CVE-2026-63795
Linux kernel (GCP) vulnerabilities
Description
In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9_client_walk() error path When p9_client_walk() is called with clone set to false, fid aliases oldfid. If the walk subsequently fails after the request has been sent, the error path jumps to clunk_fid, which currently calls p9_fid_put(fid) unconditionally. This drops a reference to oldfid even though ownership of oldfid remains with the caller. If this is the last reference, oldfid can be clunked and destroyed while the caller still expects it to be valid. A later use or put of oldfid can then trigger a use-after-free or refcount underflow. Fix this by only putting fid in the clunk_fid error path when it does not alias oldfid, matching the existing guard in the error path below. This can be triggered when a multi-component walk is split into multiple p9_client_walk() calls and a later non-cloning walk fails. A reproducer and refcount warning logs are available on request.
Metrics
Reanalysis & status changes
Chronological NVD audit events for this CVE — reanalyses, CVSS updates, CPE diffs.
- CVE Modified2026-08-17 05:17 UTC· 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- Affected: Linux, Linux → Linux, Linux
- New CVE Received2026-07-19 12:16 UTC· 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- Affected: Linux, Linux
- Description: In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9_client_walk() error path When p9_client_walk() is called with clone set to false, fid aliases oldfid. If the walk subsequently fails after the request has been sent, the error path jumps to clunk_fid, which currently calls p9_fid_put(fid) unconditionally. This drops a reference to oldfid even though ownership of oldfid remains with the caller. If this is the last reference, oldfid can be clunked and destroyed while the caller still expects it to be valid. A later use or put of oldfid can then trigger a use-after-free or refcount underflow. Fix this by only putting fid in the clunk_fid error path when it does not alias oldfid, matching the existing guard in the error path below. This can be triggered when a multi-component walk is split into multiple p9_client_walk() calls and a later non-cloning walk fails. A reproducer and refcount warning logs are available on request.
- Reference: https://git.kernel.org/stable/c/1a3860d46e3eb47dbd60339783cdad7904486b9f
- Reference: https://git.kernel.org/stable/c/6dbe9443d9f5f7fb6d319a7b77108853ae6c6bea
Affected operating systems
linux
redhat / enterprise_linux10.0
linux
redhat / enterprise_linux7.0
linux
redhat / enterprise_linux8.0
linux
redhat / enterprise_linux9.0
linux
ubuntu / linux-aws-6.8jammy
linux
ubuntu / linux-azureresolute
linux
ubuntu / linux-azuretrusty
linux
ubuntu / linux-azurexenial
linux
ubuntu / linux-azure-4.15bionic
linux
ubuntu / linux-azure-5.4bionic
linux
ubuntu / linux-azure-fdenoble
linux
ubuntu / linux-azure-fderesolute
linux
ubuntu / linux-azure-fde-6.8jammy
linux
ubuntu / linux-azure-fipsbionic
linux
ubuntu / linux-azure-fipsfocal
linux
ubuntu / linux-azure-fipsnoble
linux
ubuntu / linux-fipsjammy
linux
ubuntu / linux-gcp-7.0noble
linux
ubuntu / linux-gkejammy
linux
ubuntu / linux-nvidia-tegranoble
linux
ubuntu / linux-raspinoble
linux
ubuntu / linux-raspi-realtimenoble
linux
linux / linux_kernel2.6.12
linux
linux / linux_kernel2.6.15
References & sources
- https://git.kernel.org/stable/c/1f573e17bcb7275ddd1c8f47f46ae0faf0e902a4
- https://git.kernel.org/stable/c/55c479aae99b120489a432db9c717484e523dfd6
- https://git.kernel.org/stable/c/722b3f86df80644463d29fe5451e30a617f74500
- https://git.kernel.org/stable/c/a74e893f30db64cdce0fc7a96d3baa417bcd55f5
- https://git.kernel.org/stable/c/a8f91ddf67f669f547bb9fb559738da6f8ee2cf3
- https://git.kernel.org/stable/c/3481d4372ae34243f7025925314385b852c50f7e
- https://git.kernel.org/stable/c/0c25b8734367574e21aeb8468c2e522713134da7
- https://git.kernel.org/stable/c/327a64241f30c74b6f35537eb9e1fc6c3cbe060beuvd
- https://git.kernel.org/stable/c/98ed1383f597f8a45b6cb816bb20b96d46eecedaeuvd
- https://git.kernel.org/stable/c/0f0c0c1397a42aacaacae828206ee1b921623952euvd
- https://git.kernel.org/stable/c/4f42dd01f5217465f23a763e27b3984e114d0972euvd
- https://git.kernel.org/stable/c/c5b6285aae050ff1c3ea824ca3d88ac4be1e69c8euvd
- https://git.kernel.org/stable/c/76ff6bfc9a809571793f425ba99f6a759108dcf8
- https://git.kernel.org/stable/c/8c4254c8f5836e77ae83e7fc037f02b69f7a0977
- https://git.kernel.org/stable/c/61957c2e467b39b528a290016367d32a433fa846
- https://git.kernel.org/stable/c/a31c3feb54b15a90232e497ad0e27e8a82052d8d
- https://git.kernel.org/stable/c/5c29d20470d4566d1b68df57097d642d01f8b427
- https://git.kernel.org/stable/c/0ef196a208385b7d7da79f411c161b04e97283e2
- https://git.kernel.org/stable/c/2b5f47a710172c962ef42d1b732b04d2ad0dce21
- https://git.kernel.org/stable/c/95839a67ea56ca35732aad7f711404a3127cfe2d
Linked CVEs
- CVE-2026-80591
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate th…
highCVSSv3 7.8 - CVE-2026-74584
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: zero shared page before exposing to userspace bnxt_re…
highCVSSv3 7.1 - CVE-2026-68461
In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields of fwnode_handle in…
highCVSSv3 7.8 - CVE-2026-68460
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadlock in f2fs_balance_fs() When the f2fs fil…
— - CVE-2026-68459
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()…
— - CVE-2026-68092
In the Linux kernel, the following vulnerability has been resolved: time/jiffies: Register jiffies clocksource before usage Teddy repor…
— - CVE-2026-68091
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacom_par…
mediumCVSSv3 5.5 - CVE-2026-68090
In the Linux kernel, the following vulnerability has been resolved: debugobjects: Plug race against a concurrent OOM disable syzbot rep…
mediumCVSSv3 5.5 - CVE-2026-68089
In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If *ppos is non-zero t…
— - CVE-2026-68088
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check to response query Ad…
highCVSSv3 7.1 - CVE-2026-68087
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush() wacom_wac_que…
— - CVE-2026-68084
In the Linux kernel, the following vulnerability has been resolved: staging: vme_user: fix location monitor leak in tsi148 bridge tsi14…
highCVSSv3 7.1 - CVE-2026-64604
In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in gues…
highCVSSv3 8.4 - CVE-2026-64603
In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-hid: Protect ACPI notify handler against recursi…
— - CVE-2026-64602
In the Linux kernel, the following vulnerability has been resolved: iio: adc: spear: Initialize completion before requesting IRQ In the…
mediumCVSSv3 5.5 - CVE-2026-64601
In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corr…
highCVSSv3 7.8 - CVE-2026-64600
In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK xfs_reflink…
highCVSSv3 7.8 - CVE-2026-64599
In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in meson_crypto_probe() When…
mediumCVSSv3 5.5 - CVE-2026-64598
In the Linux kernel, the following vulnerability has been resolved: smb/client: Fix error code in smb2_aead_req_alloc() The "*num_sgs"…
mediumCVSSv3 5.5 - CVE-2026-64597
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_close() replay A response-bear…
highCVSSv3 8.6 - CVE-2026-64596
In the Linux kernel, the following vulnerability has been resolved: libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo() S…
— - CVE-2026-64594
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: initialize reset_work at allocation time ffs_fs_…
criticalCVSSv3 9.8 - CVE-2026-64593
In the Linux kernel, the following vulnerability has been resolved: btrfs: do not trim a device which is not writeable [BUG] There is a…
criticalCVSSv3 9.8 - CVE-2026-64592
In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Unconditionally sfence.vma for spurious fault Svvptc doe…
—
Show 1392 more CVEs
- CVE-2026-64591
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid WARNING in sva unbind path The Intel IOMMU driver…
— - CVE-2026-64590
In the Linux kernel, the following vulnerability has been resolved: dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST war…
highCVSSv3 7.1 - CVE-2026-64589
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registration failure If adapte…
— - CVE-2026-64588
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix data races on ring->ready On weakly-ordered archite…
highCVSSv3 7.8 - CVE-2026-64556
In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during remove_on_exec perf_event_rem…
highCVSSv3 7.8 - CVE-2026-64536
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop The lo…
highCVSSv3 8.1 - CVE-2026-64531
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch…
highCVSSv3 7.8 - CVE-2026-64529
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT dri…
highCVSSv3 7.8 - CVE-2026-64528
In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung: Remove redundant port lock acquisition in rx h…
— - CVE-2026-64527
In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate VMBus packet size in receive callback hyperv_r…
— - CVE-2026-64526
In the Linux kernel, the following vulnerability has been resolved: ethtool: tsconfig: fix missing ethnl_ops_complete() tsconfig_prepar…
— - CVE-2026-64525
In the Linux kernel, the following vulnerability has been resolved: xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit…
mediumCVSSv3 5.5 - CVE-2026-64524
In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolution_count and fix WIN8 fallback A SYNTH…
highCVSSv3 7.7 - CVE-2026-64523
In the Linux kernel, the following vulnerability has been resolved: net/handshake: Take a long-lived file reference at submit handshake…
mediumCVSSv3 5.5 - CVE-2026-64522
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA mlx…
highCVSSv3 8.8 - CVE-2026-64521
In the Linux kernel, the following vulnerability has been resolved: pinctrl: meson: amlogic-a4: fix deadlock issue Accessing the pincon…
— - CVE-2026-64520
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies The registe…
highCVSSv3 8.4 - CVE-2026-64519
In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocation find_one_sb_stid…
— - CVE-2026-64518
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key().
— - CVE-2026-64517
In the Linux kernel, the following vulnerability has been resolved: drm/xe/gsc: Fix double-free of managed BO in error path The error p…
— - CVE-2026-64516
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCPU BO co…
highCVSSv3 8.8 - CVE-2026-64515
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If either reconf or EPCS mu…
highCVSSv3 8.3 - CVE-2026-64514
In the Linux kernel, the following vulnerability has been resolved: userfaultfd: gate must_wait writability check on pte_present() user…
highCVSSv3 7.1 - CVE-2026-64513
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Unconditionally recompute CR8 intercept on PPR update The…
highCVSSv3 8.4 - CVE-2026-64512
In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Suppress UBSAN warning caused by field misuse The defin…
lowCVSSv3 1.9 - CVE-2026-64511
In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix possible NULL pointer dereference After commi…
mediumCVSSv3 5.5 - CVE-2026-64510
In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup If acpi_nfit_i…
highCVSSv3 7.1 - CVE-2026-64509
In the Linux kernel, the following vulnerability has been resolved: rust: block: fix GenDisk cleanup paths GenDiskBuilder::build() stil…
— - CVE-2026-64508
In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocat…
highCVSSv3 7.8 - CVE-2026-64507
In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening…
mediumCVSSv3 5.5 - CVE-2026-64505
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check for header Add a len…
highCVSSv3 7.1 - CVE-2026-64504
In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: clamp the device-reported FIFO frame count __bm…
highCVSSv3 7.8 - CVE-2026-64503
In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error kx…
highCVSSv3 7.1 - CVE-2026-64502
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fix clear_pending_event for registerless d…
highCVSSv3 7.8 - CVE-2026-64501
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fix CS held asserted and state leaks In a…
highCVSSv3 7.1 - CVE-2026-64500
In the Linux kernel, the following vulnerability has been resolved: iio: adc: lpc32xx: Initialize completion before requesting IRQ In t…
mediumCVSSv3 5.5 - CVE-2026-64499
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix PM reference leak in buffer preenable ads…
— - CVE-2026-64497
In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: Cleanup initializations and fix sign-extension…
highCVSSv3 7.1 - CVE-2026-64496
In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO reset race `iio_event_getfd()` creates t…
highCVSSv3 7.1 - CVE-2026-64495
In the Linux kernel, the following vulnerability has been resolved: iio: gyro: bmg160: bail out when bandwidth/filter is not in table b…
highCVSSv3 7.1 - CVE-2026-64494
In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002_re…
highCVSSv3 7.1 - CVE-2026-64493
In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mpl115: fix runtime PM leak on read error mpl115_rea…
mediumCVSSv3 5.5 - CVE-2026-64492
In the Linux kernel, the following vulnerability has been resolved: iio: temperature: tmp006: use devm_iio_trigger_register tmp006_prob…
— - CVE-2026-64491
In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix work UAF on disconnect tascam_disconnec…
— - CVE-2026-64490
In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the device virtio-snd…
highCVSSv3 8.4 - CVE-2026-64489
In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check snd_ctl_new1() return value snd_ctl_new1() can…
mediumCVSSv3 5.5 - CVE-2026-64488
In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: check snd_ctl_new1() return value snd_ctl_new1() can ret…
mediumCVSSv3 5.5 - CVE-2026-64487
In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input…
mediumCVSSv3 5.5 - CVE-2026-64486
In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check snd_ctl_new1() return value snd_ctl_new1() can…
mediumCVSSv3 5.5 - CVE-2026-64485
In the Linux kernel, the following vulnerability has been resolved: ALSA: compress: Fix task creation error unwind snd_compr_task_new()…
highCVSSv3 7.8 - CVE-2026-64484
In the Linux kernel, the following vulnerability has been resolved: ALSA: es1938: check snd_ctl_new1() return value snd_ctl_new1() can…
mediumCVSSv3 5.5 - CVE-2026-64483
In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire: isight: bound the sample count to the packet payload…
highCVSSv3 7.8 - CVE-2026-64482
In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: check snd_ctl_new1() return value snd_ctl_new1() can ret…
mediumCVSSv3 5.5 - CVE-2026-64481
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs35l41: Fix firmware load work teardown cs35l41_hda crea…
highCVSSv3 7.8 - CVE-2026-64480
In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: check snd_ctl_new1() return value snd_ctl_new1() can…
mediumCVSSv3 5.5 - CVE-2026-64479
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() snd_s…
highCVSSv3 7.1 - CVE-2026-64478
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: avoid kobject path lookup in DualSense match The D…
mediumCVSSv3 5.2 - CVE-2026-64477
In the Linux kernel, the following vulnerability has been resolved: x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU whe…
— - CVE-2026-64476
In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Latch disable_idle_d3 per device When disable_idle_d3 was…
highCVSSv3 7.1 - CVE-2026-64475
In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Release the VGA arbiter client on register_device() failur…
highCVSSv3 8.8 - CVE-2026-64474
In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked…
mediumCVSSv3 5.5 - CVE-2026-64473
In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before releasing devres VFIO device deb…
— - CVE-2026-64472
In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfields and tighten struct layout Bitfield op…
highCVSSv3 7.1 - CVE-2026-64471
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on registration failure Make s…
highCVSSv3 7.1 - CVE-2026-64470
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on marvell probe failure Make…
highCVSSv3 7.1 - CVE-2026-64469
In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binder_thread_release() When a thread exits, bin…
highCVSSv3 7.8 - CVE-2026-64468
In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binder_free_transaction() In binder_free_transac…
highCVSSv3 7.8 - CVE-2026-64467
In the Linux kernel, the following vulnerability has been resolved: rust_binder: use a u64 stride when cleaning up the offsets array Al…
highCVSSv3 8.8 - CVE-2026-64466
In the Linux kernel, the following vulnerability has been resolved: rust_binder: clear freeze listener on node removal Generally usersp…
— - CVE-2026-64465
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix sleep in atomic context in xhci_free_streams() When…
mediumCVSSv3 5.5 - CVE-2026-64464
In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: fix ring sg table pages leak xhci_ring_to_sgtable()…
— - CVE-2026-64463
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci_rt1711h: unregister TCPCI port with devres rt1711…
highCVSSv3 7.8 - CVE-2026-64462
In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Fix resource leaks on probe failure The chained IRQ ha…
mediumCVSSv3 5.5 - CVE-2026-64461
In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domain leak when port fails to enable When m…
— - CVE-2026-64460
In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Skip VF Resizable BAR restore on read error sriov_restore_…
highCVSSv3 7.0 - CVE-2026-64459
In the Linux kernel, the following vulnerability has been resolved: tcp: restore RCU grace period in tcp_ao_destroy_sock Commit 51e547e…
criticalCVSSv3 9.8 - CVE-2026-64458
In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: handle extreme intervals in damon_hot_score()…
mediumCVSSv3 5.5 - CVE-2026-64457
In the Linux kernel, the following vulnerability has been resolved: virtio_pci: fix vq info pointer lookup via wrong index Unbinding a…
— - CVE-2026-64456
In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at copy_data() random…
highCVSSv3 8.4 - CVE-2026-64455
In the Linux kernel, the following vulnerability has been resolved: USB: chaoskey: Fix slab-use-after-free in chaoskey_release() The ch…
highCVSSv3 7.8 - CVE-2026-64454
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: run gadget disconnect from sleepable suspend context dwc…
highCVSSv3 7.1 - CVE-2026-64453
In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: fix disconnect UAF in client teardown usbio_disco…
highCVSSv3 7.8 - CVE-2026-64452
In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix NHC entry use-after-free on error path lowpan_nhc_do_u…
mediumCVSSv3 5.5 - CVE-2026-64451
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix NULL pointer dereference in func_set_flag() func_set_f…
mediumCVSSv3 5.5 - CVE-2026-64450
In the Linux kernel, the following vulnerability has been resolved: tipc: fix out-of-bounds read in broadcast Gap ACK blocks A broadcas…
mediumCVSSv3 6.1 - CVE-2026-64449
In the Linux kernel, the following vulnerability has been resolved: staging: vme_user: bound slave read/write to the kern_buf size The…
highCVSSv3 7.8 - CVE-2026-64448
In the Linux kernel, the following vulnerability has been resolved: smb: client: restrict implied bcc[0] exemption to responses without…
highCVSSv3 8.1 - CVE-2026-64447
In the Linux kernel, the following vulnerability has been resolved: staging: media: ipu7: fix double-free and use-after-free in error pa…
highCVSSv3 7.8 - CVE-2026-64446
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa…
highCVSSv3 7.8 - CVE-2026-64445
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth(…
highCVSSv3 8.8 - CVE-2026-64444
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop The IE par…
mediumCVSSv3 5.5 - CVE-2026-64443
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop Th…
mediumCVSSv3 5.5 - CVE-2026-64442
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() an…
highCVSSv3 8.1 - CVE-2026-64441
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_…
mediumCVSSv3 5.5 - CVE-2026-64440
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB write in HT_caps_handler() HT_caps_hand…
highCVSSv3 8.1 - CVE-2026-64439
In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5_…
criticalCVSSv3 9.8 - CVE-2026-64438
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() T…
highCVSSv3 8.8 - CVE-2026-64436
In the Linux kernel, the following vulnerability has been resolved: net: af_key: initialize alg_key_len for IPComp states pfkey_msg2xfr…
highCVSSv3 7.1 - CVE-2026-64435
In the Linux kernel, the following vulnerability has been resolved: audit: Fix data races of skb_queue_len() readers on audit_queue Mul…
highCVSSv3 7.1 - CVE-2026-64433
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete…
highCVSSv3 7.8 - CVE-2026-64432
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns…
highCVSSv3 7.8 - CVE-2026-64430
In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid calling pci_irq_vector() from hardirq context ntb_e…
highCVSSv3 7.5 - CVE-2026-64429
In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use raw_spinlock_t in the irq startup path sprd_eic…
mediumCVSSv3 5.5 - CVE-2026-64428
In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use raw_spinlock_t in the irq startup path sch_irq_unmas…
