Skip to content
Log inStart free trial

Kernel (Linux)

Advisories
12
Latest version
—
License
—
OpenSSF Scorecard
—

Known vulnerabilities

AdvisorySeverityAffectedFixed in
CVE-2026-53362
ipv6: account for fraggap on the paged allocation path
Known exploited		 High
EPSS 0.71%
>= 6.0.0, < 6.1.177
>= 6.2.0, < 6.6.144
>= 6.7.0, < 6.12.95
>= 6.13.0, < 6.18.38
>= 6.19.0, < 7.1.3
6.1.177
6.6.144
6.12.95
6.18.38
7.1.3
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
Known exploited		 High
EPSS 0.93%
>= 5.10.0, < 5.10.259
>= 5.11.0, < 5.15.210
>= 5.16.0, < 6.1.176
>= 6.2.0, < 6.6.143
>= 6.7.0, < 6.12.94
>= 6.13.0, < 6.18.36
>= 6.19.0, < 7.0.13
5.10.259
5.15.210
6.1.176
6.6.143
6.12.94
6.18.36
7.0.13
CVE-2026-46300
net: skbuff: preserve shared-frag marker during coalescing
Known exploited		 High
EPSS 16.13%
>= 3.9.0, < 5.10.257
>= 5.11.0, < 5.15.208
>= 5.16.0, < 6.1.174
>= 6.2.0, < 6.6.141
>= 6.7.0, < 6.12.91
>= 6.13.0, < 6.18.33
>= 6.19.0, < 7.0.10
5.10.257
5.15.208
6.1.174
6.6.141
6.12.91
6.18.33
7.0.10
CVE-2026-31431
crypto: algif_aead - Revert to operating out-of-place
Known exploited		 High
EPSS 98.11%
>= 4.14.0, < 5.10.254
>= 5.11.0, < 5.15.204
>= 5.16.0, < 6.1.170
>= 6.2.0, < 6.6.137
>= 6.7.0, < 6.12.85
>= 6.13.0, < 6.18.22
>= 6.19.0, < 6.19.12
5.10.254
5.15.204
6.1.170
6.6.137
6.12.85
6.18.22
6.19.12
CVE-2025-39964
crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
Known exploited		 Medium
EPSS 1.57%
>= 2.6.38, < 5.10.245
>= 5.11.0, < 5.15.194
>= 5.16.0, < 6.1.154
>= 6.2.0, < 6.6.108
>= 6.7.0, < 6.12.49
>= 6.13.0, < 6.16.9
5.10.245
5.15.194
6.1.154
6.6.108
6.12.49
6.16.9
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
Known exploited		 Critical
EPSS 3.25%
>= 6.0.0, < 6.1.149
>= 6.2.0, < 6.6.103
>= 6.7.0, < 6.12.44
>= 6.13.0, < 6.16.4
6.1.149
6.6.103
6.12.44
6.16.4
CVE-2025-38352
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
Known exploited		 High
EPSS 1.36%
>= 2.6.36, < 5.4.295
>= 5.5.0, < 5.10.239
>= 5.11.0, < 5.15.186
>= 5.16.0, < 6.1.142
>= 6.2.0, < 6.6.94
>= 6.7.0, < 6.12.34
>= 6.13.0, < 6.15.3
5.4.295
5.10.239
5.15.186
6.1.142
6.6.94
6.12.34
6.15.3
CVE-2024-53197
ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
Known exploited		 High
EPSS 4.12%
>= 2.6.12, < 4.19.325
>= 4.20.0, < 5.4.287
>= 5.5.0, < 5.10.231
>= 5.11.0, < 5.15.174
>= 5.16.0, < 6.1.120
>= 6.2.0, < 6.6.64
>= 6.7.0, < 6.11.11
>= 6.12.0, < 6.12.2
4.19.325
5.4.287
5.10.231
5.15.174
6.1.120
6.6.64
6.11.11
6.12.2
CVE-2024-53150
ALSA: usb-audio: Fix out of bounds reads when finding clock sources
Known exploited		 High
EPSS 1.35%
>= 5.4.0, < 5.4.287
>= 5.5.0, < 5.10.231
>= 5.11.0, < 5.15.174
>= 5.16.0, < 6.1.120
>= 6.2.0, < 6.6.64
>= 6.7.0, < 6.11.11
>= 6.12.0, < 6.12.2
5.4.287
5.10.231
5.15.174
6.1.120
6.6.64
6.11.11
6.12.2
CVE-2024-53104
media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
Known exploited		 High
EPSS 3.40%
>= 2.6.26, < 4.19.324
>= 4.20.0, < 5.4.286
>= 5.5.0, < 5.10.230
>= 5.11.0, < 5.15.172
>= 5.16.0, < 6.1.117
>= 6.2.0, < 6.6.61
>= 6.7.0, < 6.11.8
>= 6.12.0, < 6.12.1
4.19.324
5.4.286
5.10.230
5.15.172
6.1.117
6.6.61
6.11.8
6.12.1
CVE-2024-50302
HID: core: zero-initialize the report buffer
Known exploited		 Medium
EPSS 0.81%
>= 3.12.0, < 4.19.324
>= 4.20.0, < 5.4.286
>= 5.5.0, < 5.10.230
>= 5.11.0, < 5.15.172
>= 5.16.0, < 6.1.117
>= 6.2.0, < 6.6.61
>= 6.7.0, < 6.11.8
4.19.324
5.4.286
5.10.230
5.15.172
6.1.117
6.6.61
6.11.8
CVE-2024-36971
net: fix __dst_negative_advice() race
Known exploited		 High
EPSS 2.70%
>= 4.6.0, < 4.19.316
>= 4.20.0, < 5.4.278
>= 5.5.0, < 5.10.219
>= 5.11.0, < 5.15.161
>= 5.16.0, < 6.1.94
>= 6.2.0, < 6.6.34
>= 6.7.0, < 6.9.4
4.19.316
5.4.278
5.10.219
5.15.161
6.1.94
6.6.34
6.9.4
Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor