By publication date

Exploited and new serious CVEs: August 2026

7,237 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 32 of 73

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2026-72473No exploit	xprtrdma: Decouple req recycling from RPC completionlinux · linux Pre-auth	Critical9.8	—	0.7%	Aug 15, 2026
31Monitor	CVE-2026-72476No exploit	dmaengine: Fix possible use after freelinux · linux	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72477No exploit	fs/ntfs3: call _ntfs_bad_inode() when failing to renamelinux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
33Monitor	CVE-2026-72478No exploit	fs/ntfs3: add bounds check to run_get_highest_vcn()linux · linux	High8.4	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72485No exploit	coresight: platform: defer connection counter increment until alloc succeedslinux · linux	High7.8	—	0.1%	Aug 15, 2026
30Monitor	CVE-2026-72487No exploit	PCI: Check ROM header and data structure addr before accessinglinux · linux	High7.7	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72488No exploit	soundwire: fix bug in sdw_add_element_group_count found by syzkallerlinux · linux	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72491No exploit	net/9p: fix race condition on rdma->state in trans_rdma.clinux · linux Pre-auth Race condition	Critical9.8	—	0.7%	Aug 15, 2026
39Monitor	CVE-2026-72493No exploit	net: serialize netif_running() check in enqueue_to_backlog()linux · linux Race condition	Critical9.9	—	0.4%	Aug 15, 2026
39Monitor	CVE-2026-72494No exploit	RDMA/irdma: Replace waitqueue and flag with completionlinux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
37Monitor	CVE-2026-72495No exploit	RDMA/bnxt_re: Avoid repeated requests to allocate WC pageslinux · linux	Critical9.3	—	0.1%	Aug 15, 2026
36Monitor	CVE-2026-72496No exploit	RDMA/bnxt_re: Proper rollback if the ioremap failslinux · linux	Critical9.2	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72497No exploit	RDMA/bnxt_re: Add a max slot check for SQlinux · linux	High8.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72499No exploit	RDMA/bnxt_re: Free CQ toggle page after firmware teardownlinux · linux	High8.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72500No exploit	RDMA/bnxt_re: Free SRQ toggle page after firmware teardownlinux · linux	High8.8	—	0.1%	Aug 15, 2026
30Monitor	CVE-2026-72502No exploit	tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)linux · linux Pre-auth Denial of service	High7.5	—	0.7%	Aug 15, 2026
39Monitor	CVE-2026-74255No exploit	tipc: fix UAF in tipc_l2_send_msg()linux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
33Monitor	CVE-2026-74256No exploit	bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds checklinux · linux	High8.4	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74257No exploit	sockmap: Fix use-after-free in udp_bpf_recvmsg()linux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74258No exploit	bpf: Guard __get_user acesss with access_ok for uprobe_multi datalinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74260No exploit	netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use themlinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74262No exploit	kcm: use WRITE_ONCE() when changing lower socket callbackslinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74264No exploit	net: watchdog: fix refcount tracking raceslinux · linux Race condition	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-74267No exploit	net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlenlinux · linux Pre-auth	Critical9.8	—	0.7%	Aug 15, 2026
39Monitor	CVE-2026-74268No exploit	tcp: clear sock_ops cb flags before force-closing a child socketlinux · linux Pre-auth	Critical9.8	—	0.7%	Aug 15, 2026
39Monitor	CVE-2026-74269No exploit	bnxt: fix head underflow on XDP head-growlinux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
31Monitor	CVE-2026-74270No exploit	handshake: Require admin permission for DONE commandlinux · linux Local privilege escalation	High7.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-74277No exploit	iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA pathlinux · linux	High8.8	—	0.1%	Aug 15, 2026
40Plan	CVE-2026-74279No exploit	crypto: cavium/cpt - fix DMA cleanup using wrong loop indexlinux · linux Pre-auth	Critical10.0	—	0.7%	Aug 15, 2026
30Monitor	CVE-2026-74281No exploit	tipc: reject inverted service ranges from peer bindingslinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 15, 2026
30Monitor	CVE-2026-74282No exploit	tipc: prevent snt_unacked underflow on CONN_ACKlinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 15, 2026