highCVSSv3 7.1 - CVE-2026-64426
In the Linux kernel, the following vulnerability has been resolved: io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE NOP fil…
mediumCVSSv3 5.5 - CVE-2026-64425
In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item c…
mediumCVSSv3 5.5 - CVE-2026-64424
In the Linux kernel, the following vulnerability has been resolved: netpoll: fix a use-after-free on shutdown path There is a use-after…
highCVSSv3 7.8 - CVE-2026-64423
In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: remove multicast group from hash table on device destruc…
highCVSSv3 7.8 - CVE-2026-64422
In the Linux kernel, the following vulnerability has been resolved: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes R…
mediumCVSSv3 5.5 - CVE-2026-64421
In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix use-after-free on remove KASAN reports a…
highCVSSv3 7.8 - CVE-2026-64420
In the Linux kernel, the following vulnerability has been resolved: mfd: cros_ec: Delay dev_set_drvdata() until probe success If ec_dev…
highCVSSv3 7.0 - CVE-2026-64419
In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()…
highCVSSv3 7.1 - CVE-2026-64418
In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix shrinker_info teardown race with expansion expand…
highCVSSv3 7.8 - CVE-2026-64417
In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL pointer dereference in debugfs shrinker_debu…
mediumCVSSv3 5.5 - CVE-2026-64416
In the Linux kernel, the following vulnerability has been resolved: mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless…
mediumCVSSv3 5.5 - CVE-2026-64415
In the Linux kernel, the following vulnerability has been resolved: mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent…
mediumCVSSv3 5.5 - CVE-2026-64414
In the Linux kernel, the following vulnerability has been resolved: netfilter: handle unreadable frags sashiko reports: When an skb wi…
highCVSSv3 7.5 - CVE-2026-64413
In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: lookin…
mediumCVSSv3 5.5 - CVE-2026-64412
In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need t…
mediumCVSSv3 5.5 - CVE-2026-64411
In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: terminate table name before find_table_lock()…
highCVSSv3 7.1 - CVE-2026-64410
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP tunnel hardware offload is not yet suppor…
criticalCVSSv3 9.8 - CVE-2026-64409
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() Ev…
mediumCVSSv3 5.5 - CVE-2026-64408
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: pin L2CAP connection during netdev registration bn…
mediumCVSSv3 5.5 - CVE-2026-64407
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw…
highCVSSv3 7.1 - CVE-2026-64405
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() hci_abo…
highCVSSv3 7.1 - CVE-2026-64404
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync() iso…
mediumCVSSv3 5.5 - CVE-2026-64403
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate option length before reading conf opt val…
highCVSSv3 7.1 - CVE-2026-64402
In the Linux kernel, the following vulnerability has been resolved: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() Wh…
highCVSSv3 7.8 - CVE-2026-64401
In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registrations cifs_swn_noti…
highCVSSv3 7.8 - CVE-2026-64400
In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent path traversal bypass by restricting caseless retry…
mediumCVSSv3 5.5 - CVE-2026-64399
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE Th…
criticalCVSSv3 9.8 - CVE-2026-64398
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a permission check for FSCTL_SET_ZERO_DATA FSCTL_SET_ZER…
highCVSSv3 8.1 - CVE-2026-64397
In the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize QUERY_DIRECTORY requests per file smb2_query_dir()…
criticalCVSSv3 9.8 - CVE-2026-64396
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancel…
highCVSSv3 8.8 - CVE-2026-64395
In the Linux kernel, the following vulnerability has been resolved: ksmbd: require source read access for duplicate extents FSCTL_DUPLI…
highCVSSv3 7.5 - CVE-2026-64394
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY…
highCVSSv3 8.8 - CVE-2026-64393
In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with opener credentials SMB2 SET_INFO handlers…
criticalCVSSv3 9.1 - CVE-2026-64392
In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for delete-on-close Delete-on-close c…
criticalCVSSv3 9.1 - CVE-2026-64391
In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for ADS I/O Alternate data streams ar…
highCVSSv3 7.8 - CVE-2026-64390
In the Linux kernel, the following vulnerability has been resolved: ksmbd: track the connection owning a byte-range lock SMB2_LOCK adds…
highCVSSv3 8.8 - CVE-2026-64389
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate NTLMv2 response before updating session key ksmbd_a…
highCVSSv3 7.8 - CVE-2026-64388
In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp with SMB3 POSIX Extensions Ownership (c…
mediumCVSSv3 4.4 - CVE-2026-64387
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix query directory replay double-free A response-bear…
mediumCVSSv3 5.5 - CVE-2026-64386
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix query_info() replay double-free A response-bearing…
highCVSSv3 7.1 - CVE-2026-64385
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_ioctl() replay A response-bear…
highCVSSv3 7.1 - CVE-2026-64384
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix change notify replay double-free A response-bearin…
highCVSSv3 7.1 - CVE-2026-64383
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_flush() replay SMB2_flush() ke…
highCVSSv3 7.5 - CVE-2026-64382
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_open() replay A response-beari…
highCVSSv3 7.8 - CVE-2026-64381
In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix next buffer leak in receive_encrypted_standard() r…
highCVSSv3 7.8 - CVE-2026-64380
In the Linux kernel, the following vulnerability has been resolved: smb: client: harden POSIX SID length parsing posix_info_sid_size()…
highCVSSv3 8.2 - CVE-2026-64379
In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When…
highCVSSv3 7.1 - CVE-2026-64378
In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroup_writeback_umount() and inode_swit…
mediumCVSSv3 4.7 - CVE-2026-64377
In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom-cpufreq-hw: Fix possible double free qcom_cpufreq.dat…
highCVSSv3 7.8 - CVE-2026-64376
In the Linux kernel, the following vulnerability has been resolved: firmware_loader: fix device reference leak in firmware_upload_regist…
highCVSSv3 7.1 - CVE-2026-64375
In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_access() with exec_update_lock (FD links)…
highCVSSv3 7.1 - CVE-2026-64374
In the Linux kernel, the following vulnerability has been resolved: sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT RT mig…
mediumCVSSv3 5.5 - CVE-2026-64373
In the Linux kernel, the following vulnerability has been resolved: cpufreq: Fix hotplug-suspend race during reboot During system reboo…
mediumCVSSv3 4.7 - CVE-2026-64372
In the Linux kernel, the following vulnerability has been resolved: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation…
highCVSSv3 7.1 - CVE-2026-64371
In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_access() with exec_update_lock (part 1) Fi…
mediumCVSSv3 5.5 - CVE-2026-64370
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error…
mediumCVSSv3 5.5 - CVE-2026-64369
In the Linux kernel, the following vulnerability has been resolved: s390: Revert support for DCACHE_WORD_ACCESS load_unaligned_zeropad(…
mediumCVSSv3 5.5 - CVE-2026-64368
In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to orig_size when only red zoning is e…
mediumCVSSv3 5.5 - CVE-2026-64367
In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to prevent stack buffer ov…
highCVSSv3 7.8 - CVE-2026-64366
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert…
highCVSSv3 8.8 - CVE-2026-64365
In the Linux kernel, the following vulnerability has been resolved: HID: letsketch: fix UAF on inrange_timer at driver unbind letsketch…
highCVSSv3 7.8 - CVE-2026-64364
In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix out-of-bounds bit access on mt_io_flags mt_io_…
highCVSSv3 8.8 - CVE-2026-64363
In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fix UAF on pending key_up_timer in remove() appleir_r…
highCVSSv3 7.8 - CVE-2026-64362
In the Linux kernel, the following vulnerability has been resolved: HID: lg-g15: cancel pending work on remove to fix a use-after-free…
highCVSSv3 7.8 - CVE-2026-64361
In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length…
highCVSSv3 7.8 - CVE-2026-64360
In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: zero-initialize buffer in hfs_bnode_read hfs_bnode_rea…
mediumCVSSv3 5.5 - CVE-2026-64359
In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment number…
highCVSSv3 7.1 - CVE-2026-64358
In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: cancel workqueue on release for supported platforms…
highCVSSv3 7.8 - CVE-2026-64357
In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchmaps reservation limit check xfs_exchmaps_estimate_ove…
mediumCVSSv3 5.5 - CVE-2026-64356
In the Linux kernel, the following vulnerability has been resolved: xfs: fix memory leak in xfs_dqinode_metadir_create() If xfs_metadir…
mediumCVSSv3 5.5 - CVE-2026-64355
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject fragmented frames in devmap Devmap broadcast redirects…
highCVSSv3 7.1 - CVE-2026-64354
In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated field counts before expansion btf_parse_…
highCVSSv3 7.8 - CVE-2026-64353
In the Linux kernel, the following vulnerability has been resolved: bpf: Keep dynamic inner array lookups nullable An ARRAY_OF_MAPS can…
mediumCVSSv3 5.5 - CVE-2026-64352
In the Linux kernel, the following vulnerability has been resolved: bpf: Allow LPM map access from sleepable BPF programs trie_lookup_e…
highCVSSv3 7.8 - CVE-2026-64351
In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() kalmia…
mediumCVSSv3 5.5 - CVE-2026-64350
In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info…
mediumCVSSv3 5.5 - CVE-2026-64348
In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochrono…
highCVSSv3 7.8 - CVE-2026-64347
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: composite: fix dead empty check in the USB_DT_OTG handl…
highCVSSv3 7.1 - CVE-2026-64346
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: Fix use-after-free in gadget_match_driver The udc…
highCVSSv3 7.8 - CVE-2026-64345
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_printer: take kref only for successful open printer_…
mediumCVSSv3 5.5 - CVE-2026-64344
In the Linux kernel, the following vulnerability has been resolved: USB: idmouse: fix use-after-free on disconnect race mutex_unlock()…
highCVSSv3 7.8 - CVE-2026-64343
In the Linux kernel, the following vulnerability has been resolved: USB: ldusb: fix use-after-free on disconnect race mutex_unlock() ma…
highCVSSv3 7.8 - CVE-2026-64342
In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-after-free on disconnect Submitted write UR…
highCVSSv3 7.8 - CVE-2026-64341
In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-after-free on disconnect race mutex_unlock(…
highCVSSv3 7.8 - CVE-2026-64340
In the Linux kernel, the following vulnerability has been resolved: USB: legousbtower: fix use-after-free on disconnect race mutex_unlo…
highCVSSv3 7.8 - CVE-2026-64339
In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: bound bulk IN response length to the received tran…
highCVSSv3 7.1 - CVE-2026-64338
In the Linux kernel, the following vulnerability has been resolved: USB: misc: uss720: unregister parport on probe failure uss720_probe…
mediumCVSSv3 5.5 - CVE-2026-64337
In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: unmap request DMA on queue failure mtu3_gadget_queue() m…
highCVSSv3 7.1 - CVE-2026-64336
In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan_pda: fix information leak The write() callback…
highCVSSv3 7.1 - CVE-2026-64335
In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix broken rx after throttle If the p…
highCVSSv3 7.1 - CVE-2026-64334
In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix hard lockup on disconnect If subm…
highCVSSv3 7.1 - CVE-2026-64333
In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix write buffer corruption The digi_…
highCVSSv3 7.8 - CVE-2026-64332
In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated de…
mediumCVSSv3 5.5 - CVE-2026-64331
In the Linux kernel, the following vulnerability has been resolved: usbip: vudc: fix NULL deref in vep_dequeue() vep_alloc_request() wa…
mediumCVSSv3 5.5 - CVE-2026-64330
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Validate SVID index in svdm_consume_modes() In sv…
highCVSSv3 7.8 - CVE-2026-64329
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove The thr…
highCVSSv3 7.8 - CVE-2026-64328
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix DMA fence leak In ffs_dmabuf_transfer(), a f…
mediumCVSSv3 5.5 - CVE-2026-64327
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direc…
mediumCVSSv3 5.5 - CVE-2026-64326
In the Linux kernel, the following vulnerability has been resolved: block: skip sync_blockdev() on surprise removal in bdev_mark_dead()…
mediumCVSSv3 5.5 - CVE-2026-64325
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This…
mediumCVSSv3 5.5 - CVE-2026-64324
In the Linux kernel, the following vulnerability has been resolved: udf: validate free block extents against the partition length udf_f…
mediumCVSSv3 5.5 - CVE-2026-64323
In the Linux kernel, the following vulnerability has been resolved: udf: validate VAT header length against the VAT inode size udf_load…
mediumCVSSv3 5.5 - CVE-2026-64322
In the Linux kernel, the following vulnerability has been resolved: udf: validate sparing table length as an entry count, not a byte cou…
highCVSSv3 7.8 - CVE-2026-64321
In the Linux kernel, the following vulnerability has been resolved: nvme: target: rdma: fix ndev refcount leak on queue connect nvmet_r…
mediumCVSSv3 5.5 - CVE-2026-64320
In the Linux kernel, the following vulnerability has been resolved: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Pag…
highCVSSv3 8.4 - CVE-2026-64319
In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bounds against transfer l…
criticalCVSSv3 9.1 - CVE-2026-64318
In the Linux kernel, the following vulnerability has been resolved: partitions: aix: bound the pp_count scan to the ppe array aix_parti…
mediumCVSSv3 5.5 - CVE-2026-64317
In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record get_sym…
mediumCVSSv3 5.5 - CVE-2026-64316
In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard key hex dumps Use…
highCVSSv3 7.1 - CVE-2026-64315
In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard key hex dumps Use…
highCVSSv3 7.1 - CVE-2026-64314
In the Linux kernel, the following vulnerability has been resolved: crypto: chacha20poly1305 - validate poly1305 template argument chac…
mediumCVSSv3 5.5 - CVE-2026-64313
In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli multiplication The carry fl…
highCVSSv3 7.8 - CVE-2026-64312
In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parallel fallback pcrypt…
highCVSSv3 7.5 - CVE-2026-64310
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for SEV ioctls Sashiko notes:…
mediumCVSSv3 5.5 - CVE-2026-64309
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT) Sashiko n…
mediumCVSSv3 5.5 - CVE-2026-64308
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD) Sashik…
mediumCVSSv3 5.5 - CVE-2026-64307
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG) Sashiko n…
mediumCVSSv3 5.5 - CVE-2026-64306
In the Linux kernel, the following vulnerability has been resolved: crypto: drbg - Fix returning success on failure in CTR_DRBG drbg_ct…
mediumCVSSv3 5.5 - CVE-2026-64305
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - protect service table iterations with service_lock Th…
highCVSSv3 7.8 - CVE-2026-64304
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths The generic RSA ke…
highCVSSv3 7.8 - CVE-2026-64303
In the Linux kernel, the following vulnerability has been resolved: spi: fsl-lpspi: terminate the RX channel on TX prepare failure path…
highCVSSv3 7.1 - CVE-2026-64302
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix freeing of PMD-sized vmemmap pages Commit bf9e4e30f353…
mediumCVSSv3 5.5 - CVE-2026-64301
In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()…
highCVSSv3 7.1 - CVE-2026-64300
In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix page UAF in map_range() map_range() reads rb->aux_pag…
highCVSSv3 7.8 - CVE-2026-64299
In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent out-of-bounds read in glob matching String event f…
mediumCVSSv3 5.5 - CVE-2026-64298
In the Linux kernel, the following vulnerability has been resolved: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC POSIX…
highCVSSv3 7.8 - CVE-2026-64297
In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of module_extend_max_pages()…
mediumCVSSv3 5.5 - CVE-2026-64296
In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfat_find_dir_entry() In exfat_fin…
highCVSSv3 7.8 - CVE-2026-64295
In the Linux kernel, the following vulnerability has been resolved: mm: page_ext: add count limit to page_ext_iter_next to prevent inval…
mediumCVSSv3 5.5 - CVE-2026-64294
In the Linux kernel, the following vulnerability has been resolved: mm: do file ownership checks with the proper mount idmap Ever since…
highCVSSv3 7.1 - CVE-2026-64293
In the Linux kernel, the following vulnerability has been resolved: iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read Th…
highCVSSv3 7.8 - CVE-2026-64292
In the Linux kernel, the following vulnerability has been resolved: iommufd: Move vevent memory allocation outside spinlock The veventq…
mediumCVSSv3 5.5 - CVE-2026-64291
In the Linux kernel, the following vulnerability has been resolved: iommufd: Set veventq_depth upper bound iommufd_veventq_alloc() acce…
mediumCVSSv3 5.5 - CVE-2026-64290
In the Linux kernel, the following vulnerability has been resolved: iommufd: Break the loop on failure in iommufd_fault_fops_read() On…
mediumCVSSv3 5.5 - CVE-2026-64289
In the Linux kernel, the following vulnerability has been resolved: iommufd: Set upper bounds on cache invalidation entry_num and entry_…
mediumCVSSv3 5.5 - CVE-2026-64288
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB VNCR TLB i…
mediumCVSSv3 5.5 - CVE-2026-64287
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU flush_hy…
mediumCVSSv3 6.1 - CVE-2026-64286
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU…
highCVSSv3 7.1 - CVE-2026-64285
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP g…
mediumCVSSv3 5.5 - CVE-2026-64284
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ensure vendor's exit handler runs before fastpath userspac…
highCVSSv3 7.1 - CVE-2026-64283
In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Treat memslot binding offset+size as unsigned valu…
highCVSSv3 7.0 - CVE-2026-64282
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notif…
mediumCVSSv3 4.7 - CVE-2026-64280
In the Linux kernel, the following vulnerability has been resolved: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()…
highCVSSv3 7.1 - CVE-2026-64279
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter deregistration race Adapters can be looked u…
mediumCVSSv3 4.7 - CVE-2026-64278
In the Linux kernel, the following vulnerability has been resolved: i2c: imx-lpi2c: mark I2C adapter when hardware is powered down On s…
mediumCVSSv3 5.5 - CVE-2026-64277
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count rmi_…
mediumCVSSv3 5.5 - CVE-2026-64276
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count…
mediumCVSSv3 5.5 - CVE-2026-64275
In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - prevent division by zero and arithmetic underflow…
mediumCVSSv3 5.5 - CVE-2026-64274
In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contact count goodix_ts_r…
highCVSSv3 7.8 - CVE-2026-64273
In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported force-feedback effect inde…
highCVSSv3 7.8 - CVE-2026-64272
In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MMS134S and MMS136 The MMS13…
highCVSSv3 7.8 - CVE-2026-64271
In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index on every complete packet t…
highCVSSv3 7.8 - CVE-2026-64270
In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device packet size mms114_inter…
highCVSSv3 7.8 - CVE-2026-64269
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_s…
mediumCVSSv3 5.7 - CVE-2026-64268
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In driv…
highCVSSv3 7.1 - CVE-2026-64267
In the Linux kernel, the following vulnerability has been resolved: fuse: avoid 32-bit prune notification count wrap FUSE_NOTIFY_PRUNE…
mediumCVSSv3 5.5 - CVE-2026-64266
In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before returning from fuse_ref_folio() fuse_r…
highCVSSv3 7.8 - CVE-2026-64265
In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req W…
highCVSSv3 7.8 - CVE-2026-64264
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix EFAULT clobber in fuse_uring_commit copy_from_user(…
mediumCVSSv3 5.5 - CVE-2026-64263
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix moving cancelled entry to ent_in_userspace list fus…
mediumCVSSv3 5.5 - CVE-2026-64262
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: end fuse_req on io-uring cancel task work When io_uring…
