By publication date

Exploited and new serious CVEs: September 2026

7,964 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 30 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2026-89597No exploit	fbdev: uvesafb: unregister connector callback on init failurelinux · linux	High7.8	—	0.1%	Sep 11, 2026
33Monitor	CVE-2026-89599No exploit	fbdev: omapfb: panel-dsi-cm: initialize lock before registering displaylinux · linux	High8.4	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-89600No exploit	fanotify: fix use-after-free of file range infolinux · linux	High7.8	—	0.1%	Sep 11, 2026
35Monitor	CVE-2026-89601No exploit	ext2: Fix lost inode updates for IS_SYNC inodeslinux · linux	High8.8	—	0.5%	Sep 11, 2026
31Monitor	CVE-2026-89602No exploit	erofs: skip sufficiently large global buffers when resizinglinux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-89605No exploit	ecryptfs: release message context on send failurelinux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-89606No exploit	ecryptfs: reject too-small tag 70 packetslinux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-89607No exploit	ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packetlinux · linux	High7.8	—	0.1%	Sep 11, 2026
28Monitor	CVE-2026-89608No exploit	ecryptfs: pass packet set buffer size to parserlinux · linux	High7.1	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-89609No exploit	ecryptfs: hold msg ctx list lock when cleaning daemon queuelinux · linux	High7.8	—	0.1%	Sep 11, 2026
39Monitor	CVE-2026-89610No exploit	ntfs: verify run length exceeding volume boundarylinux · linux Pre-auth	Critical9.8	—	0.5%	Sep 11, 2026
39Monitor	CVE-2026-89611No exploit	ntfs: validate non-resident attribute offsetslinux · linux Pre-auth	Critical9.8	—	0.5%	Sep 11, 2026
39Monitor	CVE-2026-89612No exploit	ntfs: reject invalid MFT LCNs from boot sectorlinux · linux Pre-auth	Critical9.8	—	0.5%	Sep 11, 2026
39Monitor	CVE-2026-89613No exploit	ntfs: reject invalid empty mapping pairslinux · linux Pre-auth	Critical9.8	—	0.5%	Sep 11, 2026
39Monitor	CVE-2026-89614No exploit	ntfs: bound the free-cluster bitmap scan to the volumelinux · linux Pre-auth	Critical9.8	—	0.5%	Sep 11, 2026
33Monitor	CVE-2026-89615No exploit	fs/ntfs3: bound page_lcns[] index by the log recordlinux · linux	High8.4	—	0.1%	Sep 11, 2026
30Monitor	CVE-2026-89616No exploit	fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame()linux · linux Pre-auth	High7.5	—	0.4%	Sep 11, 2026
31Monitor	CVE-2026-89617No exploit	fs/ntfs3: validate dirty page table on log replaylinux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-89619No exploit	HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller bufferlinux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-89620No exploit	HID: intel-thc-hid: intel-quickspi: validate report size before copylinux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-89622No exploit	HID: mcp2221: clear rxbuf after I2C/SMBus transfer completeslinux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-89624No exploit	HID: universal-pidff: stop the device when force-feedback init failslinux · linux	High7.8	—	0.1%	Sep 11, 2026
35Monitor	CVE-2026-89626No exploit	HID: sensor: custom: Fix field sysfs group cleanup on failurelinux · linux Pre-auth	High8.8	—	0.3%	Sep 11, 2026
36Monitor	CVE-2026-89630No exploit	smb: client: restore the data_offset bound in is_valid_oplock_break()linux · linux Pre-auth	Critical9.1	—	0.5%	Sep 11, 2026
36Monitor	CVE-2026-89631No exploit	smb: client: reject a tree connect response whose byte count is too smalllinux · linux Pre-auth	Critical9.1	—	0.4%	Sep 11, 2026
32Monitor	CVE-2026-89632No exploit	smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr()linux · linux Pre-auth	High8.2	—	0.5%	Sep 11, 2026
39Monitor	CVE-2026-89633Proof of concept	smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()linux · linux Pre-auth	Critical9.8	—	0.5%	Sep 11, 2026
36Monitor	CVE-2026-89634No exploit	smb: client: fix ALIGN() overflow in symlink_data() error context looplinux · linux Pre-auth	Critical9.1	—	0.6%	Sep 11, 2026
39Monitor	CVE-2026-89635No exploit	ksmbd: only rebind the reopened file's own oplock on durable reconnectlinux · linux Pre-auth	Critical9.8	—	0.5%	Sep 11, 2026
39Monitor	CVE-2026-89636No exploit	smb: client: clear ce->tgthint in free_tgts()linux · linux Pre-auth	Critical9.8	—	0.6%	Sep 11, 2026
