Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-31752 | SUSE CVE CVE-2026-31752 | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-08-28 |
| cve-2026-31738 | kernel: vxlan: validate ND option lengths in vxlan_na_create | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-06-28 |
| cve-2026-31733 | SUSE CVE CVE-2026-31733 | UNKNOWN | N/A | N/A | cvelistv5 | 2026-05-06 |
| cve-2026-31731 | kernel: thermal: core: Address thermal zone removal races with resume | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-07-02 |
| cve-2026-31729 | kernel: usb: typec: ucsi: validate connector number in ucsi_notify_common() | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-06-28 |
| cve-2026-31709 | SUSE CVE CVE-2026-31709 | HIGH | 8.8 | N/A | cvelistv5 | 2026-08-06 |
| cve-2026-31708 | kernel: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path | MEDIUM | 6.1 | N/A | cvelistv5 | 2026-07-02 |
| cve-2026-31701 | SUSE CVE CVE-2026-31701 | MEDIUM | 5.3 | N/A | cvelistv5 | 2026-09-11 |
| cve-2026-31700 | In the Linux kernel, the following vulnerability has been resolved: net/packet: fix TOCTOU race on mmap'd vnet_hdr i... | HIGH | 7.8 | N/A | cvelistv5 | 2026-09-08 |
| cve-2026-31699 | kernel: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-07-02 |
| cve-2026-31698 | kernel: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-07-02 |
| cve-2026-31697 | SUSE CVE CVE-2026-31697 | MEDIUM | 6.4 | N/A | cvelistv5 | 2026-09-19 |
| cve-2026-31696 | SUSE CVE CVE-2026-31696 | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-08-12 |
| cve-2026-31694 | SUSE CVE CVE-2026-31694 | HIGH | 7.8 | N/A | cvelistv5 | 2026-07-24 |
| cve-2026-31693 | kernel: cifs: some missing initializations on replay | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-07-02 |
| cve-2026-31689 | SUSE CVE CVE-2026-31689 | UNKNOWN | N/A | N/A | cvelistv5 | 2026-04-30 |
| cve-2026-31688 | SUSE CVE CVE-2026-31688 | UNKNOWN | N/A | N/A | cvelistv5 | 2026-06-18 |
| cve-2026-31685 | kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets | HIGH | 7.1 | N/A | cvelistv5 | 2026-07-17 |
| cve-2026-31684 | kernel: net: sched: act_csum: validate nested VLAN headers | HIGH | 7.1 | N/A | cvelistv5 | 2026-07-30 |
| cve-2026-31683 | SUSE CVE CVE-2026-31683 | MEDIUM | 4.8 | N/A | cvelistv5 | 2026-09-11 |
| cve-2026-31682 | SUSE CVE CVE-2026-31682 | MEDIUM | 4.3 | N/A | cvelistv5 | 2026-07-22 |
| cve-2026-31681 | SUSE CVE CVE-2026-31681 | MEDIUM | 4.4 | N/A | cvelistv5 | 2026-07-22 |
| cve-2026-31680 | SUSE CVE CVE-2026-31680 | MEDIUM | 4.7 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-31679 | kernel: openvswitch: validate MPLS set/set_masked payload length | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-07-02 |
| cve-2026-31678 | kernel: openvswitch: defer tunnel netdev_put to RCU release | HIGH | 7.8 | N/A | cvelistv5 | 2026-09-03 |
| cve-2026-31677 | kernel: crypto: af_alg - limit RX SG extraction by receive buffer budget | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-06-28 |
| cve-2026-31676 | kernel: rxrpc: only handle RESPONSE during service challenge | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-07-02 |
| cve-2026-31675 | kernel: net/sched: sch_netem: fix out-of-bounds access in packet corruption | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-07-02 |
| cve-2026-31674 | kernel: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-07-02 |
| cve-2026-31673 | SUSE CVE CVE-2026-31673 | MEDIUM | 4.5 | N/A | cvelistv5 | 2026-09-11 |