mediumCVSSv3 5.5 - CVE-2026-64261
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues fu…
highCVSSv3 7.8 - CVE-2026-64260
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid queue->stopped races and set/read that value under…
highCVSSv3 7.8 - CVE-2026-64259
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: make a fuse_req on SQE commit only findable after memcpy…
highCVSSv3 7.8 - CVE-2026-64258
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: remove request-less entries from ent_w_req_queue to fix…
mediumCVSSv3 5.5 - CVE-2026-64256
In the Linux kernel, the following vulnerability has been resolved: xfs: don't wrap around quota ids in dqiterate LOLLM noticed that q_…
mediumCVSSv3 5.5 - CVE-2026-64255
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session han…
highCVSSv3 7.1 - CVE-2026-64254
In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG…
highCVSSv3 8.4 - CVE-2026-64253
In the Linux kernel, the following vulnerability has been resolved: kernel/fork: clear PF_BLOCK_TS in copy_process() PF_BLOCK_TS is onl…
mediumCVSSv3 5.5 - CVE-2026-64251
In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next() pwrse…
highCVSSv3 7.8 - CVE-2026-64249
In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use-after-free in child_regions_with_firmware() M…
highCVSSv3 8.4 - CVE-2026-64247
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Bound the bank index when querying sparse banks…
highCVSSv3 8.4 - CVE-2026-64246
In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-after-free in the linkst…
highCVSSv3 8.4 - CVE-2026-64245
In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fb_find_mode() If mode_option…
highCVSSv3 7.8 - CVE-2026-64244
In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: set mem->altmap after successful device registr…
mediumCVSSv3 5.5 - CVE-2026-64243
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simple_mux_…
highCVSSv3 7.1 - CVE-2026-64242
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe error path usb_initi…
highCVSSv3 7.8 - CVE-2026-64241
In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: teardown bugs and resource leaks Address several te…
mediumCVSSv3 5.5 - CVE-2026-64240
In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: fix control request setup packet Commit eac…
mediumCVSSv3 5.5 - CVE-2026-64239
In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in regions_rmdirs() DAM…
highCVSSv3 7.8 - CVE-2026-64238
In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix deadlock on shared proxy's parent removal Commit…
mediumCVSSv3 5.5 - CVE-2026-64237
In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - validate firmware size before use Ensure that the…
highCVSSv3 7.1 - CVE-2026-64236
In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock-frequency When…
mediumCVSSv3 5.5 - CVE-2026-64235
In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampoline…
highCVSSv3 8.1 - CVE-2026-64234
In the Linux kernel, the following vulnerability has been resolved: tty: serial: pch_uart: add check for dma_alloc_coherent() Add a che…
mediumCVSSv3 5.5 - CVE-2026-64233
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bi…
mediumCVSSv3 5.5 - CVE-2026-64232
In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in blk_insert_cloned_request…
criticalCVSSv3 9.8 - CVE-2026-64231
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: don't dump registers past the mapped region On DSI 6G…
mediumCVSSv3 5.5 - CVE-2026-64230
In the Linux kernel, the following vulnerability has been resolved: regulator: tps65219: fix irq_data.rdev not being assigned Commit 64…
mediumCVSSv3 5.5 - CVE-2026-64229
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting w…
mediumCVSSv3 5.5 - CVE-2026-64228
In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phyd…
mediumCVSSv3 5.5 - CVE-2026-64227
In the Linux kernel, the following vulnerability has been resolved: ACPI: driver: Check ACPI_COMPANION() against NULL during probe Sinc…
highCVSSv3 7.1 - CVE-2026-64226
In the Linux kernel, the following vulnerability has been resolved: sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path…
highCVSSv3 7.8 - CVE-2026-64225
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index cgx_spe…
highCVSSv3 7.8 - CVE-2026-64224
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvu_rep_rsrc_init() rvu_rep_rsrc_i…
highCVSSv3 7.8 - CVE-2026-64223
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: consume only present negotiated TTLM maps ieee80211…
highCVSSv3 8.1 - CVE-2026-64222
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool->stack on AQ init failure o…
highCVSSv3 7.0 - CVE-2026-64221
In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver…
highCVSSv3 7.8 - CVE-2026-64220
In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode->secondary to NULL in fwnode_init() If…
mediumCVSSv3 5.5 - CVE-2026-64219
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and link_index in dc_proces…
highCVSSv3 7.1 - CVE-2026-64218
In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix report_work leak on backbone_gw purge batadv_b…
highCVSSv3 7.8 - CVE-2026-64217
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_iter() Fix netfs_ext…
highCVSSv3 7.8 - CVE-2026-64216
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() net…
criticalCVSSv3 9.8 - CVE-2026-64215
In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table Chec…
mediumCVSSv3 5.5 - CVE-2026-64214
In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preempt_disable|enable() calls from a…
mediumCVSSv3 5.5 - CVE-2026-64213
In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Add lock protection to lm90_alert Sashiko reports: l…
highCVSSv3 7.1 - CVE-2026-64212
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't dereference a pointer before NULL checking…
highCVSSv3 7.1 - CVE-2026-64211
In the Linux kernel, the following vulnerability has been resolved: srcu: Don't queue workqueue handlers to never-online CPUs While an…
mediumCVSSv3 5.5 - CVE-2026-64210
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix unlocked writing to ICOSQ During napi poll, whe…
highCVSSv3 7.1 - CVE-2026-64209
In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing conf…
highCVSSv3 7.1 - CVE-2026-64208
In the Linux kernel, the following vulnerability has been resolved: crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks…
highCVSSv3 7.5 - CVE-2026-64207
In the Linux kernel, the following vulnerability has been resolved: net/sched: dualpi2: fix GSO backlog accounting When DualPI2 splits…
mediumCVSSv3 5.5 - CVE-2026-64206
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock l…
mediumCVSSv3 5.5 - CVE-2026-64205
In the Linux kernel, the following vulnerability has been resolved: i2c: i801: fix hardware state machine corruption in error path A se…
mediumCVSSv3 5.5 - CVE-2026-64192
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninit…
highCVSSv3 7.8 - CVE-2026-64191
In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid length The I2C_S…
highCVSSv3 7.8 - CVE-2026-64189
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix race between dump and ip_set_list resize The…
highCVSSv3 7.1 - CVE-2026-64188
In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()…
mediumCVSSv3 5.5 - CVE-2026-64187
In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the f…
mediumCVSSv3 5.5 - CVE-2026-64186
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs In i…
highCVSSv3 7.1 - CVE-2026-64185
In the Linux kernel, the following vulnerability has been resolved: sysfs: don't remove existing directory on update failure When sysfs…
mediumCVSSv3 5.5 - CVE-2026-64184
In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() damon_…
mediumCVSSv3 5.5 - CVE-2026-64183
In the Linux kernel, the following vulnerability has been resolved: efi: Allocate runtime workqueue before ACPI init Since commit 58…
mediumCVSSv3 5.5 - CVE-2026-64182
In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference leak in poison accou…
mediumCVSSv3 5.5 - CVE-2026-64181
In the Linux kernel, the following vulnerability has been resolved: mm: fix __vm_normal_page() to handle missing support for pmd_special…
highCVSSv3 7.8 - CVE-2026-64180
In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix memory block reference leak on remove Patch…
mediumCVSSv3 5.5 - CVE-2026-64179
In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix potential memory leaks in ipc_imem_init() The…
mediumCVSSv3 5.5 - CVE-2026-64178
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev->name bnep_add_connection() ne…
highCVSSv3 8.8 - CVE-2026-64177
In the Linux kernel, the following vulnerability has been resolved: phonet/pep: disable BH around forwarded sk_receive_skb() The networ…
mediumCVSSv3 5.5 - CVE-2026-64176
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices On old d…
highCVSSv3 8.1 - CVE-2026-64175
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: stop TX during firmware restart When iwlwifi fi…
highCVSSv3 7.5 - CVE-2026-64174
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: advance loop vars in cfg80211_merge_profile() cfg80…
mediumCVSSv3 5.5 - CVE-2026-64173
In the Linux kernel, the following vulnerability has been resolved: tracing: Do not call map->ops->elt_free() if elt_alloc() fails In p…
mediumCVSSv3 5.5 - CVE-2026-64172
In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (errat…
highCVSSv3 7.1 - CVE-2026-64171
In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: fix pm_runtime leak on mutex_lock failure If tegra_i2c_…
mediumCVSSv3 5.5 - CVE-2026-64170
In the Linux kernel, the following vulnerability has been resolved: spi: qup: fix error pointer deref after DMA setup failure The drive…
mediumCVSSv3 5.5 - CVE-2026-64169
In the Linux kernel, the following vulnerability has been resolved: spi: ep93xx: fix error pointer deref after DMA setup failure The dr…
mediumCVSSv3 5.5 - CVE-2026-64168
In the Linux kernel, the following vulnerability has been resolved: spi: sprd: fix error pointer deref after DMA setup failure The driv…
mediumCVSSv3 5.5 - CVE-2026-64167
In the Linux kernel, the following vulnerability has been resolved: kho: skip KHO for crash kernel kho_fill_kimage() unconditionally po…
mediumCVSSv3 5.5 - CVE-2026-64166
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Check for NULL FF-A ID table while driver registr…
mediumCVSSv3 5.5 - CVE-2026-64165
In the Linux kernel, the following vulnerability has been resolved: ARM: integrator: Fix early initialization Starting with commit bdb2…
mediumCVSSv3 5.5 - CVE-2026-64164
In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_…
mediumCVSSv3 5.5 - CVE-2026-64163
In the Linux kernel, the following vulnerability has been resolved: test_kprobes: clear kprobes between test runs Running the kprobes s…
mediumCVSSv3 5.5 - CVE-2026-64162
In the Linux kernel, the following vulnerability has been resolved: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() In idp…
criticalCVSSv3 9.8 - CVE-2026-64161
In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: fix eth_ports_node leak in probe The error p…
mediumCVSSv3 5.5 - CVE-2026-64160
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential for tearing in ->remote_i_size and ->zero_point…
mediumCVSSv3 5.8 - CVE-2026-64159
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix zeropoint update where i_size > remote_i_size Fix the up…
mediumCVSSv3 5.5 - CVE-2026-64157
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-write folio In netfs_i…
mediumCVSSv3 5.5 - CVE-2026-64156
In the Linux kernel, the following vulnerability has been resolved: netfs, afs: Fix write skipping in dir/link writepages Fix netfs_wri…
mediumCVSSv3 5.5 - CVE-2026-64155
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix error path leaks in some WMI WOW calls Fix two in…
mediumCVSSv3 5.5 - CVE-2026-64154
In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() In a6xx_gpu…
highCVSSv3 7.1 - CVE-2026-64153
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN…
highCVSSv3 8.8 - CVE-2026-64152
In the Linux kernel, the following vulnerability has been resolved: iommu: Handle unmap error when iommu_debug is enabled Sashiko notic…
highCVSSv3 7.8 - CVE-2026-64151
In the Linux kernel, the following vulnerability has been resolved: iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap Sashiko p…
highCVSSv3 8.4 - CVE-2026-64150
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before re-enabling softirqs…
criticalCVSSv3 9.8 - CVE-2026-64149
In the Linux kernel, the following vulnerability has been resolved: dma-mapping: move dma_map_resource() sanity check into debug code d…
mediumCVSSv3 5.5 - CVE-2026-64148
In the Linux kernel, the following vulnerability has been resolved: pds_core: fix error handling in pdsc_devcmd_wait Fix two cases wher…
highCVSSv3 7.5 - CVE-2026-64147
In the Linux kernel, the following vulnerability has been resolved: pds_core: fix debugfs_lookup dentry leak and error handling debugfs…
mediumCVSSv3 5.5 - CVE-2026-64146
In the Linux kernel, the following vulnerability has been resolved: erofs: fix metabuf leak in inode xattr initialization commit bb88e8…
highCVSSv3 7.1 - CVE-2026-64145
In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix dma_buffer leak on bus acquire failure wilc_wla…
highCVSSv3 7.8 - CVE-2026-64144
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix urb->setup_packet leak in error paths The set…
mediumCVSSv3 5.5 - CVE-2026-64143
In the Linux kernel, the following vulnerability has been resolved: platform/x86: uniwill-laptop: Do not enable the charging limit even…
mediumCVSSv3 5.5 - CVE-2026-64142
In the Linux kernel, the following vulnerability has been resolved: ksmbd: close durable scavenger races against m_fp_list lookups ksmb…
criticalCVSSv3 9.8 - CVE-2026-64141
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in compare_guid_key() session_f…
highCVSSv3 7.5 - CVE-2026-64140
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in proc_show_files() When a SMB…
highCVSSv3 7.5 - CVE-2026-64139
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overfl…
mediumCVSSv3 5.5 - CVE-2026-64138
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate SID in parent security descriptor during ACL inherit…
criticalCVSSv3 9.8 - CVE-2026-64137
In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netlink CIFS_GENL_CMD_S…
highCVSSv3 7.8 - CVE-2026-64136
In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_u…
criticalCVSSv3 9.8 - CVE-2026-64135
In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK…
mediumCVSSv3 5.5 - CVE-2026-64134
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Don't setup bogus iov_iter for silencing At transition t…
highCVSSv3 7.8 - CVE-2026-64133
In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access at reading cache find_…
highCVSSv3 7.1 - CVE-2026-64132
In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: refresh hdr pointer before ioam6_event() Reported by Sa…
criticalCVSSv3 9.8 - CVE-2026-64131
In the Linux kernel, the following vulnerability has been resolved: mm/memory: fix spurious warning when unmapping device-private/exclus…
mediumCVSSv3 5.5 - CVE-2026-64130
In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: fix initialization of tags of the huge zero folio wit…
mediumCVSSv3 5.5 - CVE-2026-64129
In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_…
mediumCVSSv3 5.5 - CVE-2026-64128
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: drop ISO_END frames received without prior ISO_START…
mediumCVSSv3 5.5 - CVE-2026-64127
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack poin…
mediumCVSSv3 5.5 - CVE-2026-64126
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate Add Extended Advertising Data length MGMT…
highCVSSv3 7.3 - CVE-2026-64125
In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: keep RBUF EEE/PM disabled Setting RBUF_EEE_EN | RBUF…
criticalCVSSv3 9.8 - CVE-2026-64124
In the Linux kernel, the following vulnerability has been resolved: net: devmem: reject dma-buf bind with non-page-aligned size or SG le…
highCVSSv3 8.8 - CVE-2026-64123
In the Linux kernel, the following vulnerability has been resolved: net: hsr: defer node table free until after RCU readers HSR node-li…
highCVSSv3 7.8 - CVE-2026-64122
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover…
criticalCVSSv3 9.8 - CVE-2026-64121
In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over num_tx_queues ifb_dev_init() al…
highCVSSv3 7.1 - CVE-2026-64120
In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix NULL pointer dereference in phy_reply_size In phy…
mediumCVSSv3 5.5 - CVE-2026-64119
In the Linux kernel, the following vulnerability has been resolved: l2tp: use list_del_rcu in l2tp_session_unhash An unprivileged local…
mediumCVSSv3 5.5 - CVE-2026-64118
In the Linux kernel, the following vulnerability has been resolved: qed: fix double free in qed_cxt_tables_alloc() If one of the later…
highCVSSv3 8.4 - CVE-2026-64117
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb iee…
highCVSSv3 7.1 - CVE-2026-64116
In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() Reported by…
highCVSSv3 7.5 - CVE-2026-64115
In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix UAF when peer resets connection during handshake vm…
highCVSSv3 8.8 - CVE-2026-64114
In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 raw_send_hdrinc()…
highCVSSv3 7.8 - CVE-2026-64113
In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix use-after-free in VEPA multicast source pruning ixgbev…
criticalCVSSv3 9.8 - CVE-2026-64112
In the Linux kernel, the following vulnerability has been resolved: rbd: eliminate a race in lock_dwork draining on unmap Given how rbd…
highCVSSv3 7.4 - CVE-2026-64111
In the Linux kernel, the following vulnerability has been resolved: lsm: hold cred_guard_mutex for lsm_set_self_attr() Just as proc_pid…
criticalCVSSv3 9.8 - CVE-2026-64110
In the Linux kernel, the following vulnerability has been resolved: igc: fix potential skb leak in igc_fpe_xmit_smd_frame() When igc_fp…
mediumCVSSv3 5.5 - CVE-2026-64109
In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix UAF read of tail->len in unix_stream_data_wait() unix_…
highCVSSv3 8.8 - CVE-2026-64108
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix busy dentry used after unmounting Since commit 340cea84f6…
highCVSSv3 7.8 - CVE-2026-64107
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock…
mediumCVSSv3 5.5 - CVE-2026-64106
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_even…
criticalCVSSv3 9.0 - CVE-2026-64105
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Free private_irqs when init fails after allocation…
mediumCVSSv3 5.5 - CVE-2026-64104
In the Linux kernel, the following vulnerability has been resolved: virt: sev-guest: Explicitly leak pages in unknown state When set_me…
highCVSSv3 8.7 - CVE-2026-64103
In the Linux kernel, the following vulnerability has been resolved: scsi: isci: Fix use-after-free in device removal path The ISCI comp…
highCVSSv3 7.8 - CVE-2026-64102
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before signed receive mat…
criticalCVSSv3 9.8 - CVE-2026-64101
In the Linux kernel, the following vulnerability has been resolved: fwctl: pds: Validate RPC input size before parsing The fwctl core a…
mediumCVSSv3 5.5 - CVE-2026-64100
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix shrinker deadlock With PROVE_LOCKING on an Snapdragon…
mediumCVSSv3 5.5 - CVE-2026-64099
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix use-after-free of CPU job query arrays on error path T…
highCVSSv3 7.8 - CVE-2026-64098
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use uninterruptible resv lock for plane updates virtio_…
highCVSSv3 7.8 - CVE-2026-64097
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate GPIO pin LUT table size before iterating…
mediumCVSSv3 5.5 - CVE-2026-64096
In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: fix use-after-free in orig_node RCU release bata…
highCVSSv3 8.8 - CVE-2026-64095
In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid double decrement of bla.num_requests The bla…
highCVSSv3 7.1 - CVE-2026-64094
In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid NULL-ptr deref for claim via dropped interfac…
mediumCVSSv3 5.5 - CVE-2026-64093
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: directly shut down timer on cleanup batadv_tp…
highCVSSv3 8.8 - CVE-2026-64091
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix TOCTOU race for reported vlans The local TT bas…
criticalCVSSv3 9.8 - CVE-2026-64090
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid empty VLAN responses The commit 16116dac2339…
mediumCVSSv3 5.5 - CVE-2026-64089
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative last_changeset_len batadv_piv_tt::last…
criticalCVSSv3 9.8 - CVE-2026-64088
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative tt_buff_len batadv_orig_node::tt_buff_…
highCVSSv3 8.8 - CVE-2026-64087
In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) reject implausible blackbox record_count adm…
mediumCVSSv3 5.5 - CVE-2026-64086
In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buf…
highCVSSv3 7.8 - CVE-2026-64085
In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-si…
highCVSSv3 7.8 - CVE-2026-64084
In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO…
highCVSSv3 7.8 - CVE-2026-64083
In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO…
mediumCVSSv3 5.5 - CVE-2026-64082
In the Linux kernel, the following vulnerability has been resolved: riscv: Fix register corruption from uninitialized cregs on error co…
mediumCVSSv3 5.3 - CVE-2026-64081