31Monitor	CVE-2026-74283No exploit	tipc: require net admin for TIPCv2 netlink mutatorslinux · linux Local privilege escalation	High7.8	—	0.1%	Aug 15, 2026
36Monitor	CVE-2026-74287No exploit	sctp: validate embedded address parameter lengthlinux · linux Pre-auth	Critical9.1	—	0.7%	Aug 15, 2026
31Monitor	CVE-2026-74288No exploit	net: fib_rules: Don't dump dying fib_rule in fib_rules_dump().linux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74289No exploit	ipv4: fib: Don't dump dying fib_info in fib_leaf_notify().linux · linux	High7.8	—	0.1%	Aug 15, 2026
28Monitor	CVE-2026-74292No exploit	ASoC: tegra: tegra210_ahub: Validate written enum valuelinux · linux	High7.1	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74293No exploit	ASoC: fsl: fsl_audmix: Validate written enum valueslinux · linux	High7.8	—	0.1%	Aug 15, 2026
29Monitor	CVE-2026-74294No exploit	ASoC: meson: aiu: Validate written enum valueslinux · linux	High7.3	—	0.1%	Aug 15, 2026
28Monitor	CVE-2026-74295No exploit	ASoC: codecs: hdac_hdmi: Validate written enum valuelinux · linux	High7.1	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74296No exploit	RDMA/mlx5: Release the HW‑provided UAR index rather than the SW onelinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74297No exploit	RDMA/mlx5: Fix undefined shift of user RQ WQE sizelinux · linux	High7.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-74300No exploit	Bluetooth: hci: validate codec capability element lengthlinux · linux Pre-auth	High8.8	—	0.4%	Aug 15, 2026
31Monitor	CVE-2026-74302No exploit	Bluetooth: hci_core: Fix UAF in hci_unregister_dev()linux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74305No exploit	bpf: Tighten cgroup storage cookie checks for prog arrayslinux · linux	High7.8	—	0.1%	Aug 15, 2026
37Monitor	CVE-2026-74310No exploit	vhost/net: complete zerocopy ubufs only oncelinux · linux	Critical9.3	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74312No exploit	vhost/vdpa: validate virtqueue index in mmap and fault pathslinux · linux	High7.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-74313No exploit	vduse: hold vduse_lock across IDR lookup in open pathlinux · linux	High8.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74314No exploit	bpf: Cancel special fields on map value recyclelinux · linux	High7.8	—	0.1%	Aug 15, 2026
30Monitor	CVE-2026-74316No exploit	NFSD: Handle layout stid in nfsd4_drop_revoked_stid()linux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 15, 2026
31Monitor	CVE-2026-74317No exploit	ixgbe: do not configure xps for XDP queueslinux · linux	High7.8	—	0.1%	Aug 15, 2026
30Monitor	CVE-2026-74321No exploit	btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()linux · linux Pre-auth Denial of service	High7.5	—	0.7%	Aug 15, 2026
35Monitor	CVE-2026-74323No exploit	wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb()linux · linux Pre-auth	High8.8	—	0.3%	Aug 15, 2026
31Monitor	CVE-2026-74325No exploit	wifi: mt76: use kfree_rcu for offchannel link in mt76_put_vif_phy_linklinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74330No exploit	configfs: fix lockless traversals of ->s_childrenlinux · linux	High7.8	—	0.1%	Aug 15, 2026
33Monitor	CVE-2026-74332No exploit	ASoC: amd: acp-sdw-sof: Bound DAI link iterationlinux · linux	High8.4	—	0.1%	Aug 15, 2026
33Monitor	CVE-2026-74333No exploit	ASoC: amd: acp-sdw-legacy: Bound DAI link iterationlinux · linux	High8.4	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74334No exploit	RDMA/nldev: Fix locking when accessing mr->pdlinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74338No exploit	bpf: Reject sleepable BPF_LSM_CGROUP programs at load timelinux · linux	High7.8	—	0.1%	Aug 15, 2026
32Monitor	CVE-2026-74340No exploit	wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indicationlinux · linux Pre-auth	High8.1	—	0.4%	Aug 15, 2026
31Monitor	CVE-2026-74344No exploit	bpf: Clear rb node linkage when freeing bpf_rb_rootlinux · linux	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-74345No exploit	RDMA/siw: Fix endpoint/socket association handlinglinux · linux Pre-auth	Critical9.8	—	0.4%	Aug 15, 2026
31Monitor	CVE-2026-74347No exploit	netfilter: cttimeout: detach dataplane timeout policy and repurpose refcountlinux · linux	High7.8	—	0.1%	Aug 15, 2026
28Monitor	CVE-2026-74349No exploit	ocfs2: reject FITRIM ranges shorter than a clusterlinux · linux	High7.1	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-74350No exploit	ocfs2: validate fast symlink target during inode readlinux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
31Monitor	CVE-2026-74354No exploit	bpf: Take mmap_lock in zap_pages()linux · linux	High7.8	—	0.1%	Aug 15, 2026