39Monitor	CVE-2026-89637No exploit	smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2linux · linux Pre-auth	Critical9.8	—	0.5%	Sep 11, 2026
31Monitor	CVE-2026-89638No exploit	smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensionslinux · linux	High7.8	—	0.1%	Sep 11, 2026
28Monitor	CVE-2026-89639No exploit	cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNClinux · linux	High7.1	—	0.1%	Sep 11, 2026
28Monitor	CVE-2026-89640No exploit	cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0linux · linux	High7.1	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-89641No exploit	cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size()linux · linux	High7.8	—	0.1%	Sep 11, 2026
39Monitor	CVE-2026-89643No exploit	audit: avoid dropping live tree ref on fsnotify rule autoremovelinux · linux Pre-auth	Critical9.8	—	0.7%	Sep 11, 2026
31Monitor	CVE-2026-89646No exploit	ceph: fix leaked inode reference on writeback abort at umountlinux · linux	High7.8	—	0.1%	Sep 11, 2026
30Monitor	CVE-2026-89647No exploit	ceph: do not repeat ceph_trim_dentries() if no progress possiblelinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Sep 11, 2026
30Monitor	CVE-2026-89648No exploit	ceph: cap delegated inode count in ceph_parse_deleg_inos()linux · linux Pre-auth Denial of service	High7.5	—	0.6%	Sep 11, 2026
36Monitor	CVE-2026-89649No exploit	ceph: bound xattr value length in __build_xattrs()linux · linux Pre-auth	Critical9.1	—	0.6%	Sep 11, 2026
36Monitor	CVE-2026-89650No exploit	ceph: bound num_export_targets array for mds info v2/v3linux · linux Pre-auth	Critical9.1	—	0.5%	Sep 11, 2026
39Monitor	CVE-2026-89651No exploit	ceph: bound MDSCapAuth path and fs_name decode in handle_session()linux · linux Pre-auth	Critical9.8	—	0.6%	Sep 11, 2026
39Monitor	CVE-2026-89652No exploit	ceph: bound copied dentry name length in NFS export get_namelinux · linux Pre-auth	Critical9.8	—	0.5%	Sep 11, 2026
39Monitor	CVE-2026-89653No exploit	ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decodelinux · linux Pre-auth	Critical9.8	—	0.5%	Sep 11, 2026
39Monitor	CVE-2026-89654No exploit	ceph: fix UAF in check_new_map() on session freed during unlocklinux · linux Pre-auth	Critical9.8	—	0.6%	Sep 11, 2026
39Monitor	CVE-2026-89655No exploit	ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlocklinux · linux Pre-auth	Critical9.8	—	0.7%	Sep 11, 2026
39Monitor	CVE-2026-89656No exploit	libceph: reject buckets with mismatched CRUSH idslinux · linux Pre-auth	Critical9.8	—	0.5%	Sep 11, 2026
30Monitor	CVE-2026-89657No exploit	libceph: validate OSD extent maps before cursor advancelinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Sep 11, 2026
39Monitor	CVE-2026-89658No exploit	NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanuplinux · linux Pre-auth	Critical9.8	—	0.6%	Sep 11, 2026
39Monitor	CVE-2026-89659No exploit	NFSD: Prevent client use-after-free during delegation revokelinux · linux Pre-auth	Critical9.8	—	0.4%	Sep 11, 2026
39Monitor	CVE-2026-89660No exploit	NFSD: Prevent client use-after-free during admin state revocationlinux · linux Pre-auth	Critical9.8	—	0.6%	Sep 11, 2026
39Monitor	CVE-2026-89662No exploit	NFSD: Prevent lock owner use-after-free during client teardownlinux · linux Pre-auth	Critical9.8	—	0.6%	Sep 11, 2026
35Monitor	CVE-2026-89663No exploit	nfsd: revoke copy-notify stateids before dropping their referencelinux · linux	High8.8	—	0.4%	Sep 11, 2026
30Monitor	CVE-2026-89664No exploit	nfsd: release OPEN-decoded posix ACLs via op_releaselinux · linux Pre-auth Denial of service	High7.5	—	0.4%	Sep 11, 2026
32Monitor	CVE-2026-89665No exploit	nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATElinux · linux Pre-auth	High8.2	—	0.6%	Sep 11, 2026
32Monitor	CVE-2026-89667No exploit	nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecachelinux · linux Pre-auth	High8.1	—	0.5%	Sep 11, 2026
31Monitor	CVE-2026-89668No exploit	nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd()linux · linux	High7.8	—	0.1%	Sep 11, 2026
39Monitor	CVE-2026-89669No exploit	nfsd: initialize copy-notify stateid before publishing itlinux · linux Pre-auth	Critical9.8	—	0.6%	Sep 11, 2026
31Monitor	CVE-2026-89670No exploit	nfsd: hold rcu across localio cmpxchg retrylinux · linux	High7.8	—	0.1%	Sep 11, 2026