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Validate framework notification message layout F…
highCVSSv3 8.4 - CVE-2026-64080
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Snapshot notifier callbacks under lock Both noti…
criticalCVSSv3 9.3 - CVE-2026-64079
In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: allocate hook ops while under mutex arp/ip(6)t…
criticalCVSSv3 9.8 - CVE-2026-64078
In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: add and use xtables_unregister_table_exit Prev…
criticalCVSSv3 9.8 - CVE-2026-64077
In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: move to two-stage removal scheme Like previous…
mediumCVSSv3 5.5 - CVE-2026-64076
In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: eb_tables: close module init race sashiko report…
criticalCVSSv3 9.8 - CVE-2026-64075
In the Linux kernel, the following vulnerability has been resolved: fprobe: Fix unregister_fprobe() to wait for RCU grace period Commit…
highCVSSv3 7.8 - CVE-2026-64074
In the Linux kernel, the following vulnerability has been resolved: fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap s…
highCVSSv3 7.8 - CVE-2026-64073
In the Linux kernel, the following vulnerability has been resolved: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT On…
highCVSSv3 7.8 - CVE-2026-64072
In the Linux kernel, the following vulnerability has been resolved: nvme: fix bio leak on mapping failure The local bio is always NULL,…
mediumCVSSv3 5.5 - CVE-2026-64071
In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix use-after-free in nvme_free_host_mem() nvme_free_host…
highCVSSv3 7.8 - CVE-2026-64070
In the Linux kernel, the following vulnerability has been resolved: powerpc/hv-gpci: fix preempt count leak in sysfs show paths Four sy…
criticalCVSSv3 9.8 - CVE-2026-64069
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix cancellation of a DIO and single read subrequests When t…
criticalCVSSv3 9.8 - CVE-2026-64068
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding new subreqs Fix netf…
criticalCVSSv3 9.8 - CVE-2026-64067
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing barriers when accessing stream->subrequests lockl…
criticalCVSSv3 9.8 - CVE-2026-64066
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_to_pagecache() to pause on subreq failure Fix…
criticalCVSSv3 9.8 - CVE-2026-64065
In the Linux kernel, the following vulnerability has been resolved: netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call The…
mediumCVSSv3 5.5 - CVE-2026-64064
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all change…
mediumCVSSv3 5.5 - CVE-2026-64063
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix streaming write being overwritten In order to avoid read…
highCVSSv3 7.8 - CVE-2026-64062
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential deadlock in write-through mode Fix netfs_advan…
mediumCVSSv3 5.5 - CVE-2026-64061
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfs_read_gaps() Fix netfs_r…
criticalCVSSv3 9.8 - CVE-2026-64060
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix leak of request in netfs_write_begin() error handling Fi…
mediumCVSSv3 5.5 - CVE-2026-64059
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio->private handling in netfs_perform_write() Under s…
mediumCVSSv3 5.5 - CVE-2026-64058
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_folio() to wait on writeback Fix netfs_read_f…
highCVSSv3 7.8 - CVE-2026-64057
In the Linux kernel, the following vulnerability has been resolved: afs: Fix the locking used by afs_get_link() The afs filesystem in t…
highCVSSv3 7.8 - CVE-2026-64056
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port The SKB used to assemb…
criticalCVSSv3 9.8 - CVE-2026-64055
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Carry over frag counter The gmac_rx() NAPI…
criticalCVSSv3 9.8 - CVE-2026-64054
In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP request net_shaper_nl…
highCVSSv3 7.8 - CVE-2026-64053
In the Linux kernel, the following vulnerability has been resolved: block: don't overwrite bip_vcnt in bio_integrity_copy_user() bio_in…
highCVSSv3 7.8 - CVE-2026-64052
In the Linux kernel, the following vulnerability has been resolved: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user()…
mediumCVSSv3 5.5 - CVE-2026-64051
In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Add overflow check to remap_pfn_range during mmap The c…
highCVSSv3 7.8 - CVE-2026-64050
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: don't mix devm and drmm functions Mixing devm and drmm…
highCVSSv3 7.8 - CVE-2026-64049
In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx Before a…
mediumCVSSv3 5.5 - CVE-2026-64048
In the Linux kernel, the following vulnerability has been resolved: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot On…
highCVSSv3 7.5 - CVE-2026-64047
In the Linux kernel, the following vulnerability has been resolved: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg…
criticalCVSSv3 9.8 - CVE-2026-64046
In the Linux kernel, the following vulnerability has been resolved: net: tls: prevent chain-after-chain in plain text SG Sashiko points…
criticalCVSSv3 9.8 - CVE-2026-64045
In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - use cached peer pointer in ovpn_tcp_close() ovpn_tcp_cl…
highCVSSv3 8.4 - CVE-2026-64044
In the Linux kernel, the following vulnerability has been resolved: ovpn: respect peer refcount in CMD_NEW_PEER error path ovpn_nl_peer…
highCVSSv3 7.8 - CVE-2026-64043
In the Linux kernel, the following vulnerability has been resolved: ovpn: fix race between deleting interface and adding new peer While…
— - CVE-2026-64042
In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Check BAR resources before exporting a DMABUF A DMABUF ex…
highCVSSv3 8.8 - CVE-2026-64041
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: fs210x: fix possible buffer overflow In fs210x_effect…
highCVSSv3 7.8 - CVE-2026-64040
In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix error return when vfs_mkdir() fails When vfs_mkdir(…
— - CVE-2026-64039
In the Linux kernel, the following vulnerability has been resolved: drm/msm/snapshot: fix dumping of the unaligned regions The snapshot…
highCVSSv3 7.7 - CVE-2026-64038
In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Stop work before releasing hwmon device Sashiko repor…
mediumCVSSv3 5.5 - CVE-2026-64037
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is dis…
criticalCVSSv3 9.8 - CVE-2026-64036
In the Linux kernel, the following vulnerability has been resolved: cgroup/rstat: validate cpu before css_rstat_cpu() access css_rstat_…
mediumCVSSv3 5.5 - CVE-2026-64035
In the Linux kernel, the following vulnerability has been resolved: igc: set tx buffer type for SMD frames Sashiko pointed out that igc…
criticalCVSSv3 9.8 - CVE-2026-64034
In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer In…
criticalCVSSv3 9.3 - CVE-2026-64033
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Fix use-after-free in path file creation cleanup In the…
criticalCVSSv3 9.8 - CVE-2026-64032
In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix a possible use-after-free when removing a bridge…
highCVSSv3 7.8 - CVE-2026-64031
In the Linux kernel, the following vulnerability has been resolved: erofs: fix managed cache race for unaligned extents After unaligned…
highCVSSv3 7.8 - CVE-2026-64030
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs IEEE80211…
highCVSSv3 8.8 - CVE-2026-64029
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize UMP output teardown with event_input seq_ump_p…
highCVSSv3 7.8 - CVE-2026-64027
In the Linux kernel, the following vulnerability has been resolved: net: shaper: rework the VALID marking (again) Recent commit changed…
highCVSSv3 7.8 - CVE-2026-64026
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in rec…
highCVSSv3 7.8 - CVE-2026-64025
In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx sk_psock_…
criticalCVSSv3 9.8 - CVE-2026-64024
In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction Blam…
criticalCVSSv3 9.4 - CVE-2026-64023
In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: fix a potential use-after-free On error we free a…
highCVSSv3 7.8 - CVE-2026-64022
In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: remove the software node when deactivating the agg…
— - CVE-2026-64021
In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix exec_queue leak on width check in stream open In xe_…
— - CVE-2026-64020
In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma_vecs leak on p2p memory We don't unmap P2P memory…
highCVSSv3 7.5 - CVE-2026-64019
In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma mapping leak on data setup error We're leaking th…
— - CVE-2026-64018
In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-bounds array access…
criticalCVSSv3 9.3 - CVE-2026-64017
In the Linux kernel, the following vulnerability has been resolved: blk-mq: pop cached request if it is usable When submitting a bio to…
criticalCVSSv3 9.8 - CVE-2026-64015
In the Linux kernel, the following vulnerability has been resolved: security/keys: fix missed RCU read section on lookup Nicholas Carli…
highCVSSv3 7.8 - CVE-2026-64014
In the Linux kernel, the following vulnerability has been resolved: Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer siz…
— - CVE-2026-64013
In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23…
— - CVE-2026-64012
In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_…
— - CVE-2026-64011
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix use-after-free in llcp_sock_release() llcp_sock_rele…
highCVSSv3 7.8 - CVE-2026-64010
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() A race con…
highCVSSv3 8.8 - CVE-2026-64009
In the Linux kernel, the following vulnerability has been resolved: xfrm: Check for underflow in xfrm_state_mtu Leo Lin reported OOB wr…
highCVSSv3 7.8 - CVE-2026-64008
In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix UAF via dangling GEM handle in create_bo rocket_i…
highCVSSv3 7.8 - CVE-2026-64007
In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: refresh tcphdr after skb_ensure_writable synpr…
criticalCVSSv3 9.8 - CVE-2026-64006
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix dst corruption in same register operation…
— - CVE-2026-64005
In the Linux kernel, the following vulnerability has been resolved: net/smc: Do not re-initialize smc hashtables INIT_HLIST_HEAD(&smc_v…
highCVSSv3 7.8 - CVE-2026-64004
In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix locking in .getsockopt Mirror iucv_sock_setsockopt()…
highCVSSv3 7.8 - CVE-2026-64003
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_ho…
highCVSSv3 7.5 - CVE-2026-64002
In the Linux kernel, the following vulnerability has been resolved: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_ne…
highCVSSv3 7.8 - CVE-2026-64001
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix setup list UAF on proc write error snd_pcm_oss_…
mediumCVSSv3 6.1 - CVE-2026-64000
In the Linux kernel, the following vulnerability has been resolved: net: hsr: fix potential OOB access in supervision frame handling En…
criticalCVSSv3 9.8 - CVE-2026-63999
In the Linux kernel, the following vulnerability has been resolved: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure rss…
criticalCVSSv3 9.8 - CVE-2026-63998
In the Linux kernel, the following vulnerability has been resolved: ethtool: module: call ethnl_ops_complete() on module flash errors W…
— - CVE-2026-63997
In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors…
— - CVE-2026-63996
In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis: require exact CDB reply length Malicious SFP module…
highCVSSv3 7.8 - CVE-2026-63995
In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis: validate start_cmd_payload_size from module The CMIS…
highCVSSv3 7.8 - CVE-2026-63994
In the Linux kernel, the following vulnerability has been resolved: tunnels: load network headers after skb_cow() in iptunnel_pmtud_buil…
criticalCVSSv3 9.8 - CVE-2026-63993
In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmt…
criticalCVSSv3 9.8 - CVE-2026-63992
In the Linux kernel, the following vulnerability has been resolved: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp…
criticalCVSSv3 9.1 - CVE-2026-63991
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt…
— - CVE-2026-63990
In the Linux kernel, the following vulnerability has been resolved: bonding: refuse to enslave CAN devices syzbot reported a kernel pag…
— - CVE-2026-63989
In the Linux kernel, the following vulnerability has been resolved: bridge: Fix sleep in atomic context in netlink path Since the intro…
— - CVE-2026-63988
In the Linux kernel, the following vulnerability has been resolved: bridge: Fix sleep in atomic context in sysfs path Since the start o…
— - CVE-2026-63987
In the Linux kernel, the following vulnerability has been resolved: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILE…
highCVSSv3 7.8 - CVE-2026-63986
In the Linux kernel, the following vulnerability has been resolved: ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on prepare fai…
— - CVE-2026-63985
In the Linux kernel, the following vulnerability has been resolved: ethtool: eeprom: add more safeties to EEPROM Netlink fallback The N…
highCVSSv3 7.8 - CVE-2026-63984
In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() ipv6_rp…
criticalCVSSv3 9.8 - CVE-2026-63983
In the Linux kernel, the following vulnerability has been resolved: net/sched: fix packet loop on netem when duplicate is on When netem…
criticalCVSSv3 9.8 - CVE-2026-63982
In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress mirred lo…
— - CVE-2026-63981
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: Fix blockcast recursion bypass leading to sta…
— - CVE-2026-63980
In the Linux kernel, the following vulnerability has been resolved: net/handshake: Use spin_lock_bh for hn_lock nvmet_tcp_state_change(…
highCVSSv3 7.5 - CVE-2026-63979
In the Linux kernel, the following vulnerability has been resolved: net/handshake: hand off the pinned file reference to accept_doit ha…
criticalCVSSv3 9.8 - CVE-2026-63978
In the Linux kernel, the following vulnerability has been resolved: net/handshake: Drain pending requests at net namespace exit The arg…
highCVSSv3 7.1 - CVE-2026-63977
In the Linux kernel, the following vulnerability has been resolved: dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work…
highCVSSv3 7.8 - CVE-2026-63976
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success…
highCVSSv3 8.8 - CVE-2026-63975
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp If dci…
highCVSSv3 8.8 - CVE-2026-63974
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close…
criticalCVSSv3 9.8 - CVE-2026-63973
In the Linux kernel, the following vulnerability has been resolved: net: mana: Add NULL guards in teardown path to prevent panic on atta…
— - CVE-2026-63972
In the Linux kernel, the following vulnerability has been resolved: net: mana: Skip redundant detach on already-detached port When mana…
highCVSSv3 7.5 - CVE-2026-63971
In the Linux kernel, the following vulnerability has been resolved: sctp: fix race between sctp_wait_for_connect and peeloff sctp_wait_…
highCVSSv3 7.8 - CVE-2026-63970
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy skb virtio_transpor…
highCVSSv3 7.8 - CVE-2026-63969
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in rt6_fill_node() Sashiko reporte…
— - CVE-2026-63968
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6_select_path() Found while…
highCVSSv3 7.5 - CVE-2026-63967
In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer The tagg…
— - CVE-2026-63966
In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16550: fix stack leak in trigger handler adis16550_tr…
— - CVE-2026-63965
In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280: fix stack leak in bmp580 trigger handler bmp…
— - CVE-2026-63964
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: reject firmware images without a ':' record h…
mediumCVSSv3 5.5 - CVE-2026-63963
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: validate VDO count in Discover Identity ACK handle…
highCVSSv3 7.1 - CVE-2026-63962
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume…
mediumCVSSv3 5.5 - CVE-2026-63961
In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: validate count before reading Stat…
highCVSSv3 7.1 - CVE-2026-63960
In the Linux kernel, the following vulnerability has been resolved: usb: typec: wcove: don't write past struct pd_message in wcove_read_…
mediumCVSSv3 5.5 - CVE-2026-63959
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CN…
criticalCVSSv3 9.8 - CVE-2026-63958
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: validate connector number in ucsi_connector_change…
criticalCVSSv3 9.8 - CVE-2026-63957
In the Linux kernel, the following vulnerability has been resolved: USB: serial: safe_serial: fix memory corruption with small endpoint…
— - CVE-2026-63956
In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypress_m8: fix memory corruption with small endpoint…
— - CVE-2026-63955
In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: do not trigger BUG() on BH disabled context __get_vm_ar…
highCVSSv3 7.5 - CVE-2026-63954
In the Linux kernel, the following vulnerability has been resolved: hpfs: fix a crash if hpfs_map_dnode_bitmap fails If hpfs_map_dnode_…
mediumCVSSv3 5.5 - CVE-2026-63953
In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: fix pgtable leak in migrate_vma_insert_huge_pmd_p…
— - CVE-2026-63952
In the Linux kernel, the following vulnerability has been resolved: memfd: deny writeable mappings when implying SEAL_WRITE When SEAL_E…
highCVSSv3 8.4 - CVE-2026-63951
In the Linux kernel, the following vulnerability has been resolved: zram: fix use-after-free in zram_writeback_endio A crash was observ…
highCVSSv3 7.8 - CVE-2026-63950
In the Linux kernel, the following vulnerability has been resolved: mm/rmap: initialize nr_pages to 1 at loop start in try_to_unmap_one…
highCVSSv3 7.8 - CVE-2026-63949
In the Linux kernel, the following vulnerability has been resolved: auxdisplay: line-display: fix OOB read on zero-length message_store(…
— - CVE-2026-63948
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn…
— - CVE-2026-63947
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: fix missing length checks in hidp_input_report() h…
highCVSSv3 8.8 - CVE-2026-63946
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix UAF in iso_recv_frame iso_recv_frame reads conn…
highCVSSv3 8.8 - CVE-2026-63945
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock iso…
highCVSSv3 7.8 - CVE-2026-63944
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync hci_le_creat…
highCVSSv3 8.8 - CVE-2026-63943
In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadone_pro…
— - CVE-2026-63942
In the Linux kernel, the following vulnerability has been resolved: parport: Fix race between port and client registration The parport…
highCVSSv3 7.8 - CVE-2026-63941
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor ZC…
highCVSSv3 8.8 - CVE-2026-63940
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port I/O requests of length '0' Explicitly ignore…
highCVSSv3 7.7 - CVE-2026-63939
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Compute the correct max length of the in-GHCB scratch area…
criticalCVSSv3 9.3 - CVE-2026-63938
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC request indices against the actual size of the b…
criticalCVSSv3 9.3 - CVE-2026-63937
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buff…
highCVSSv3 8.8 - CVE-2026-63936
In the Linux kernel, the following vulnerability has been resolved: iio: adc: mt6359: fix unchecked return value in mt6358_read_imp In…
— - CVE-2026-63935
In the Linux kernel, the following vulnerability has been resolved: iio: adc: nxp-sar-adc: fix division by zero in write_raw Add a vali…
— - CVE-2026-63934
In the Linux kernel, the following vulnerability has been resolved: iio: gyro: itg3200: fix i2c read into the wrong stack location itg3…
— - CVE-2026-63933
In the Linux kernel, the following vulnerability has been resolved: iio: gyro: adis16260: fix division by zero in write_raw Add a valid…
— - CVE-2026-63932
In the Linux kernel, the following vulnerability has been resolved: iio: chemical: mhz19b: reject oversized serial replies mhz19b_recei…
— - CVE-2026-63931
In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: fix division by zero in write_raw Add a zero…
— - CVE-2026-63930
In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: fix use-after-free in error path In the e…
highCVSSv3 7.8 - CVE-2026-63929
In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() iio_…
— - CVE-2026-63928
In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: fix memory corruption with small endpoint Mak…
— - CVE-2026-63927
In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to de…
highCVSSv3 7.8 - CVE-2026-63926
In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data When bp…
highCVSSv3 8.4 - CVE-2026-63925
In the Linux kernel, the following vulnerability has been resolved: macsec: fix replay protection at XPN lower-PN wrap In macsec_post_d…
highCVSSv3 8.1 - CVE-2026-63924
In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() ipv6_hop_j…
criticalCVSSv3 9.8 - CVE-2026-63923
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_no…
highCVSSv3 8.8 - CVE-2026-63922
In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh after handling HAO option ip6_parse_tlv()…
criticalCVSSv3 9.8 - CVE-2026-63921
In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().