32Monitor	CVE-2026-74355No exploit	iommu/vt-d: Fix RB-tree corruption in probe error pathlinux · linux	High8.2	—	0.1%	Aug 15, 2026
29Monitor	CVE-2026-74356No exploit	vhost: fix vhost_get_avail_idx for a non empty ringlinux · linux Pre-auth Denial of service	High7.4	—	0.2%	Aug 15, 2026
31Monitor	CVE-2026-74359No exploit	configfs_lookup(): don't leave ->s_dentry dangling on failurelinux · linux	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-74361No exploit	nvme: fix FDP fdpcidx bounds checklinux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
31Monitor	CVE-2026-74363No exploit	bpf: fix UAF by restoring RCU-delayed inode freeing in bpffslinux · linux	High7.8	—	0.1%	Aug 15, 2026
29Monitor	CVE-2026-74365No exploit	nvdimm/btt: Handle preemption in BTT lane acquisitionlinux · linux	High7.3	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74367No exploit	wifi: ath12k: fix inconsistent arvif state in vdev_create error pathslinux · linux	High7.8	—	0.1%	Aug 15, 2026
30Monitor	CVE-2026-74374No exploit	md/raid1,raid10: fix error-path detection with md_cloned_bio()linux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 15, 2026
39Monitor	CVE-2026-74376No exploit	md/raid10: reset read_slot when reusing r10bio for discardlinux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
31Monitor	CVE-2026-74377No exploit	RDMA/rxe: Copy WQE to local buffer in non-SRQ receive pathlinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74378No exploit	RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqelinux · linux	High7.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-74380No exploit	gpu: host1x: Fix iommu_map_sgtable() return value checklinux · linux	High8.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-74384No exploit	nvme-multipath: fix flex array size in struct nvme_ns_headlinux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
30Monitor	CVE-2026-74385No exploit	nvmet-tcp: check return value of nvmet_tcp_set_queue_socklinux · linux Pre-auth Denial of service	High7.5	—	0.4%	Aug 15, 2026
31Monitor	CVE-2026-74387No exploit	ALSA: seq: midi: Serialize output teardown with event_inputlinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74388No exploit	ALSA: seq: oss: Fix UAF at handling events with embedded SysEx datalinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74390No exploit	RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrslinux · linux	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-74394No exploit	RDMA/srpt: fix integer overflow in immediate data length checklinux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
30Monitor	CVE-2026-74396No exploit	RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failurelinux · linux Pre-auth Denial of service	High7.5	—	0.7%	Aug 15, 2026
31Monitor	CVE-2026-74397No exploit	IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlierlinux · linux	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-74398No exploit	ipv6: addrconf: bail out of dad_failure when state is no longer POSTDADlinux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
39Monitor	CVE-2026-74401No exploit	dlm: fix add msg handle in send_queue orderedlinux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
31Monitor	CVE-2026-74404No exploit	crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-onelinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74405No exploit	OPP: Fix race between OPP addition and lookuplinux · linux	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-74406No exploit	vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().linux · linux Pre-auth	Critical9.8	—	0.4%	Aug 15, 2026
35Monitor	CVE-2026-74407No exploit	wifi: ath11k: cancel SSR work items during PCI shutdownlinux · linux Pre-auth	High8.8	—	0.3%	Aug 15, 2026
35Monitor	CVE-2026-74408No exploit	wifi: ath9k: fix OOB access from firmware tx status queue IDlinux · linux Pre-auth	High8.8	—	0.4%	Aug 15, 2026
35Monitor	CVE-2026-74409No exploit	wifi: rtw89: add bounds check on firmware mac_id in link lookuplinux · linux Pre-auth	High8.8	—	0.3%	Aug 15, 2026
32Monitor	CVE-2026-74410No exploit	wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA bufferlinux · linux Pre-auth	High8.1	—	0.4%	Aug 15, 2026
35Monitor	CVE-2026-74411No exploit	wifi: rtw89: Correct data type for scan index to avoid infinite looplinux · linux Pre-auth	High8.8	—	0.3%	Aug 15, 2026
35Monitor	CVE-2026-74412No exploit	wifi: rtw88: fix wrong pci_get_drvdata type in AER handlerslinux · linux Pre-auth	High8.8	—	0.3%	Aug 15, 2026
35Monitor	CVE-2026-74413No exploit	wifi: rtw89: fix wrong pci_get_drvdata type in AER handlerslinux · linux Pre-auth	High8.8	—	0.3%	Aug 15, 2026
