exploitEPSS 0%
- Race condition
linux · linuxAug 15, 2026
CVE-2026-72494
39Monitor
RDMA/irdma: Replace waitqueue and flag with completion
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72495
37Monitor
RDMA/bnxt_re: Avoid repeated requests to allocate WC pages
CriticalCVSS 9.3No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72496
36Monitor
RDMA/bnxt_re: Proper rollback if the ioremap fails
CriticalCVSS 9.2No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72497
35Monitor
RDMA/bnxt_re: Add a max slot check for SQ
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72499
35Monitor
RDMA/bnxt_re: Free CQ toggle page after firmware teardown
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72500
35Monitor
RDMA/bnxt_re: Free SRQ toggle page after firmware teardown
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72502
30Monitor
tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74255
39Monitor
tipc: fix UAF in tipc_l2_send_msg()
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74256
33Monitor
bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check
HighCVSS 8.4No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74257
31Monitor
sockmap: Fix use-after-free in udp_bpf_recvmsg()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74258
31Monitor
bpf: Guard __get_user acesss with access_ok for uprobe_multi data
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74260
31Monitor
netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74262
31Monitor
kcm: use WRITE_ONCE() when changing lower socket callbacks
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74264
31Monitor
net: watchdog: fix refcount tracking races
HighCVSS 7.8No exploitEPSS 0%
- Race condition
linux · linuxAug 15, 2026
CVE-2026-74267
39Monitor
net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74268
39Monitor
tcp: clear sock_ops cb flags before force-closing a child socket
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74269
39Monitor
bnxt: fix head underflow on XDP head-grow
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74270
31Monitor
handshake: Require admin permission for DONE command
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
linux · linuxAug 15, 2026
CVE-2026-74277
35Monitor
iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74279
40Plan
crypto: cavium/cpt - fix DMA cleanup using wrong loop index
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74281
30Monitor
tipc: reject inverted service ranges from peer bindings
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74282
30Monitor
tipc: prevent snt_unacked underflow on CONN_ACK
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74283
31Monitor
tipc: require net admin for TIPCv2 netlink mutators
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
linux · linuxAug 15, 2026
CVE-2026-74287
36Monitor
sctp: validate embedded address parameter length
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74288
31Monitor
net: fib_rules: Don't dump dying fib_rule in fib_rules_dump().
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74289
31Monitor
ipv4: fib: Don't dump dying fib_info in fib_leaf_notify().
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74292
28Monitor
ASoC: tegra: tegra210_ahub: Validate written enum value
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74293
31Monitor
ASoC: fsl: fsl_audmix: Validate written enum values
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74294
29Monitor
ASoC: meson: aiu: Validate written enum values
HighCVSS 7.3No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74295
28Monitor
ASoC: codecs: hdac_hdmi: Validate written enum value
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74296
31Monitor
RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74297
31Monitor
RDMA/mlx5: Fix undefined shift of user RQ WQE size
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74300
35Monitor
Bluetooth: hci: validate codec capability element length
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74302
31Monitor
Bluetooth: hci_core: Fix UAF in hci_unregister_dev()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74305
31Monitor
bpf: Tighten cgroup storage cookie checks for prog arrays
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74310
37Monitor
vhost/net: complete zerocopy ubufs only once
CriticalCVSS 9.3No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74312
31Monitor
vhost/vdpa: validate virtqueue index in mmap and fault paths
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74313
35Monitor
vduse: hold vduse_lock across IDR lookup in open path
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74314
31Monitor
bpf: Cancel special fields on map value recycle
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74316
30Monitor
NFSD: Handle layout stid in nfsd4_drop_revoked_stid()
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74317
31Monitor
ixgbe: do not configure xps for XDP queues
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74321
30Monitor
btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74323
35Monitor
wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb()
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74325
31Monitor
wifi: mt76: use kfree_rcu for offchannel link in mt76_put_vif_phy_link
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74330
31Monitor
configfs: fix lockless traversals of ->s_children
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74332
33Monitor
ASoC: amd: acp-sdw-sof: Bound DAI link iteration
HighCVSS 8.4No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74333
33Monitor
ASoC: amd: acp-sdw-legacy: Bound DAI link iteration
HighCVSS 8.4No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74334
31Monitor
RDMA/nldev: Fix locking when accessing mr->pd
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74338
31Monitor
bpf: Reject sleepable BPF_LSM_CGROUP programs at load time
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74340
32Monitor
wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74341
35Monitor
wifi: wcn36xx: fix heap overflow from oversized firmware HAL response
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74344
31Monitor
bpf: Clear rb node linkage when freeing bpf_rb_root
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74345
39Monitor
RDMA/siw: Fix endpoint/socket association handling
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74347
31Monitor
netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74349
28Monitor
ocfs2: reject FITRIM ranges shorter than a cluster
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74350
39Monitor
ocfs2: validate fast symlink target during inode read
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026