highCVSSv3 8.8 - CVE-2026-63920
In the Linux kernel, the following vulnerability has been resolved: ipv6: validate extension header length before copying to cmsg ip6_d…
highCVSSv3 7.1 - CVE-2026-63919
In the Linux kernel, the following vulnerability has been resolved: xfrm: input: hold netns during deferred transport reinjection Trans…
highCVSSv3 8.8 - CVE-2026-63918
In the Linux kernel, the following vulnerability has been resolved: l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname A rea…
highCVSSv3 7.8 - CVE-2026-63917
In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6_tnl.net in vti6_changelink().
highCVSSv3 8.8 - CVE-2026-63916
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacom_hid_set_device_mode() wacom_hid_…
highCVSSv3 8.8 - CVE-2026-63915
In the Linux kernel, the following vulnerability has been resolved: nfc: hci: fix out-of-bounds read in HCP header parsing Both nfc_hci…
highCVSSv3 8.8 - CVE-2026-63914
In the Linux kernel, the following vulnerability has been resolved: xfrm: route MIGRATE notifications to caller's netns xfrm_send_migra…
highCVSSv3 7.3 - CVE-2026-63913
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST wit…
highCVSSv3 8.2 - CVE-2026-63912
In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: restore combined single-frag length gate The ESP out-of-…
criticalCVSSv3 9.8 - CVE-2026-63911
In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: reset runtime state when cloning SAs iptfs_clone_state…
highCVSSv3 7.8 - CVE-2026-63910
In the Linux kernel, the following vulnerability has been resolved: dma-buf: fix UAF in dma_buf_fd() tracepoint Once FD_ADD() returns,…
highCVSSv3 7.8 - CVE-2026-63909
In the Linux kernel, the following vulnerability has been resolved: ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops…
highCVSSv3 8.1 - CVE-2026-63908
In the Linux kernel, the following vulnerability has been resolved: Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem Whe…
— - CVE-2026-63907
In the Linux kernel, the following vulnerability has been resolved: uio: uio_pci_generic_sva: fix double free of devm_kzalloc() memory…
— - CVE-2026-63906
In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Fix use-after-free in omap2430_probe() In omap…
highCVSSv3 8.4 - CVE-2026-63905
In the Linux kernel, the following vulnerability has been resolved: usbip: vudc: Fix use after free bug in vudc_remove due to race condi…
— - CVE-2026-63904
In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: check URB actual_length for interrupt-IN notifications…
— - CVE-2026-63903
In the Linux kernel, the following vulnerability has been resolved: USB: serial: belkin_sa: validate interrupt status length The Belkin…
— - CVE-2026-63902
In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypress_m8: validate interrupt packet headers cypress_…
— - CVE-2026-63901
In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix memory corruption with small endpo…
— - CVE-2026-63900
In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add t…
— - CVE-2026-63899
In the Linux kernel, the following vulnerability has been resolved: USB: serial: mxuport: fix memory corruption with small endpoint Mak…
— - CVE-2026-63898
In the Linux kernel, the following vulnerability has been resolved: USB: serial: mct_u232: fix memory corruption with small endpoint Th…
— - CVE-2026-63897
In the Linux kernel, the following vulnerability has been resolved: USB: serial: mct_u232: fix missing interrupt-in transfer sanity chec…
— - CVE-2026-63896
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: composite: fix integer underflow in WebUSB GET_URL hand…
— - CVE-2026-63895
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: copy only received bytes on short ep0 read ffs_e…
— - CVE-2026-63894
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: serialize DMABUF cancel against request completio…
highCVSSv3 7.8 - CVE-2026-63893
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid()…
highCVSSv3 8.1 - CVE-2026-63892
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject dir_len < 4 to prevent size_t underflo…
— - CVE-2026-63891
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Cap recursion depth in __tb_property_parse_di…
— - CVE-2026-63890
In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker…
— - CVE-2026-63889
In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 An…
highCVSSv3 8.1 - CVE-2026-63888
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_hand…
criticalCVSSv3 9.8 - CVE-2026-63887
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp…
criticalCVSSv3 9.8 - CVE-2026-63886
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Validate CHAP_R length before base64 decode ch…
criticalCVSSv3 9.8 - CVE-2026-63884
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential UAF in TTM object purge TLDR: The bo->ttm o…
highCVSSv3 7.8 - CVE-2026-63883
In the Linux kernel, the following vulnerability has been resolved: serial: qcom_geni: fix kfifo underflow when flush precedes DMA compl…
highCVSSv3 7.3 - CVE-2026-63882
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix NULL pointer bug in svm_range_set_attr The process_…
criticalCVSSv3 9.8 - CVE-2026-63881
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger…
criticalCVSSv3 9.8 - CVE-2026-63880
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_OP_GET_MAPPING_INF…
— - CVE-2026-63879
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix amdgpu_hmm_range_get_pages The notifier sequence mu…
highCVSSv3 7.1 - CVE-2026-63878
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO kvcalloc(a…
— - CVE-2026-63877
In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a platform device Prevent a crash from h…
— - CVE-2026-63876
In the Linux kernel, the following vulnerability has been resolved: serial: zs: Convert to use a platform device Prevent a crash from h…
— - CVE-2026-63875
In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache when unsharing PMD tables When huge_pm…
highCVSSv3 7.8 - CVE-2026-63874
In the Linux kernel, the following vulnerability has been resolved: net: mctp: usb: fix race between urb completion and rx_retry cancell…
highCVSSv3 7.8 - CVE-2026-63873
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range()…
— - CVE-2026-63871
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route call…
mediumCVSSv3 6.3 - CVE-2026-63870
In the Linux kernel, the following vulnerability has been resolved: ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() The…
highCVSSv3 7.8 - CVE-2026-63869
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_r…
highCVSSv3 7.6 - CVE-2026-63868
In the Linux kernel, the following vulnerability has been resolved: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr Th…
— - CVE-2026-63867
In the Linux kernel, the following vulnerability has been resolved: mptcp: close TOCTOU race while computing rcv_wnd The MPTCP output p…
highCVSSv3 8.2 - CVE-2026-63866
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Clear wcid pointer in mt7996_mac_sta_deinit_link…
highCVSSv3 8.8 - CVE-2026-63865
In the Linux kernel, the following vulnerability has been resolved: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable…
highCVSSv3 8.8 - CVE-2026-63864
In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from visit_tailcall_insn Commit e40f5a6bf88a (…
highCVSSv3 8.4 - CVE-2026-63863
In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm() There is…
highCVSSv3 8.8 - CVE-2026-63862
In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found…
— - CVE-2026-63861
In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove() c…
— - CVE-2026-63860
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prefer NLA_NUL_STRING These attributes are evaluated as…
highCVSSv3 8.4 - CVE-2026-63859
In the Linux kernel, the following vulnerability has been resolved: net: airoha: Add missing bits in airoha_qdma_cleanup_tx_queue() Sim…
— - CVE-2026-63858
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: add hook transactions for device deletions Re…
highCVSSv3 7.8 - CVE-2026-63857
In the Linux kernel, the following vulnerability has been resolved: net: airoha: Do not read uninitialized fragment address in airoha_de…
criticalCVSSv3 9.8 - CVE-2026-63856
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings VCN en…
highCVSSv3 7.8 - CVE-2026-63855
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings VCN en…
highCVSSv3 7.8 - CVE-2026-63854
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings VCN en…
highCVSSv3 7.8 - CVE-2026-63853
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring VCN encoder…
highCVSSv3 7.8 - CVE-2026-63852
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring VCN encod…
highCVSSv3 7.8 - CVE-2026-63851
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring VCN encod…
highCVSSv3 7.8 - CVE-2026-63850
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring VCN encod…
highCVSSv3 7.8 - CVE-2026-63849
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v5.0.1 enc ring VCN encod…
highCVSSv3 7.8 - CVE-2026-63848
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring JPEG rings do…
highCVSSv3 7.8 - CVE-2026-63847
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring JPEG rings do…
highCVSSv3 7.8 - CVE-2026-63846
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring JPEG rings do…
highCVSSv3 7.8 - CVE-2026-63845
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring JPEG rings do…
highCVSSv3 7.8 - CVE-2026-63844
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring JPEG rings…
highCVSSv3 7.8 - CVE-2026-63843
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring JPEG rings…
highCVSSv3 7.8 - CVE-2026-63842
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring JPEG rings…
highCVSSv3 7.8 - CVE-2026-63841
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring JPEG rings…
highCVSSv3 7.8 - CVE-2026-63840
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v5.3.0 ring JPEG rings…
highCVSSv3 7.8 - CVE-2026-63839
In the Linux kernel, the following vulnerability has been resolved: platform/x86: lenovo-wmi-helpers: Fix memory leak in lwmi_dev_evalua…
— - CVE-2026-63838
In the Linux kernel, the following vulnerability has been resolved: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[]…
— - CVE-2026-63837
In the Linux kernel, the following vulnerability has been resolved: net: ena: PHC: Check return code before setting timestamp output en…
— - CVE-2026-63836
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd The cwnd is…
highCVSSv3 7.5 - CVE-2026-63835
In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an i…
mediumCVSSv3 4.4 - CVE-2026-63834
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: restrict number of unacked list entries When…
mediumCVSSv3 5.5 - CVE-2026-63833
In the Linux kernel, the following vulnerability has been resolved: ntfs3: reject direct userspace writes to reserved $LX* xattrs NTFS3…
criticalCVSSv3 9.8 - CVE-2026-63832
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: add wcid publish check in mt76_sta_add Since mt7925_mac…
highCVSSv3 7.8 - CVE-2026-63831
In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skb_cow_data() before in-place crypto llsec_d…
highCVSSv3 7.8 - CVE-2026-63830
In the Linux kernel, the following vulnerability has been resolved: net: skmsg: preserve sg.copy across SG transforms The sk_msg sg.cop…
mediumCVSSv3 4.4 - CVE-2026-63829
In the Linux kernel, the following vulnerability has been resolved: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelin…
highCVSSv3 8.2 - CVE-2026-63828
In the Linux kernel, the following vulnerability has been resolved: apparmor: mediate the implicit connect of TCP fast open sendmsg sen…
criticalCVSSv3 9.8 - CVE-2026-63827
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix use-after-free in rawdata dedup loop aa_replace_profi…
criticalCVSSv3 9.8 - CVE-2026-63826
In the Linux kernel, the following vulnerability has been resolved: fbdev: fix use-after-free in store_modes() store_modes() replaces a…
highCVSSv3 7.1 - CVE-2026-63825
In the Linux kernel, the following vulnerability has been resolved: gcov: use atomic counter updates to fix concurrent access crashes G…
mediumCVSSv3 5.5 - CVE-2026-63824
In the Linux kernel, the following vulnerability has been resolved: KEYS: fix overflow in keyctl_pkey_params_get_2() The length for the…
criticalCVSSv3 9.8 - CVE-2026-63823
In the Linux kernel, the following vulnerability has been resolved: keys: Pin request_key_auth payload in instantiate paths A: request_…
highCVSSv3 8.4 - CVE-2026-63822
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix warning when unbinding If there is an error durin…
criticalCVSSv3 9.8 - CVE-2026-63821
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: usb: fix memory leaks on USB write failures When rtw_u…
mediumCVSSv3 5.5 - CVE-2026-63820
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix missing read bio submission on large folio error f2fs_rea…
— - CVE-2026-63819
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on f2fs_get_node_folio_ra() kernel BUG…
mediumCVSSv3 5.0 - CVE-2026-63818
In the Linux kernel, the following vulnerability has been resolved: f2fs: validate orphan inode entry count f2fs_recover_orphan_inodes(…
criticalCVSSv3 9.8 - CVE-2026-63817
In the Linux kernel, the following vulnerability has been resolved: f2fs: validate compress cache inode only when enabled F2FS_COMPRESS…
highCVSSv3 7.8 - CVE-2026-63816
In the Linux kernel, the following vulnerability has been resolved: f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode - ioctl…
criticalCVSSv3 9.8 - CVE-2026-63815
In the Linux kernel, the following vulnerability has been resolved: f2fs: bound i_inline_xattr_size for non-inline-xattr inodes When th…
highCVSSv3 8.4 - CVE-2026-63814
In the Linux kernel, the following vulnerability has been resolved: f2fs: validate ACL entry sizes in f2fs_acl_from_disk() f2fs_acl_cou…
criticalCVSSv3 9.8 - CVE-2026-63813
In the Linux kernel, the following vulnerability has been resolved: Revert "f2fs: remove non-uptodate folio from the page cache in move_…
highCVSSv3 7.8 - CVE-2026-63811
In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write Whe…
mediumCVSSv3 5.5 - CVE-2026-63810
In the Linux kernel, the following vulnerability has been resolved: block: Avoid mounting the bdev pseudo-filesystem in userspace The b…
highCVSSv3 7.1 - CVE-2026-63809
In the Linux kernel, the following vulnerability has been resolved: bpf: use kvfree() for replaced sysctl write buffer proc_sys_call_ha…
mediumCVSSv3 5.5 - CVE-2026-63808
In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after-free in exfat_find_dir_entry() In ex…
criticalCVSSv3 9.8 - CVE-2026-63807
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapp…
highCVSSv3 8.8 - CVE-2026-63806
In the Linux kernel, the following vulnerability has been resolved: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with…
highCVSSv3 7.3 - CVE-2026-63805
In the Linux kernel, the following vulnerability has been resolved: crypto: nx - fix nx_crypto_ctx_exit argument nx_crypto_ctx_shash_ex…
highCVSSv3 7.1 - CVE-2026-63804
In the Linux kernel, the following vulnerability has been resolved: gfs2: fix use-after-free in gfs2_qd_dealloc gfs2_qd_dealloc(), call…
highCVSSv3 7.8 - CVE-2026-63803
In the Linux kernel, the following vulnerability has been resolved: hdlc_ppp: sync per-proto timers before freeing hdlc state Each PPP…
highCVSSv3 8.4 - CVE-2026-63802
In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF in __blkcg_rstat_flush() When multiple blkgs in…
highCVSSv3 7.8 - CVE-2026-63801
In the Linux kernel, the following vulnerability has been resolved: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done tipc_a…
highCVSSv3 7.1 - CVE-2026-63800
In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix use-after-free in pnfs_update_layout() When hitting the N…
criticalCVSSv3 9.8 - CVE-2026-63799
In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in fixup pat…
highCVSSv3 7.8 - CVE-2026-63798
In the Linux kernel, the following vulnerability has been resolved: irqchip/imgpdc: Fix resource leak, add missing chained handler clean…
mediumCVSSv3 5.5 - CVE-2026-63797
In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fix use-after-free on probe error path rpmsg_chrdev_pr…
highCVSSv3 8.4 - CVE-2026-63796
In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject oversized group bitmap descriptors ocfs2_validate_gd_…
highCVSSv3 7.1 - CVE-2026-63794
In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path In…
highCVSSv3 7.8 - CVE-2026-53403
In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode…
criticalCVSSv3 9.8 - CVE-2026-53402
In the Linux kernel, the following vulnerability has been resolved: fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font…
highCVSSv3 7.1 - CVE-2026-53401
In the Linux kernel, the following vulnerability has been resolved: fbdev: omap2: fix use-after-free in omapfb_mmap omapfb_mmap() has a…
highCVSSv3 7.0 - CVE-2026-53400
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter registration race Adapters can be looked up…
highCVSSv3 7.5 - CVE-2026-53399
In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4_alloc_stid() pub…
mediumCVSSv3 5.5 - CVE-2026-53398
In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFO_NO_NAME decode error cleanup nfsd4_decode_secinfo…
mediumCVSSv3 5.5 - CVE-2026-53397
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posix_acl leak on SETACL decode failure nfsaclsvc_decode_…
mediumCVSSv3 6.7 - CVE-2026-53396
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posix_acl leak and ignored error in nfsd4_create_file nfs…
highCVSSv3 7.1 - CVE-2026-53395
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dead ACL conflict guard in nfsd4_create nfsd4_create() st…
highCVSSv3 7.5 - CVE-2026-53394
In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry rac…
highCVSSv3 7.5 - CVE-2026-53393
In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors nfsd_vfs_wr…
mediumCVSSv3 5.9 - CVE-2026-53392
In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count ff_layout_all…
mediumCVSSv3 5.5 - CVE-2026-53391
In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr nfs…
mediumCVSSv3 5.5 - CVE-2026-53390
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds read in smb_check_perm_dacl() The permissi…
highCVSSv3 8.1 - CVE-2026-53389
In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of key in del_async path In tcp_ao_d…
highCVSSv3 7.8 - CVE-2026-53388
In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fuse_try_mo…
highCVSSv3 7.8 - CVE-2026-53387
In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add bounds check to veml6075_it_ms index veml…
criticalCVSSv3 9.8 - CVE-2026-53386
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pga_settings index ads129…
criticalCVSSv3 9.8 - CVE-2026-53385
In the Linux kernel, the following vulnerability has been resolved: vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vc…
mediumCVSSv3 5.5 - CVE-2026-53384
In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fai…
criticalCVSSv3 9.8 - CVE-2026-53383
In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject non-VALID session in compound request branch smb2_che…
highCVSSv3 7.5 - CVE-2026-53382
In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si syz…
mediumCVSSv3 5.5 - CVE-2026-53381
In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount umount iput() called from fuse_releas…
highCVSSv3 8.1 - CVE-2026-53380
In the Linux kernel, the following vulnerability has been resolved: media: rzv2h-ivc: Fix concurrent buffer list access The list of buf…
highCVSSv3 7.8 - CVE-2026-53379
In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov8856: free control handler on error in ov8856_init_con…
mediumCVSSv3 5.5 - CVE-2026-53378
In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property reference tracking in state lifecycle…
mediumCVSSv3 5.5 - CVE-2026-53377
In the Linux kernel, the following vulnerability has been resolved: drm/msm: always recover the gpu Previously, in case there was no mo…
mediumCVSSv3 5.5 - CVE-2026-53376
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add upper bound check for num_of_nodes drm/amdkfd: Add…
criticalCVSSv3 9.8 - CVE-2026-53375
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that on…
highCVSSv3 7.5 - CVE-2026-53374
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: zero-initialize GART table on allocation GART TLB is fl…
criticalCVSSv3 9.8 - CVE-2026-53373
In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mma…
highCVSSv3 7.8 - CVE-2026-53372
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty track…
mediumCVSSv3 5.5 - CVE-2026-53371
In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: bound node_desc sysfs read with %.64s node_desc[64] in…
mediumCVSSv3 5.5 - CVE-2026-53370
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configuration of ACR masks C…
mediumCVSSv3 5.5 - CVE-2026-53369
In the Linux kernel, the following vulnerability has been resolved: udf: reject descriptors with oversized CRC length udf_read_tagged()…
highCVSSv3 8.4 - CVE-2026-53368
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usag…
highCVSSv3 7.1 - CVE-2026-53367
In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avdcache was incorrectl…
mediumCVSSv3 5.5 - CVE-2026-53366
In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation path In __ip_appe…
highCVSSv3 8.5 - CVE-2026-53365
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-skb sends When a la…
highCVSSv3 7.8 - CVE-2026-53364
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate() hci_…
mediumCVSSv3 5.5 - CVE-2026-53363
In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags() i…
criticalCVSSv3 9.8 - CVE-2026-53362Actively exploited
In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_app…
criticalCVSSv3 7.3 - CVE-2026-53361
In the Linux kernel, the following vulnerability has been resolved: af_unix: Set gc_in_progress to true in unix_gc().