31Monitor	CVE-2026-74417No exploit	drm/radeon: fix integer overflow in radeon_align_pitch()linux · linux	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-74427No exploit	afs: Fix netns teardown to cancel the preallocation chargerlinux · linux Pre-auth	Critical9.8	—	0.7%	Aug 15, 2026
39Monitor	CVE-2026-74436No exploit	rxrpc: serialize kernel accept preallocation with socket teardownlinux · linux Pre-auth	Critical9.8	—	0.3%	Aug 15, 2026

CVE-2026-72473
39Monitor
xprtrdma: Decouple req recycling from RPC completion
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72476
31Monitor
dmaengine: Fix possible use after free
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72477
39Monitor
fs/ntfs3: call _ntfs_bad_inode() when failing to rename
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72478
33Monitor
fs/ntfs3: add bounds check to run_get_highest_vcn()
HighCVSS 8.4No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72485
31Monitor
coresight: platform: defer connection counter increment until alloc succeeds
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72487
30Monitor
PCI: Check ROM header and data structure addr before accessing
HighCVSS 7.7No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72488
31Monitor
soundwire: fix bug in sdw_add_element_group_count found by syzkaller
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72491
39Monitor
net/9p: fix race condition on rdma->state in trans_rdma.c
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Race condition
linux · linuxAug 15, 2026
CVE-2026-72493
39Monitor
net: serialize netif_running() check in enqueue_to_backlog()
CriticalCVSS 9.9No exploitEPSS 0%
- Race condition
linux · linuxAug 15, 2026
CVE-2026-72494
39Monitor
RDMA/irdma: Replace waitqueue and flag with completion
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72495
37Monitor
RDMA/bnxt_re: Avoid repeated requests to allocate WC pages
CriticalCVSS 9.3No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72496
36Monitor
RDMA/bnxt_re: Proper rollback if the ioremap fails
CriticalCVSS 9.2No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72497
35Monitor
RDMA/bnxt_re: Add a max slot check for SQ
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72499
35Monitor
RDMA/bnxt_re: Free CQ toggle page after firmware teardown
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72500
35Monitor
RDMA/bnxt_re: Free SRQ toggle page after firmware teardown
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72502
30Monitor
tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74255
39Monitor
tipc: fix UAF in tipc_l2_send_msg()
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74256
33Monitor
bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check
HighCVSS 8.4No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74257
31Monitor
sockmap: Fix use-after-free in udp_bpf_recvmsg()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74258
31Monitor
bpf: Guard __get_user acesss with access_ok for uprobe_multi data
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74260
31Monitor
netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74262
31Monitor
kcm: use WRITE_ONCE() when changing lower socket callbacks
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74264
31Monitor
net: watchdog: fix refcount tracking races
HighCVSS 7.8No exploitEPSS 0%
- Race condition
linux · linuxAug 15, 2026
CVE-2026-74267
39Monitor
net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74268
39Monitor
tcp: clear sock_ops cb flags before force-closing a child socket
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74269
39Monitor
bnxt: fix head underflow on XDP head-grow
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74270
31Monitor
handshake: Require admin permission for DONE command
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
linux · linuxAug 15, 2026
CVE-2026-74277
35Monitor
iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74279
40Plan
crypto: cavium/cpt - fix DMA cleanup using wrong loop index
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74281
30Monitor
tipc: reject inverted service ranges from peer bindings
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74282
30Monitor
tipc: prevent snt_unacked underflow on CONN_ACK
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74283
31Monitor
tipc: require net admin for TIPCv2 netlink mutators
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
linux · linuxAug 15, 2026
CVE-2026-74287
36Monitor
sctp: validate embedded address parameter length
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74288
31Monitor
net: fib_rules: Don't dump dying fib_rule in fib_rules_dump().
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74289
31Monitor
ipv4: fib: Don't dump dying fib_info in fib_leaf_notify().