36Monitor	CVE-2026-89671No exploit	nfsd: gate nfs3 setacl by argp->masklinux · linux Pre-auth	Critical9.1	—	0.5%	Sep 11, 2026
36Monitor	CVE-2026-89672No exploit	nfsd: gate nfs2 setacl by argp->masklinux · linux Pre-auth	Critical9.1	—	0.5%	Sep 11, 2026
39Monitor	CVE-2026-89674No exploit	nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutgetlinux · linux Pre-auth	Critical9.8	—	0.5%	Sep 11, 2026
39Monitor	CVE-2026-89675No exploit	nfsd: fix UAF in async copy cancel and shutdownlinux · linux Pre-auth	Critical9.8	—	0.4%	Sep 11, 2026
39Monitor	CVE-2026-89676No exploit	nfsd: fix stale s2s_cp_stateids IDR entry for async COPYlinux · linux Pre-auth	Critical9.8	—	0.4%	Sep 11, 2026
39Monitor	CVE-2026-89677No exploit	nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file()linux · linux Pre-auth	Critical9.8	—	0.5%	Sep 11, 2026
30Monitor	CVE-2026-89678No exploit	nfsd: fix partial-write detection in nfsd_direct_writelinux · linux Pre-auth	High7.5	—	0.3%	Sep 11, 2026
30Monitor	CVE-2026-89679No exploit	nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrslinux · linux Pre-auth Denial of service	High7.5	—	0.7%	Sep 11, 2026
30Monitor	CVE-2026-89680No exploit	nfsd: fix nfsd_file leak on inter-server COPY setup failurelinux · linux Pre-auth Denial of service	High7.5	—	0.7%	Sep 11, 2026
39Monitor	CVE-2026-89681No exploit	nfsd: fix layout fence worker double-reference racelinux · linux Pre-auth	Critical9.8	—	0.5%	Sep 11, 2026
32Monitor	CVE-2026-89682No exploit	nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_netlinux · linux Pre-auth	High8.1	—	0.5%	Sep 11, 2026
30Monitor	CVE-2026-89684No exploit	nfsd: fix cpntf publish race in nfs4_init_cp_statelinux · linux Pre-auth Denial of service	High7.5	—	0.5%	Sep 11, 2026
30Monitor	CVE-2026-89685No exploit	nfsd: fix clock domain mismatch in clients_still_reclaiming()linux · linux Pre-auth Denial of service	High7.5	—	0.6%	Sep 11, 2026
39Monitor	CVE-2026-89686No exploit	nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revokelinux · linux Pre-auth	Critical9.8	—	0.7%	Sep 11, 2026
30Monitor	CVE-2026-89687No exploit	nfsd: ensure nfsd_file_do_acquire() does not use a non-opened filelinux · linux Pre-auth Denial of service	High7.5	—	0.4%	Sep 11, 2026
39Monitor	CVE-2026-89688No exploit	nfsd: drop the stateid, not the stateowner, on seqid_op replay retrylinux · linux Pre-auth	Critical9.8	—	0.7%	Sep 11, 2026
39Monitor	CVE-2026-89689No exploit	nfsd: don't free session slots that are still in uselinux · linux Pre-auth	Critical9.8	—	0.6%	Sep 11, 2026
31Monitor	CVE-2026-89690No exploit	nfsd: defer vfree of compound ops to fix rpc_status UAFlinux · linux	High7.8	—	0.1%	Sep 11, 2026
28Monitor	CVE-2026-89691No exploit	nfsd: clear opcnt on compound arg release to prevent OOB readlinux · linux	High7.1	—	0.1%	Sep 11, 2026
30Monitor	CVE-2026-89692No exploit	nfsd: clear CALLBACK_RUNNING on failed delegation recall queuelinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Sep 11, 2026
30Monitor	CVE-2026-89695No exploit	nfsd: cap decoded POSIX ACL count to bound sort costlinux · linux Pre-auth Denial of service	High7.5	—	0.4%	Sep 11, 2026
30Monitor	CVE-2026-89696No exploit	nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL dereflinux · linux Pre-auth Denial of service	High7.5	—	0.7%	Sep 11, 2026
36Monitor	CVE-2026-89697No exploit	nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()linux · linux Pre-auth	Critical9.1	—	0.6%	Sep 11, 2026
30Monitor	CVE-2026-89699No exploit	nfsd: validate symlink target length in NFSv4 CREATElinux · linux Pre-auth Denial of service	High7.5	—	0.5%	Sep 11, 2026
39Monitor	CVE-2026-89702No exploit	nfsd: size fh_verify server sockaddr slot by xpt_locallenlinux · linux Pre-auth	Critical9.8	—	0.5%	Sep 11, 2026
39Monitor	CVE-2026-89703No exploit	nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegationslinux · linux Pre-auth	Critical9.8	—	0.6%	Sep 11, 2026
30Monitor	CVE-2026-89704No exploit	nfsd: sample writeback error cursor before async COPY looplinux · linux Pre-auth	High7.5	—	0.5%	Sep 11, 2026
28Monitor	CVE-2026-89705No exploit	nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit pathslinux · linux	High7.1	—	0.1%	Sep 11, 2026
30Monitor	CVE-2026-89706No exploit	nfsd: Reset write verifier when async COPY writeback failslinux · linux Pre-auth	High7.5	—	0.5%	Sep 11, 2026