mediumCVSSv3 4.5 - CVE-2026-53360
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use As per…
highCVSSv3 8.8 - CVE-2026-53359
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role C…
highCVSSv3 8.8 - CVE-2026-53358
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen…
highCVSSv3 8.8 - CVE-2026-53357
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del(…
mediumCVSSv3 5.9 - CVE-2026-53356
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with offset sg_page() return…
highCVSSv3 7.1 - CVE-2026-53355
In the Linux kernel, the following vulnerability has been resolved: net: rds: clear i_sends on setup unwind The RDS IB connection teard…
mediumCVSSv3 5.5 - CVE-2026-53354
In the Linux kernel, the following vulnerability has been resolved: arm64: errata: Mitigate TLBI errata on various Arm CPUs A number of…
highCVSSv3 7.1 - CVE-2026-53353
In the Linux kernel, the following vulnerability has been resolved: hsr: Remove WARN_ONCE() in hsr_addr_is_self().
mediumCVSSv3 5.5 - CVE-2026-53352
In the Linux kernel, the following vulnerability has been resolved: signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()…
mediumCVSSv3 5.5 - CVE-2026-53351
In the Linux kernel, the following vulnerability has been resolved: riscv/ptrace: Use USER_REGSET_NOTE_TYPE for REGSET_CFI Fixes a warn…
mediumCVSSv3 5.5 - CVE-2026-53350
In the Linux kernel, the following vulnerability has been resolved: ASoC: wm_adsp: Fix NULL dereference when removing firmware controls…
mediumCVSSv3 5.5 - CVE-2026-53349
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: destroy stale expectfn expectations on unre…
mediumCVSSv3 5.5 - CVE-2026-53348
In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_func…
mediumCVSSv3 5.5 - CVE-2026-53347
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix driver removal with disabled KMS DRM atomic and mod…
mediumCVSSv3 5.5 - CVE-2026-53346
In the Linux kernel, the following vulnerability has been resolved: rust: arm64: set uwtable llvm module flag for CONFIG_UNWIND_TABLES…
highCVSSv3 7.1 - CVE-2026-53345
In the Linux kernel, the following vulnerability has been resolved: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is d…
mediumCVSSv3 6.5 - CVE-2026-53344
In the Linux kernel, the following vulnerability has been resolved: pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap i…
mediumCVSSv3 5.5 - CVE-2026-53343
In the Linux kernel, the following vulnerability has been resolved: ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow Commi…
highCVSSv3 7.1 - CVE-2026-53342
In the Linux kernel, the following vulnerability has been resolved: arm64: mm: call pagetable dtor when freeing hot-removed page tables…
mediumCVSSv3 5.5 - CVE-2026-53341
In the Linux kernel, the following vulnerability has been resolved: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() m…
highCVSSv3 7.8 - CVE-2026-53340
In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix clock and pinctrl state inconsistency in runtime PM I…
mediumCVSSv3 5.5 - CVE-2026-53339
In the Linux kernel, the following vulnerability has been resolved: i2c: qcom-cci: Fix NULL pointer dereference in cci_remove() On all…
mediumCVSSv3 5.5 - CVE-2026-53338
In the Linux kernel, the following vulnerability has been resolved: net: airoha: Add NULL check for of_reserved_mem_lookup() in airoha_q…
mediumCVSSv3 5.5 - CVE-2026-53337
In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix NULL pointer dereference in bond_do_ioctl() In bo…
mediumCVSSv3 5.5 - CVE-2026-53336
In the Linux kernel, the following vulnerability has been resolved: nvmem: layouts: onie-tlv: fix hang on unknown types The EEPROM on m…
mediumCVSSv3 5.5 - CVE-2026-53335
In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru_sort: handle ctx allocation failure DAMON_LRU_SORT all…
mediumCVSSv3 5.5 - CVE-2026-53334
In the Linux kernel, the following vulnerability has been resolved: mm/damon/reclaim: handle ctx allocation failure Patch series "mm/da…
mediumCVSSv3 5.5 - CVE-2026-53333
In the Linux kernel, the following vulnerability has been resolved: mm/mincore: handle non-swap entries before !CONFIG_SWAP guard minco…
mediumCVSSv3 5.5 - CVE-2026-53332
In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd W…
mediumCVSSv3 5.5 - CVE-2026-53331
In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock During the…
mediumCVSSv3 5.5 - CVE-2026-53330
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval…
highCVSSv3 7.1 - CVE-2026-53329
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Use krealloc_array() in dal_vector_reserve() [Why…
highCVSSv3 7.1 - CVE-2026-53328
In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't warn on NULL cgrp_moving_from in scx_cgroup_move_ta…
mediumCVSSv3 5.5 - CVE-2026-53327
In the Linux kernel, the following vulnerability has been resolved: debugobjects: Do not fill_pool() if pi_blocked_on On RT enabled ker…
mediumCVSSv3 5.5 - CVE-2026-53326
In the Linux kernel, the following vulnerability has been resolved: debugobjects: Don't call fill_pool() in early boot hardirq context…
mediumCVSSv3 5.5 - CVE-2026-53325
In the Linux kernel, the following vulnerability has been resolved: agp/amd64: Fix broken error propagation in agp_amd64_probe() A NULL…
mediumCVSSv3 5.5 - CVE-2026-53324
In the Linux kernel, the following vulnerability has been resolved: net: mana: Use pci_name() for debugfs directory naming Use pci_name…
mediumCVSSv3 5.5 - CVE-2026-53323
In the Linux kernel, the following vulnerability has been resolved: net: dsa: remove redundant netdev_lock_ops() from conduit ethtool op…
mediumCVSSv3 5.5 - CVE-2026-53322
In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Clean up DMABUFs before disabling function On device shut…
highCVSSv3 8.8 - CVE-2026-53321
In the Linux kernel, the following vulnerability has been resolved: io_uring/napi: cap busy_poll_to 10 msec Currently there's no cap on…
mediumCVSSv3 5.5 - CVE-2026-53320
In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()…
mediumCVSSv3 5.5 - CVE-2026-53319
In the Linux kernel, the following vulnerability has been resolved: blk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default() wbt_ini…
mediumCVSSv3 5.5 - CVE-2026-53318
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_ch…
mediumCVSSv3 5.5 - CVE-2026-53317
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: Place upper limit on station AID Any station co…
mediumCVSSv3 5.5 - CVE-2026-53316
In the Linux kernel, the following vulnerability has been resolved: drm/amd/ras: Fix NULL deref in ras_core_ras_interrupt_detected() Fi…
mediumCVSSv3 5.5 - CVE-2026-53315
In the Linux kernel, the following vulnerability has been resolved: drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp()…
mediumCVSSv3 5.5 - CVE-2026-53314
In the Linux kernel, the following vulnerability has been resolved: padata: Put CPU offline callback in ONLINE section to allow failure…
mediumCVSSv3 5.5 - CVE-2026-53313
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths…
mediumCVSSv3 5.5 - CVE-2026-53312
In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Remove overflows on the invalidation path Since RISC-V…
mediumCVSSv3 5.5 - CVE-2026-53311
In the Linux kernel, the following vulnerability has been resolved: fuse: fix uninit-value in fuse_dentry_revalidate() fuse_dentry_reva…
mediumCVSSv3 5.5 - CVE-2026-53310
In the Linux kernel, the following vulnerability has been resolved: soc/tegra: cbb: Fix cross-fabric target timeout lookup When a fabri…
mediumCVSSv3 5.5 - CVE-2026-53309
In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison…
criticalCVSSv3 9.8 - CVE-2026-53308
In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Free allocated workqueue and fix removal or…
mediumCVSSv3 5.5 - CVE-2026-53307
In the Linux kernel, the following vulnerability has been resolved: pinctrl: pinconf-generic: Fully validate 'pinmux' property The pinc…
mediumCVSSv3 5.5 - CVE-2026-53306
In the Linux kernel, the following vulnerability has been resolved: tty: hvc_iucv: fix off-by-one in number of supported devices MAX_HV…
highCVSSv3 7.1 - CVE-2026-53305
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ps883x: Fix Oops at unbind When trying to unbind a devi…
mediumCVSSv3 5.5 - CVE-2026-53304
In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Resolve soft lockup issue when opening /dev/sgX The param…
mediumCVSSv3 5.5 - CVE-2026-53303
In the Linux kernel, the following vulnerability has been resolved: f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()…
highCVSSv3 7.1 - CVE-2026-53302
In the Linux kernel, the following vulnerability has been resolved: crypto: eip93 - fix hmac setkey algo selection eip93_hmac_setkey()…
mediumCVSSv3 5.5 - CVE-2026-53301
In the Linux kernel, the following vulnerability has been resolved: reset: amlogic: t7: Fix null reset ops Fix missing reset ops causin…
mediumCVSSv3 5.5 - CVE-2026-53300
In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix NTMP DMA use-after-free issue The AI-generated revi…
highCVSSv3 7.8 - CVE-2026-53299
In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of airoha_qdma_init_tx…
mediumCVSSv3 5.5 - CVE-2026-53298
In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx…
mediumCVSSv3 5.5 - CVE-2026-53297
In the Linux kernel, the following vulnerability has been resolved: net: mana: Guard mana_remove against double invocation If PM resume…
mediumCVSSv3 5.5 - CVE-2026-53296
In the Linux kernel, the following vulnerability has been resolved: mailbox: mailbox-test: free channels on probe error On probe error,…
mediumCVSSv3 5.5 - CVE-2026-53295
In the Linux kernel, the following vulnerability has been resolved: mailbox: add sanity check for channel array Fail gracefully if ther…
mediumCVSSv3 5.5 - CVE-2026-53294
In the Linux kernel, the following vulnerability has been resolved: mailbox: mailbox-test: don't free the reused channel The RX channel…
mediumCVSSv3 5.5 - CVE-2026-53293
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG There were multiple issues…
mediumCVSSv3 5.5 - CVE-2026-53292
In the Linux kernel, the following vulnerability has been resolved: net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind…
mediumCVSSv3 5.5 - CVE-2026-53291
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/conexant: Fix missing error check for jack detection In c…
mediumCVSSv3 5.5 - CVE-2026-53290
In the Linux kernel, the following vulnerability has been resolved: drm/xe/eustall: Fix drm_dev_put called before stream disable in clos…
highCVSSv3 7.8 - CVE-2026-53289
In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL pointer dereference in ice_reset_all_vfs() ice_reset_…
mediumCVSSv3 5.5 - CVE-2026-53288
In the Linux kernel, the following vulnerability has been resolved: arm64: Reserve an extra page for early kernel mapping The final par…
mediumCVSSv3 5.5 - CVE-2026-53287
In the Linux kernel, the following vulnerability has been resolved: audit: fix incorrect inheritable capability in CAPSET records __aud…
mediumCVSSv3 5.5 - CVE-2026-53286
In the Linux kernel, the following vulnerability has been resolved: idpf: fix double free and use-after-free in aux device error paths…
highCVSSv3 7.8 - CVE-2026-53285
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_…
mediumCVSSv3 5.5 - CVE-2026-53284
In the Linux kernel, the following vulnerability has been resolved: btrfs: only release the dirty pages io tree after successful writes…
highCVSSv3 7.5 - CVE-2026-53283
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bounds-check devid in __rlookup_amd_iommu() iommu_device…
mediumCVSSv3 5.5 - CVE-2026-53282
In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Push kjump return address even for non-kjump kexec The v…
mediumCVSSv3 5.5 - CVE-2026-53281
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption C…
highCVSSv3 8.8 - CVE-2026-53280
In the Linux kernel, the following vulnerability has been resolved: iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_don…
mediumCVSSv3 5.5 - CVE-2026-53279
In the Linux kernel, the following vulnerability has been resolved: drm/gma500/oaktrail_lvds: fix hang on init failure The LVDS init co…
mediumCVSSv3 5.5 - CVE-2026-53278
In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Check whether the config array is allocated before destroy…
mediumCVSSv3 5.5 - CVE-2026-53277
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table walks in fault injecti…
highCVSSv3 8.8 - CVE-2026-53276
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer In iso…
highCVSSv3 7.8 - CVE-2026-53275
In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix use-after-free when processing MLD queries When pr…
highCVSSv3 8.8 - CVE-2026-53274
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local D…
mediumCVSSv3 5.5 - CVE-2026-53273
In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-free when the client exits before the…
highCVSSv3 7.8 - CVE-2026-53272
In the Linux kernel, the following vulnerability has been resolved: erofs: fix use-after-free on sbi->sync_decompress z_erofs_decompres…
highCVSSv3 7.8 - CVE-2026-53271
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifier…
mediumCVSSv3 5.5 - CVE-2026-53270
In the Linux kernel, the following vulnerability has been resolved: ipvs: clear the svc scheduler ptr early on edit ip_vs_edit_service(…
highCVSSv3 7.8 - CVE-2026-53269
In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: add mutex to guard hook reference counting As…
mediumCVSSv3 5.5 - CVE-2026-53268
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack_irc: fix possible out-of-bounds read When pars…
highCVSSv3 8.2 - CVE-2026-53267
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: bail out on template ct in get eval I noticed th…
highCVSSv3 7.8 - CVE-2026-53266
In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables…
highCVSSv3 8.8 - CVE-2026-53264
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: use RCU with deferred freeing for action lifecyc…
highCVSSv3 7.8 - CVE-2026-53263
In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix off-by-one in multicast context address compression Th…
mediumCVSSv3 5.5 - CVE-2026-53262
In the Linux kernel, the following vulnerability has been resolved: l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() pppol…
highCVSSv3 7.8 - CVE-2026-53261
In the Linux kernel, the following vulnerability has been resolved: devlink: Release nested relation on devlink free devlink relation s…
mediumCVSSv3 5.5 - CVE-2026-53260
In the Linux kernel, the following vulnerability has been resolved: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().