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74292
28Monitor
ASoC: tegra: tegra210_ahub: Validate written enum value
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74293
31Monitor
ASoC: fsl: fsl_audmix: Validate written enum values
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74294
29Monitor
ASoC: meson: aiu: Validate written enum values
HighCVSS 7.3No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74295
28Monitor
ASoC: codecs: hdac_hdmi: Validate written enum value
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74296
31Monitor
RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74297
31Monitor
RDMA/mlx5: Fix undefined shift of user RQ WQE size
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74300
35Monitor
Bluetooth: hci: validate codec capability element length
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74302
31Monitor
Bluetooth: hci_core: Fix UAF in hci_unregister_dev()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74305
31Monitor
bpf: Tighten cgroup storage cookie checks for prog arrays
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74310
37Monitor
vhost/net: complete zerocopy ubufs only once
CriticalCVSS 9.3No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74312
31Monitor
vhost/vdpa: validate virtqueue index in mmap and fault paths
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74313
35Monitor
vduse: hold vduse_lock across IDR lookup in open path
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74314
31Monitor
bpf: Cancel special fields on map value recycle
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74316
30Monitor
NFSD: Handle layout stid in nfsd4_drop_revoked_stid()
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74317
31Monitor
ixgbe: do not configure xps for XDP queues
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74321
30Monitor
btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74323
35Monitor
wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb()
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74325
31Monitor
wifi: mt76: use kfree_rcu for offchannel link in mt76_put_vif_phy_link
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74330
31Monitor
configfs: fix lockless traversals of ->s_children
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74332
33Monitor
ASoC: amd: acp-sdw-sof: Bound DAI link iteration
HighCVSS 8.4No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74333
33Monitor
ASoC: amd: acp-sdw-legacy: Bound DAI link iteration
HighCVSS 8.4No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74334
31Monitor
RDMA/nldev: Fix locking when accessing mr->pd
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74338
31Monitor
bpf: Reject sleepable BPF_LSM_CGROUP programs at load time
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74340
32Monitor
wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74344
31Monitor
bpf: Clear rb node linkage when freeing bpf_rb_root
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74345
39Monitor
RDMA/siw: Fix endpoint/socket association handling
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74347
31Monitor
netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74349
28Monitor
ocfs2: reject FITRIM ranges shorter than a cluster
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74350
39Monitor
ocfs2: validate fast symlink target during inode read
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74354
31Monitor
bpf: Take mmap_lock in zap_pages()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74355
32Monitor
iommu/vt-d: Fix RB-tree corruption in probe error path
HighCVSS 8.2No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74356
29Monitor
vhost: fix vhost_get_avail_idx for a non empty ring
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74359
31Monitor
configfs_lookup(): don't leave ->s_dentry dangling on failure
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74361
39Monitor
nvme: fix FDP fdpcidx bounds check
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74363
31Monitor
bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74365
29Monitor
nvdimm/btt: Handle preemption in BTT lane acquisition
HighCVSS 7.3No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74367
31Monitor
wifi: ath12k: fix inconsistent arvif state in vdev_create error paths
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74374
30Monitor
md/raid1,raid10: fix error-path detection with md_cloned_bio()
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74376
39Monitor
md/raid10: reset read_slot when reusing r10bio for discard
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74377
31Monitor
RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74378
31Monitor
RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74380
35Monitor
gpu: host1x: Fix iommu_map_sgtable() return value check
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74384
39Monitor
nvme-multipath: fix flex array size in struct nvme_ns_head
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74385
30Monitor
nvmet-tcp: check return value of nvmet_tcp_set_queue_sock
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74387
31Monitor
ALSA: seq: midi: Serialize output teardown with event_input
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74388
31Monitor
ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74390
31Monitor
RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74394
39Monitor
RDMA/srpt: fix integer overflow in immediate data length check
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74396
30Monitor
RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74397
31Monitor
IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74398
39Monitor
ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74401
39Monitor
dlm: fix add msg handle in send_queue ordered
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74404
31Monitor
crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74405
31Monitor
OPP: Fix race between OPP addition and lookup
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74406
39Monitor
vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74407
35Monitor
wifi: ath11k: cancel SSR work items during PCI shutdown
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74408
35Monitor
wifi: ath9k: fix OOB access from firmware tx status queue ID
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74409
35Monitor
wifi: rtw89: add bounds check on firmware mac_id in link lookup
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74410
32Monitor
wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74411
35Monitor
wifi: rtw89: Correct data type for scan index to avoid infinite loop
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74412
35Monitor
wifi: rtw88: fix wrong pci_get_drvdata type in AER handlers
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74413
35Monitor
wifi: rtw89: fix wrong pci_get_drvdata type in AER handlers
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74417
31Monitor
drm/radeon: fix integer overflow in radeon_align_pitch()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74427
39Monitor
afs: Fix netns teardown to cancel the preallocation charger
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74436
39Monitor
rxrpc: serialize kernel accept preallocation with socket teardown
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026