30Monitor	CVE-2026-89707No exploit	nfsd: release path refs on follow_down() errorlinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Sep 11, 2026
39Monitor	CVE-2026-89708No exploit	nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardownlinux · linux Pre-auth	Critical9.8	—	0.4%	Sep 11, 2026
32Monitor	CVE-2026-89709No exploit	lockd, nfsd: RCU-protect nlmsvc_ops dispatchlinux · linux Pre-auth	High8.1	—	0.5%	Sep 11, 2026
32Monitor	CVE-2026-89711No exploit	NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_checklinux · linux Pre-auth	High8.2	—	0.4%	Sep 11, 2026
39Monitor	CVE-2026-89712No exploit	NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_locklinux · linux Pre-auth	Critical9.8	—	0.7%	Sep 11, 2026
36Monitor	CVE-2026-89713No exploit	NFSD: check truncate permission under inode locklinux · linux Pre-auth	Critical9.1	—	0.6%	Sep 11, 2026
30Monitor	CVE-2026-89720No exploit	ubifs: fix out-of-bounds read in signature length checklinux · linux	High7.7	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-89723No exploit	nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncationlinux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-89724No exploit	media: vicodec: fix out-of-bounds write in FWHT encoderlinux · linux	High7.8	—	0.1%	Sep 11, 2026
35Monitor	CVE-2026-89725No exploit	media: cec: stm32: prevent out-of-bounds write on RX overflowlinux · linux Pre-auth	High8.8	—	0.2%	Sep 11, 2026
35Monitor	CVE-2026-89729No exploit	HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_featurelinux · linux Pre-auth	High8.8	—	0.3%	Sep 11, 2026
28Monitor	CVE-2026-89731No exploit	cxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds AER register readlinux · linux	High7.1	—	0.1%	Sep 11, 2026

CVE-2026-89597
31Monitor
fbdev: uvesafb: unregister connector callback on init failure
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89599
33Monitor
fbdev: omapfb: panel-dsi-cm: initialize lock before registering display
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89600
31Monitor
fanotify: fix use-after-free of file range info
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89601
35Monitor
ext2: Fix lost inode updates for IS_SYNC inodes
HighCVSS 8.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89602
31Monitor
erofs: skip sufficiently large global buffers when resizing
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89605
31Monitor
ecryptfs: release message context on send failure
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89606
31Monitor
ecryptfs: reject too-small tag 70 packets
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89607
31Monitor
ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89608
28Monitor
ecryptfs: pass packet set buffer size to parser
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89609
31Monitor
ecryptfs: hold msg ctx list lock when cleaning daemon queue
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89610
39Monitor
ntfs: verify run length exceeding volume boundary
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89611
39Monitor
ntfs: validate non-resident attribute offsets
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89612
39Monitor
ntfs: reject invalid MFT LCNs from boot sector
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89613
39Monitor
ntfs: reject invalid empty mapping pairs
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89614
39Monitor
ntfs: bound the free-cluster bitmap scan to the volume
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89615
33Monitor
fs/ntfs3: bound page_lcns[] index by the log record
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89616
30Monitor
fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame()
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89617
31Monitor
fs/ntfs3: validate dirty page table on log replay
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89619
31Monitor
HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89620
31Monitor
HID: intel-thc-hid: intel-quickspi: validate report size before copy
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89622
31Monitor
HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89624
31Monitor
HID: universal-pidff: stop the device when force-feedback init fails
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89626
35Monitor
HID: sensor: custom: Fix field sysfs group cleanup on failure