criticalCVSSv3 9.8 - CVE-2026-53259
In the Linux kernel, the following vulnerability has been resolved: ipv6: anycast: insert aca into global hash under idev->lock syzbot…
highCVSSv3 7.8 - CVE-2026-53258
In the Linux kernel, the following vulnerability has been resolved: wifi: fix leak if split 6 GHz scanning fails rdev->int_scan_req is…
mediumCVSSv3 5.5 - CVE-2026-53257
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: enforce HE/EHT cap/oper consistency Xiang Mei repor…
mediumCVSSv3 5.5 - CVE-2026-53256
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() rfc…
highCVSSv3 8.0 - CVE-2026-53255
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate advertising TLV before type checks tlv_da…
mediumCVSSv3 5.5 - CVE-2026-53254
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in MCC handlers The RFCOMM M…
highCVSSv3 8.1 - CVE-2026-53253
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: reject short frames before parsing A BNEP peer can…
highCVSSv3 7.1 - CVE-2026-53252
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix memory leak in error path of hci_alloc_dev() Early f…
mediumCVSSv3 5.5 - CVE-2026-53251
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_syn…
mediumCVSSv3 5.5 - CVE-2026-53250
In the Linux kernel, the following vulnerability has been resolved: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata(…
highCVSSv3 7.8 - CVE-2026-53249
In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options This patch restric…
highCVSSv3 7.0 - CVE-2026-53248
In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix use-after-free in metadata dst teardown airoha_met…
highCVSSv3 8.8 - CVE-2026-53247
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teard…
criticalCVSSv3 9.8 - CVE-2026-53246
In the Linux kernel, the following vulnerability has been resolved: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processi…
criticalCVSSv3 9.8 - CVE-2026-53245
In the Linux kernel, the following vulnerability has been resolved: net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr…
mediumCVSSv3 5.5 - CVE-2026-53244
In the Linux kernel, the following vulnerability has been resolved: VFS: fix possible failure to unlock in nfsd4_create_file() atomic_c…
highCVSSv3 7.5 - CVE-2026-53242
In the Linux kernel, the following vulnerability has been resolved: ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on link…
highCVSSv3 7.8 - CVE-2026-53241
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: dummy: fix UMP event stack overread The dummy sequencer…
mediumCVSSv3 5.5 - CVE-2026-53240
In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix use-after-free on first_skb in __input_process_payl…
highCVSSv3 8.8 - CVE-2026-53239
In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel…
highCVSSv3 7.8 - CVE-2026-53238
In the Linux kernel, the following vulnerability has been resolved: netlabel: validate unlabeled address and mask attribute lengths net…
mediumCVSSv3 4.3 - CVE-2026-53237
In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: fix NULL pointer dereference in suspend/resume mvebu_p…
mediumCVSSv3 5.5 - CVE-2026-53236
In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SO_ATTACH_FILTER to priv users This patch restricts t…
highCVSSv3 7.0 - CVE-2026-53235
In the Linux kernel, the following vulnerability has been resolved: net: add pskb_may_pull() to skb_gro_receive_list() skb_gro_receive_…
highCVSSv3 7.5 - CVE-2026-53234
In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: Fix use-after-free during device removal The driver…
highCVSSv3 7.8 - CVE-2026-53233
In the Linux kernel, the following vulnerability has been resolved: netdev: fix double-free in netdev_nl_bind_rx_doit() Sashiko flags t…
highCVSSv3 7.8 - CVE-2026-53232
In the Linux kernel, the following vulnerability has been resolved: net: phy: clean the sfp upstream if phy probing fails Sashiko repor…
highCVSSv3 8.8 - CVE-2026-53231
In the Linux kernel, the following vulnerability has been resolved: net: phy: don't try to setup PHY-driven SFP cages when using genphy…
— - CVE-2026-53230
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list m…
highCVSSv3 8.7 - CVE-2026-53229
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure I…
highCVSSv3 7.5 - CVE-2026-53228
In the Linux kernel, the following vulnerability has been resolved: ipv6: sit: reload inner IPv6 header after GSO offloads ipip6_tunnel…
criticalCVSSv3 9.8 - CVE-2026-53227
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix possible kfree_skb of ERR_PTR After the patch…
mediumCVSSv3 5.5 - CVE-2026-53226
In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: fix generic IRQ chip leak on remove The driver allo…
mediumCVSSv3 5.5 - CVE-2026-53225
In the Linux kernel, the following vulnerability has been resolved: sctp: fix uninit-value in __sctp_rcv_asconf_lookup() __sctp_rcv_asc…
criticalCVSSv3 9.1 - CVE-2026-53224
In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded INIT chunk and address list lengths in cooki…
criticalCVSSv3 9.1 - CVE-2026-53223
In the Linux kernel, the following vulnerability has been resolved: net: guard timestamp cmsgs to real error queue skbs skb_is_err_queu…
highCVSSv3 7.1 - CVE-2026-53222
In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: fix resource freeing order Commit a60fc3294a37 ("ptp: rew…
— - CVE-2026-53221
In the Linux kernel, the following vulnerability has been resolved: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() In vti6…
criticalCVSSv3 9.8 - CVE-2026-53220
In the Linux kernel, the following vulnerability has been resolved: netfilter: revalidate bridge ports ebt_redirect_tg() dereferences b…
mediumCVSSv3 5.5 - CVE-2026-53219
In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: avoid leaking percpu counter pointers The nati…
mediumCVSSv3 5.5 - CVE-2026-53218
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_exthdr: fix register tracking for F_PRESENT flag nft…
highCVSSv3 7.0 - CVE-2026-53217
In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: sync RX data at the hardware packet offset mvpp2 progra…
highCVSSv3 8.6 - CVE-2026-53216
In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: limit XDP frame size to the RX buffer mvpp2 has short a…
criticalCVSSv3 9.8 - CVE-2026-53215
In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: refill RX buffers before XDP or skb use The RX error pa…
criticalCVSSv3 9.8 - CVE-2026-53214
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix a potential NPD in cleanup_prefix_route() addrconf_get_pr…
mediumCVSSv3 5.5 - CVE-2026-53213
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: fix krealloc() memory leak Don't just overwrite the origin…
mediumCVSSv3 5.5 - CVE-2026-53212
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix use-after-free on object destroy nft_tun…
highCVSSv3 7.8 - CVE-2026-53211
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR regis…
— - CVE-2026-53210
In the Linux kernel, the following vulnerability has been resolved: tee: shm: fix shm leak in register_shm_helper() register_shm_helper…
— - CVE-2026-53209
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend…
highCVSSv3 7.8 - CVE-2026-53208
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig net/b…
highCVSSv3 7.0 - CVE-2026-53207
In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for…
mediumCVSSv3 5.5 - CVE-2026-53206
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add bounds check for firmware runtime memory Validate t…
— - CVE-2026-53205
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add bounds checks for firmware log indices Add validati…
highCVSSv3 7.1 - CVE-2026-53204
In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-rsu: Fix NULL deref on rsu_send_msg() timeout in…
— - CVE-2026-53203
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add buffer overflow check in MS get_info_ioctl Add vali…
highCVSSv3 7.1 - CVE-2026-53202
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix signed integer truncation in IPC receive Fix potent…
highCVSSv3 7.8 - CVE-2026-53201
In the Linux kernel, the following vulnerability has been resolved: Revert "drm/xe: Skip exec queue schedule toggle if queue is idle dur…
highCVSSv3 7.8 - CVE-2026-53200
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX XN has already…
highCVSSv3 8.8 - CVE-2026-53199
In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf netvsc_co…
highCVSSv3 7.5 - CVE-2026-53198
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CAN…
highCVSSv3 8.8 - CVE-2026-53197
In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state() iptfs_destr…
— - CVE-2026-53196
In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in get_manuf_info() get_manuf…
mediumCVSSv3 6.8 - CVE-2026-53195
In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() build_i…
highCVSSv3 7.1 - CVE-2026-53194
In the Linux kernel, the following vulnerability has been resolved: USB: serial: kl5kusb105: fix bulk-out buffer overflow klsi_105_prep…
highCVSSv3 7.8 - CVE-2026-53193
In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Forcibly close timer instances at closing When snd_tim…
highCVSSv3 7.8 - CVE-2026-53192
In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Fix UAF at snd_timer_user_params() At releasing a time…
highCVSSv3 7.8 - CVE-2026-53191
In the Linux kernel, the following vulnerability has been resolved: io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retri…
highCVSSv3 7.8 - CVE-2026-53190
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_f…
mediumCVSSv3 5.5 - CVE-2026-53189
In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: update file PMD counter before folio_put() __split_…
highCVSSv3 7.8 - CVE-2026-53188
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate the passed in fops for ib_get_ucaps() Sashiko p…
highCVSSv3 8.8 - CVE-2026-53187
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate cpu_id against nr_cpu_ids in DMAH alloc The cpu…
highCVSSv3 7.1 - CVE-2026-53186
In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: bound SRP_RSP sense copy by the received length srp_proce…
criticalCVSSv3 9.1 - CVE-2026-53185
In the Linux kernel, the following vulnerability has been resolved: zram: fix use-after-free in zram_bvec_write_partial() zram_read_pag…
highCVSSv3 7.8 - CVE-2026-53184
In the Linux kernel, the following vulnerability has been resolved: udp: clear skb->dev before running a sockmap verdict On the UDP rec…
highCVSSv3 7.5 - CVE-2026-53183
In the Linux kernel, the following vulnerability has been resolved: mptcp: allow subflow rcv wnd to shrink In MPTCP connection, the `wi…
highCVSSv3 7.5 - CVE-2026-53182
In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject oversized EMA RNR lists nl80211_parse_rnr_ele…
highCVSSv3 7.8 - CVE-2026-53181
In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix sk_ack_backlog leak on failed handshake When vmci_t…
mediumCVSSv3 5.5 - CVE-2026-53180
In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix livelock in tmigr_handle_remote_up() tmigr_ha…
highCVSSv3 7.5 - CVE-2026-53179
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix buffer over-read in rtw_update_protection r…
highCVSSv3 7.1 - CVE-2026-53178
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length sub…
highCVSSv3 8.1 - CVE-2026-53177
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL pointer dereference PCIe errors detected by a Roo…
mediumCVSSv3 5.5 - CVE-2026-53176
In the Linux kernel, the following vulnerability has been resolved: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN In driver…
criticalCVSSv3 9.8 - CVE-2026-53175
In the Linux kernel, the following vulnerability has been resolved: inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush…
criticalCVSSv3 9.8 - CVE-2026-53174
In the Linux kernel, the following vulnerability has been resolved: ovl: keep err zero after successful ovl_cache_get() ovl_iterate_mer…
highCVSSv3 7.8 - CVE-2026-53173
In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validat…
highCVSSv3 7.8 - CVE-2026-53172
In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: fix IFM region index out-of-bounds in command stream p…
highCVSSv3 7.8 - CVE-2026-53171
In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: fix arithmetic issues in dma_length() dma_length() de…
highCVSSv3 8.8 - CVE-2026-53170
In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: reject DMA commands with uninitialized length cmd_sta…
highCVSSv3 8.8 - CVE-2026-53169
In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: reject NPU_OP_RESIZE commands from userspace NPU_OP_R…
mediumCVSSv3 5.5 - CVE-2026-53168
In the Linux kernel, the following vulnerability has been resolved: fuse: reject fuse_notify() pagecache ops on directories The operati…
highCVSSv3 7.0 - CVE-2026-53167
In the Linux kernel, the following vulnerability has been resolved: fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios FUSE_NOTIFY_RET…
highCVSSv3 7.0 - CVE-2026-53165
In the Linux kernel, the following vulnerability has been resolved: iomap: avoid potential null folio->mapping deref during error report…
highCVSSv3 7.5 - CVE-2026-53164
In the Linux kernel, the following vulnerability has been resolved: iommu/dma: Do not try to iommu_map a 0 length region in swiotlb iom…
mediumCVSSv3 5.5 - CVE-2026-53163
In the Linux kernel, the following vulnerability has been resolved: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued s…
mediumCVSSv3 5.5 - CVE-2026-53162
In the Linux kernel, the following vulnerability has been resolved: memcg: use round-robin victim selection in refill_stock Harry Yoo r…
highCVSSv3 7.8 - CVE-2026-53161
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix use-after-free of fastrpc_user in workqueue conte…
highCVSSv3 7.8 - CVE-2026-53160
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix use-after-free race in fastrpc_map_create fastrp…
highCVSSv3 7.8 - CVE-2026-53159
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix DMA address corruption due to find_vma misuse fa…
highCVSSv3 8.8 - CVE-2026-53158
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix NULL pointer dereference in rpmsg callback A NUL…
mediumCVSSv3 5.5 - CVE-2026-53157
In the Linux kernel, the following vulnerability has been resolved: net: phonet: free phonet_device after RCU grace period phonet_devic…
highCVSSv3 7.8 - CVE-2026-53156
In the Linux kernel, the following vulnerability has been resolved: nvmem: core: fix use-after-free bugs in error paths Fix several ins…
mediumCVSSv3 5.5 - CVE-2026-53155
In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: use correct flags for device private PMD entry Comm…
mediumCVSSv3 5.5 - CVE-2026-53154
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: restore reservation on error in hugetlb folio copy paths…
mediumCVSSv3 5.5 - CVE-2026-53153
In the Linux kernel, the following vulnerability has been resolved: mm/list_lru: drain before clearing xarray entry on reparent memcg_r…
highCVSSv3 7.8 - CVE-2026-53152
In the Linux kernel, the following vulnerability has been resolved: mmc: dw_mmc-rockchip: Add missing private data for very old controll…
mediumCVSSv3 5.5 - CVE-2026-53151
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the ACK parser to extract the SACK table for parsing Fix…
criticalCVSSv3 9.8 - CVE-2026-53150
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tb_pr…
highCVSSv3 7.0 - CVE-2026-53149
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound root directory content to block size __tb_proper…
mediumCVSSv3 5.5 - CVE-2026-53148
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Clamp XDomain response data copy to allocation size tb…
highCVSSv3 7.0 - CVE-2026-53147
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Validate XDomain request packet size before type cast…
highCVSSv3 8.1 - CVE-2026-53146
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Limit XDomain response copy to actual frame size tb_xd…
highCVSSv3 7.1 - CVE-2026-53144
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix NULL dereference in get_queue_ids() When usr_queue_…
mediumCVSSv3 5.5 - CVE-2026-53143
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on…
highCVSSv3 7.8 - CVE-2026-53142
In the Linux kernel, the following vulnerability has been resolved: drm/xe/display: fix oops in suspend/shutdown without display The xe…
mediumCVSSv3 5.5 - CVE-2026-53141
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix global performance monitor reference counting In the S…
mediumCVSSv3 5.5 - CVE-2026-53140
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix vaddr leak when indirect CSD has zeroed workgroups v3d…
mediumCVSSv3 5.5 - CVE-2026-53139
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Skip CSD when it has zeroed workgroups A compute shader di…
mediumCVSSv3 5.5 - CVE-2026-53138
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Bound VBIOS record-chain walk loops [Why & How] Al…
mediumCVSSv3 5.5 - CVE-2026-53137
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size [W…
highCVSSv3 7.1 - CVE-2026-53136
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Clamp VBIOS HDMI retimer register count to array si…
highCVSSv3 7.1 - CVE-2026-53135
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs…
mediumCVSSv3 5.5 - CVE-2026-53134
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_fib: fix stale stack leak via the OIFNAME register F…
mediumCVSSv3 5.5 - CVE-2026-53133
In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fix truncation for block sizes >= 4G When the iommu is u…
highCVSSv3 7.8 - CVE-2026-53132
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix potential unbounded skb queue virtio_transport_in…
highCVSSv3 7.1 - CVE-2026-53131
In the Linux kernel, the following vulnerability has been resolved: netfilter: require Ethernet MAC header before using eth_hdr() `ip6t…
criticalCVSSv3 9.4 - CVE-2026-53130
In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START omfs_fi…
criticalCVSSv3 9.8 - CVE-2026-53129
In the Linux kernel, the following vulnerability has been resolved: fs/mbcache: cancel shrink work before destroying the cache mb_cache…
mediumCVSSv3 5.5 - CVE-2026-53128
In the Linux kernel, the following vulnerability has been resolved: drbd: Balance RCU calls in drbd_adm_dump_devices() Make drbd_adm_du…
mediumCVSSv3 5.5 - CVE-2026-53127
In the Linux kernel, the following vulnerability has been resolved: block: fix zones_cond memory leak on zone revalidation error paths…
mediumCVSSv3 5.5 - CVE-2026-53126
In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current(…
mediumCVSSv3 5.5 - CVE-2026-53125
In the Linux kernel, the following vulnerability has been resolved: md: fix array_state=clear sysfs deadlock When "clear" is written to…
mediumCVSSv3 5.5 - CVE-2026-53124
In the Linux kernel, the following vulnerability has been resolved: ublk: reset per-IO canceled flag on each fetch If a ublk server sta…
mediumCVSSv3 5.5 - CVE-2026-53123
In the Linux kernel, the following vulnerability has been resolved: md: wake raid456 reshape waiters before suspend During raid456 resh…
mediumCVSSv3 5.5 - CVE-2026-53122
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between reflink and transaction commit when usin…
mediumCVSSv3 5.5 - CVE-2026-53121
In the Linux kernel, the following vulnerability has been resolved: amd-pstate: Fix memory leak in amd_pstate_epp_cpu_init() On failure…
mediumCVSSv3 5.5 - CVE-2026-53120
In the Linux kernel, the following vulnerability has been resolved: PCI: use generic driver_override infrastructure When a driver is pr…
highCVSSv3 7.8 - CVE-2026-53119
In the Linux kernel, the following vulnerability has been resolved: platform/wmi: use generic driver_override infrastructure When a dri…
highCVSSv3 7.8 - CVE-2026-53118
In the Linux kernel, the following vulnerability has been resolved: vdpa: use generic driver_override infrastructure When a driver is p…
highCVSSv3 7.8 - CVE-2026-53117
In the Linux kernel, the following vulnerability has been resolved: s390/cio: use generic driver_override infrastructure When a driver…
highCVSSv3 7.8 - CVE-2026-53116
In the Linux kernel, the following vulnerability has been resolved: s390/ap: use generic driver_override infrastructure When the AP mas…
highCVSSv3 7.8 - CVE-2026-53115
In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: use generic driver_override infrastructure When a driv…
highCVSSv3 7.8 - CVE-2026-53114
In the Linux kernel, the following vulnerability has been resolved: perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI han…
mediumCVSSv3 5.5 - CVE-2026-53113
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix memory leaks in beacon template setup The functio…