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89630
36Monitor
smb: client: restore the data_offset bound in is_valid_oplock_break()
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89631
36Monitor
smb: client: reject a tree connect response whose byte count is too small
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89632
32Monitor
smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr()
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89633
39Monitor
smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89634
36Monitor
smb: client: fix ALIGN() overflow in symlink_data() error context loop
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89635
39Monitor
ksmbd: only rebind the reopened file's own oplock on durable reconnect
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89636
39Monitor
smb: client: clear ce->tgthint in free_tgts()
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89637
39Monitor
smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89638
31Monitor
smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89639
28Monitor
cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89640
28Monitor
cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89641
31Monitor
cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89643
39Monitor
audit: avoid dropping live tree ref on fsnotify rule autoremove
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89646
31Monitor
ceph: fix leaked inode reference on writeback abort at umount
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89647
30Monitor
ceph: do not repeat ceph_trim_dentries() if no progress possible
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 11, 2026
CVE-2026-89648
30Monitor
ceph: cap delegated inode count in ceph_parse_deleg_inos()
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 11, 2026
CVE-2026-89649
36Monitor
ceph: bound xattr value length in __build_xattrs()
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89650
36Monitor
ceph: bound num_export_targets array for mds info v2/v3
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89651
39Monitor
ceph: bound MDSCapAuth path and fs_name decode in handle_session()
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89652
39Monitor
ceph: bound copied dentry name length in NFS export get_name
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89653
39Monitor
ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89654
39Monitor
ceph: fix UAF in check_new_map() on session freed during unlock
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89655
39Monitor
ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89656
39Monitor
libceph: reject buckets with mismatched CRUSH ids
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89657
30Monitor
libceph: validate OSD extent maps before cursor advance
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 11, 2026
CVE-2026-89658
39Monitor
NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89659
39Monitor
NFSD: Prevent client use-after-free during delegation revoke
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89660
39Monitor
NFSD: Prevent client use-after-free during admin state revocation
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89662
39Monitor
NFSD: Prevent lock owner use-after-free during client teardown
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89663
35Monitor
nfsd: revoke copy-notify stateids before dropping their reference
HighCVSS 8.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89664
30Monitor
nfsd: release OPEN-decoded posix ACLs via op_release
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 11, 2026
CVE-2026-89665
32Monitor
nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89667
32Monitor
nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89668
31Monitor
nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89669
39Monitor
nfsd: initialize copy-notify stateid before publishing it
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89670
31Monitor
nfsd: hold rcu across localio cmpxchg retry
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89671
36Monitor
nfsd: gate nfs3 setacl by argp->mask
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89672
36Monitor
nfsd: gate nfs2 setacl by argp->mask
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89674
39Monitor
nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89675
39Monitor
nfsd: fix UAF in async copy cancel and shutdown
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89676
39Monitor
nfsd: fix stale s2s_cp_stateids IDR entry for async COPY
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89677
39Monitor
nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file()
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89678
30Monitor
nfsd: fix partial-write detection in nfsd_direct_write
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89679
30Monitor
nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 11, 2026
CVE-2026-89680
30Monitor
nfsd: fix nfsd_file leak on inter-server COPY setup failure
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 11, 2026
CVE-2026-89681
39Monitor
nfsd: fix layout fence worker double-reference race
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89682
32Monitor
nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89684
30Monitor
nfsd: fix cpntf publish race in nfs4_init_cp_state
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 11, 2026
CVE-2026-89685
30Monitor
nfsd: fix clock domain mismatch in clients_still_reclaiming()
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 11, 2026
CVE-2026-89686
39Monitor
nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89687
30Monitor
nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 11, 2026
CVE-2026-89688
39Monitor
nfsd: drop the stateid, not the stateowner, on seqid_op replay retry
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89689
39Monitor
nfsd: don't free session slots that are still in use
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89690
31Monitor
nfsd: defer vfree of compound ops to fix rpc_status UAF
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89691
28Monitor
nfsd: clear opcnt on compound arg release to prevent OOB read
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89692
30Monitor
nfsd: clear CALLBACK_RUNNING on failed delegation recall queue
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 11, 2026
CVE-2026-89695
30Monitor
nfsd: cap decoded POSIX ACL count to bound sort cost
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 11, 2026
CVE-2026-89696
30Monitor
nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 11, 2026
CVE-2026-89697
36Monitor
nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89699
30Monitor
nfsd: validate symlink target length in NFSv4 CREATE
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 11, 2026
CVE-2026-89702
39Monitor
nfsd: size fh_verify server sockaddr slot by xpt_locallen
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89703
39Monitor
nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89704
30Monitor
nfsd: sample writeback error cursor before async COPY loop
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89705
28Monitor
nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89706
30Monitor
nfsd: Reset write verifier when async COPY writeback fails
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89707
30Monitor
nfsd: release path refs on follow_down() error
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 11, 2026
CVE-2026-89708
39Monitor
nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89709
32Monitor
lockd, nfsd: RCU-protect nlmsvc_ops dispatch
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89711
32Monitor
NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89712
39Monitor
NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89713
36Monitor
NFSD: check truncate permission under inode lock
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89720
30Monitor
ubifs: fix out-of-bounds read in signature length check
HighCVSS 7.7No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89723
31Monitor
nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89724
31Monitor
media: vicodec: fix out-of-bounds write in FWHT encoder
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-89725
35Monitor
media: cec: stm32: prevent out-of-bounds write on RX overflow
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89729
35Monitor
HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-89731
28Monitor
cxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds AER register read
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 11, 2026