mediumCVSSv3 5.5 - CVE-2026-53112
In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished…
highCVSSv3 7.8 - CVE-2026-53111
In the Linux kernel, the following vulnerability has been resolved: bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmi…
mediumCVSSv3 6.5 - CVE-2026-53110
In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Zero-extend bpf prog return values and kfunc arguments s3…
highCVSSv3 7.8 - CVE-2026-53109
In the Linux kernel, the following vulnerability has been resolved: powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy powerp…
highCVSSv3 7.8 - CVE-2026-53108
In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix unmap race with PMD migration entries The followin…
mediumCVSSv3 5.5 - CVE-2026-53107
In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: don't kill URBs in interrupt context Serialization…
mediumCVSSv3 5.5 - CVE-2026-53106
In the Linux kernel, the following vulnerability has been resolved: bpf: Do not allow deleting local storage in NMI Currently, local st…
mediumCVSSv3 5.5 - CVE-2026-53105
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write…
mediumCVSSv3 5.5 - CVE-2026-53104
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix memory leak destroying device All MT76 rx queues ha…
mediumCVSSv3 5.5 - CVE-2026-53103
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix potential deadlock in mt7925_roc_abort_sync…
mediumCVSSv3 5.5 - CVE-2026-53102
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req() m…
mediumCVSSv3 5.5 - CVE-2026-53101
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix potential deadlock in mt7921_roc_abort_sync…
mediumCVSSv3 5.5 - CVE-2026-53100
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix deadlock in remain-on-channel mt76_remain_on_channe…
mediumCVSSv3 5.5 - CVE-2026-53099
In the Linux kernel, the following vulnerability has been resolved: bpf: Switch CONFIG_CFI_CLANG to CONFIG_CFI This was renamed in comm…
mediumCVSSv3 5.5 - CVE-2026-53098
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work(…
highCVSSv3 7.1 - CVE-2026-53097
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work(…
highCVSSv3 7.8 - CVE-2026-53096
In the Linux kernel, the following vulnerability has been resolved: bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path Th…
highCVSSv3 7.8 - CVE-2026-53095
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix abuse of kprobe_write_ctx via freplace uprobe programs are…
mediumCVSSv3 5.5 - CVE-2026-53094
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stale offload->prog pointer after constant blinding When a…
highCVSSv3 7.8 - CVE-2026-53093
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix error pointer dereference The function brcmf_ch…
mediumCVSSv3 5.5 - CVE-2026-53092
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix linked reg delta tracking when src_reg == dst_reg Consider…
highCVSSv3 7.8 - CVE-2026-53091
In the Linux kernel, the following vulnerability has been resolved: net: pull headers in qdisc_pkt_len_segs_init() Most ndo_start_xmit(…
highCVSSv3 8.4 - CVE-2026-53090
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix ld_{abs,ind} failure path analysis in subprogs Usage of ld…
highCVSSv3 7.8 - CVE-2026-53089
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in offloaded map/prog info fill When queryi…
highCVSSv3 7.8 - CVE-2026-53088
In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix off-by-one in bcmgenet_put_txcb The write_ptr po…
criticalCVSSv3 9.8 - CVE-2026-53087
In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix leaking free_bds While reclaiming the tx queue w…
highCVSSv3 7.5 - CVE-2026-53086
In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix racing timeout handler The bcmgenet_timeout hand…
criticalCVSSv3 9.8 - CVE-2026-53085
In the Linux kernel, the following vulnerability has been resolved: bpf: fix mm lifecycle in open-coded task_vma iterator The open-code…
highCVSSv3 7.8 - CVE-2026-53084
In the Linux kernel, the following vulnerability has been resolved: bpf: return VMA snapshot from task_vma iterator Holding the per-VMA…
mediumCVSSv3 5.5 - CVE-2026-53083
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix RCU stall in bpf_fd_array_map_clear() Add a missing cond_r…
mediumCVSSv3 5.5 - CVE-2026-53082
In the Linux kernel, the following vulnerability has been resolved: net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf sixpa…
mediumCVSSv3 5.5 - CVE-2026-53081
In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars…
highCVSSv3 7.8 - CVE-2026-53080
In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_fw: fix NULL dereference of "old" filters before chan…
mediumCVSSv3 5.5 - CVE-2026-53079
In the Linux kernel, the following vulnerability has been resolved: net_sched: fix skb memory leak in deferred qdisc drops When the net…
mediumCVSSv3 5.5 - CVE-2026-53078
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops…
highCVSSv3 7.8 - CVE-2026-53077
In the Linux kernel, the following vulnerability has been resolved: net/rds: Restrict use of RDS/IB to the initial network namespace Pr…
criticalCVSSv3 9.8 - CVE-2026-53076
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix OOB in pcpu_init_value An out-of-bounds read occurs when c…
highCVSSv3 7.1 - CVE-2026-53075
In the Linux kernel, the following vulnerability has been resolved: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls /d…
criticalCVSSv3 9.8 - CVE-2026-53074
In the Linux kernel, the following vulnerability has been resolved: bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb bpf_pro…
mediumCVSSv3 6.4 - CVE-2026-53073
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error When hci_r…
highCVSSv3 7.0 - CVE-2026-53072
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFE…
highCVSSv3 8.8 - CVE-2026-53071
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp l…
highCVSSv3 8.8 - CVE-2026-53070
In the Linux kernel, the following vulnerability has been resolved: sctp: disable BH before calling udp_tunnel_xmit_skb() udp_tunnel_xm…
highCVSSv3 7.5 - CVE-2026-53069
In the Linux kernel, the following vulnerability has been resolved: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down maste…
highCVSSv3 7.5 - CVE-2026-53068
In the Linux kernel, the following vulnerability has been resolved: drm/komeda: fix integer overflow in AFBC framebuffer size check The…
highCVSSv3 7.8 - CVE-2026-53067
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-ep-msi: Fix error unwind and prevent double alloc…
highCVSSv3 7.8 - CVE-2026-53066
In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: backend: fix error pointer dereference The function drm_…
mediumCVSSv3 5.5 - CVE-2026-53065
In the Linux kernel, the following vulnerability has been resolved: ASoC: sti: use managed regmap_field allocations The regmap_field ob…
mediumCVSSv3 5.5 - CVE-2026-53064
In the Linux kernel, the following vulnerability has been resolved: dm cache: fix null-deref with concurrent writes in passthrough mode…
highCVSSv3 7.1 - CVE-2026-53063
In the Linux kernel, the following vulnerability has been resolved: dm cache: fix write hang in passthrough mode The invalidate_remove(…
highCVSSv3 7.1 - CVE-2026-53062
In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: fix missing locks in invalidating cache blocks…
criticalCVSSv3 9.8 - CVE-2026-53061
In the Linux kernel, the following vulnerability has been resolved: dm cache: fix dirty mapping checking in passthrough mode switching…
mediumCVSSv3 5.5 - CVE-2026-53060
In the Linux kernel, the following vulnerability has been resolved: dm cache metadata: fix memory leak on metadata abort retry When fai…
mediumCVSSv3 5.5 - CVE-2026-53059
In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to region_count overflow The lo…
highCVSSv3 7.8 - CVE-2026-53058
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earl…
mediumCVSSv3 5.5 - CVE-2026-53057
In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Add IOTINVAL after updating DDT/PDT entries Add riscv_…
highCVSSv3 8.8 - CVE-2026-53056
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: fix mismatch between power and frequency During DPU ru…
mediumCVSSv3 5.5 - CVE-2026-53055
In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec2 - prevent req used-after-free for sec During…
criticalCVSSv3 9.8 - CVE-2026-53054
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix VM_BIND UNMAP locking Wrong argument meant that the ob…
highCVSSv3 7.8 - CVE-2026-53053
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix clone_alias() to use the original device's devid Cur…
criticalCVSSv3 9.8 - CVE-2026-53052
In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: qdsp6: topology: check widget type before accessing data…
criticalCVSSv3 9.8 - CVE-2026-53051
In the Linux kernel, the following vulnerability has been resolved: PCI: tegra194: Fix CBB timeout caused by DBI access before core powe…
mediumCVSSv3 5.5 - CVE-2026-53050
In the Linux kernel, the following vulnerability has been resolved: quota: Fix race of dquot_scan_active() with quota deactivation dquo…
highCVSSv3 7.8 - CVE-2026-53049
In the Linux kernel, the following vulnerability has been resolved: gfs2: add some missing log locking Function gfs2_logd() calls the l…
criticalCVSSv3 9.8 - CVE-2026-53048
In the Linux kernel, the following vulnerability has been resolved: gfs2: prevent NULL pointer dereference during unmount When flushing…
mediumCVSSv3 5.5 - CVE-2026-53047
In the Linux kernel, the following vulnerability has been resolved: efi/capsule-loader: fix incorrect sizeof in phys array reallocation…
mediumCVSSv3 5.5 - CVE-2026-53046
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free from async crypto on Qualcomm crypto engin…
criticalCVSSv3 9.8 - CVE-2026-53045
In the Linux kernel, the following vulnerability has been resolved: memory: tegra124-emc: Fix dll_change check The code checking whethe…
criticalCVSSv3 9.8 - CVE-2026-53044
In the Linux kernel, the following vulnerability has been resolved: soc/tegra: cbb: Fix incorrect ARRAY_SIZE in fabric lookup tables Fi…
highCVSSv3 7.1 - CVE-2026-53043
In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: validate qr_numregions in dlm_match_regions() Patch seri…
criticalCVSSv3 9.8 - CVE-2026-53042
In the Linux kernel, the following vulnerability has been resolved: fwctl: Fix class init ordering to avoid NULL pointer dereference on…
mediumCVSSv3 5.5 - CVE-2026-53041
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix listxattr handling when the buffer is full [BUG] If an O…
highCVSSv3 7.1 - CVE-2026-53040
In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate bg_bits during freefrag scan [BUG] A crafted filesy…
highCVSSv3 7.1 - CVE-2026-53039
In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate group add input before caching [BUG] OCFS2_IOC_GROU…
highCVSSv3 7.8 - CVE-2026-53038
In the Linux kernel, the following vulnerability has been resolved: ima_fs: Correctly create securityfs files for unsupported hash algos…
mediumCVSSv3 5.5 - CVE-2026-53037
In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: fix deadlock in hid_post_reset() You can build a USB d…
mediumCVSSv3 5.5 - CVE-2026-53036
In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix off-by-one in check_imm signed range check check_im…
criticalCVSSv3 9.8 - CVE-2026-53035
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix af_unix iter deadlock bpf_iter_unix_seq_show() ma…
mediumCVSSv3 5.5 - CVE-2026-53034
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix af_unix null-ptr-deref in proto update unix_strea…
highCVSSv3 7.0 - CVE-2026-53033
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Take state lock for af_unix iter When a BPF iterator…
highCVSSv3 7.8 - CVE-2026-53032
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL deref in map_kptr_match_type for scalar regs Commit a…
mediumCVSSv3 5.5 - CVE-2026-53031
In the Linux kernel, the following vulnerability has been resolved: bpf: Validate node_id in arena_alloc_pages() arena_alloc_pages() ac…
highCVSSv3 7.8 - CVE-2026-53030
In the Linux kernel, the following vulnerability has been resolved: i3c: master: renesas: Fix memory leak in renesas_i3c_i3c_xfers() Th…
mediumCVSSv3 5.5 - CVE-2026-53029
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: prevent uninitialized lcn caused by zero len syzbot repor…
mediumCVSSv3 5.5 - CVE-2026-53028
In the Linux kernel, the following vulnerability has been resolved: usb: typec: Fix error pointer dereference The variable tps->partner…
mediumCVSSv3 5.5 - CVE-2026-53027
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locke…
highCVSSv3 7.1 - CVE-2026-53026
In the Linux kernel, the following vulnerability has been resolved: NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrde…
highCVSSv3 7.5 - CVE-2026-53025
In the Linux kernel, the following vulnerability has been resolved: greybus: raw: fix use-after-free on cdev close This addresses a use…
criticalCVSSv3 9.8 - CVE-2026-53024
In the Linux kernel, the following vulnerability has been resolved: greybus: raw: fix use-after-free if write is called after disconnect…
highCVSSv3 7.8 - CVE-2026-53023
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: terminate the cached volume label after UTF-8 conversion…
highCVSSv3 7.1 - CVE-2026-53022
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: bound enumeration string aggregation…
mediumCVSSv3 5.5 - CVE-2026-53021
In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix integer overflow in UNMAP bounds check sbc_…
mediumCVSSv3 6.1 - CVE-2026-53020
In the Linux kernel, the following vulnerability has been resolved: um: Fix potential race condition in TLB sync During the TLB sync, w…
highCVSSv3 7.8 - CVE-2026-53019
In the Linux kernel, the following vulnerability has been resolved: clk: spacemit: ccu_mix: fix inverted condition in ccu_mix_trigger_fc…
mediumCVSSv3 5.5 - CVE-2026-53018
In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid reading already updated pages during GC We found the fo…
criticalCVSSv3 9.8 - CVE-2026-53017
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix data loss caused by incorrect use of nat_entry flag Data…
criticalCVSSv3 9.8 - CVE-2026-53016
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-…
highCVSSv3 7.8 - CVE-2026-53015
In the Linux kernel, the following vulnerability has been resolved: erofs: unify lcn as u64 for 32-bit platforms As sashiko reported [1…
mediumCVSSv3 5.5 - CVE-2026-53014
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: fix wrong device for mac_header_xmit check in…
mediumCVSSv3 5.5 - CVE-2026-53013
In the Linux kernel, the following vulnerability has been resolved: macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN…
mediumCVSSv3 5.5 - CVE-2026-53012
In the Linux kernel, the following vulnerability has been resolved: nexthop: fix IPv6 route referencing IPv4 nexthop syzbot reported a…
mediumCVSSv3 5.5 - CVE-2026-53011
In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: fix use-after-free in advance_sched() on schedule…
highCVSSv3 7.8 - CVE-2026-53010
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2_open during durable reconnect In…
criticalCVSSv3 9.8 - CVE-2026-53009
In the Linux kernel, the following vulnerability has been resolved: ice: fix double-free of tx_buf skb If ice_tso() or ice_tx_csum() fa…
highCVSSv3 7.8 - CVE-2026-53008
In the Linux kernel, the following vulnerability has been resolved: ice: fix race condition in TX timestamp ring cleanup Fix a race con…
mediumCVSSv3 4.7 - CVE-2026-53007
In the Linux kernel, the following vulnerability has been resolved: ice: fix potential NULL pointer deref in error path of ice_set_ringp…
mediumCVSSv3 5.5 - CVE-2026-53006
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr and daddr befo…
criticalCVSSv3 9.8 - CVE-2026-53005
In the Linux kernel, the following vulnerability has been resolved: af_unix: Drop all SCM attributes for SOCKMAP.
highCVSSv3 7.8 - CVE-2026-53004
In the Linux kernel, the following vulnerability has been resolved: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks…
highCVSSv3 7.8 - CVE-2026-53003
In the Linux kernel, the following vulnerability has been resolved: pppoe: drop PFC frames RFC 2516 Section 7 states that Protocol Fiel…
highCVSSv3 7.5 - CVE-2026-53002
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: remove sprintf usage Replace it with scnprint…
criticalCVSSv3 9.8 - CVE-2026-53001
In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: restrict several matches to inet family This is…
mediumCVSSv3 5.5 - CVE-2026-53000
In the Linux kernel, the following vulnerability has been resolved: netfilter: nat: use kfree_rcu to release ops Florian Westphal says:…
criticalCVSSv3 9.8 - CVE-2026-52999
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix out-of-bounds read on option matching…
criticalCVSSv3 9.1 - CVE-2026-52998
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix potential NULL dereference in ttl chec…
highCVSSv3 7.5 - CVE-2026-52997
In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_dualpi2: drain both C-queue and L-queue in dualpi2_ch…
mediumCVSSv3 5.5 - CVE-2026-52996
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open…
highCVSSv3 7.1 - CVE-2026-52995
In the Linux kernel, the following vulnerability has been resolved: net/rds: zero per-item info buffer before handing it to visitors rd…
mediumCVSSv3 5.5 - CVE-2026-52994
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting virtio_trans…
mediumCVSSv3 5.5 - CVE-2026-52993
In the Linux kernel, the following vulnerability has been resolved: tipc: fix double-free in tipc_buf_append() tipc_msg_validate() can…
criticalCVSSv3 9.8 - CVE-2026-52992
In the Linux kernel, the following vulnerability has been resolved: fs/adfs: validate nzones in adfs_validate_bblk() Reject ADFS disc r…
highCVSSv3 7.1 - CVE-2026-52991
In the Linux kernel, the following vulnerability has been resolved: sched/psi: fix race between file release and pressure write A poten…
criticalCVSSv3 9.8 - CVE-2026-52990
In the Linux kernel, the following vulnerability has been resolved: fsnotify: fix inode reference leak in fsnotify_recalc_mask() fsnoti…
mediumCVSSv3 5.5 - CVE-2026-52989
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its calle…
criticalCVSSv3 9.8 - CVE-2026-52988
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: join hook list via splice_list_rcu() in commit…
highCVSSv3 7.1 - CVE-2026-52987
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid double drm_exec_fini() in userq validate When new…
highCVSSv3 7.8 - CVE-2026-52986
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: don't use simple_strtoul Replace unsaf…
criticalCVSSv3 9.8 - CVE-2026-52985
In the Linux kernel, the following vulnerability has been resolved: netdevsim: zero initialize struct iphdr in dummy sk_buff Syzbot rep…
mediumCVSSv3 5.5 - CVE-2026-52984
In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: fix queue limit check to include reordered packets…
mediumCVSSv3 5.5 - CVE-2026-52983
In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix BQL imbalance in TX path Fix a possible BQL imbala…
highCVSSv3 7.5 - CVE-2026-52982
In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() syzbo…
criticalCVSSv3 9.8 - CVE-2026-52981
In the Linux kernel, the following vulnerability has been resolved: neigh: let neigh_xmit take skb ownership neigh_xmit always releases…
highCVSSv3 7.5 - CVE-2026-52980
In the Linux kernel, the following vulnerability has been resolved: sched/fair: Clear rel_deadline when initializing forked entities A…
mediumCVSSv3 5.5 - CVE-2026-52979
In the Linux kernel, the following vulnerability has been resolved: net: psp: check for device unregister when creating assoc psp_assoc…
mediumCVSSv3 5.5 - CVE-2026-52978
In the Linux kernel, the following vulnerability has been resolved: net: psp: require admin permission for dev-set and key-rotate The d…
mediumCVSSv3 5.5 - CVE-2026-52977
In the Linux kernel, the following vulnerability has been resolved: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup D…
mediumCVSSv3 5.5 - CVE-2026-52976
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() Two error…
highCVSSv3 7.8 - CVE-2026-52975
In the Linux kernel, the following vulnerability has been resolved: bonding: 3ad: implement proper RCU rules for port->aggregator syzbo…
highCVSSv3 7.8 - CVE-2026-52974
In the Linux kernel, the following vulnerability has been resolved: net: tls: fix strparser anchor skb leak on offload RX setup failure…
highCVSSv3 7.5 - CVE-2026-52973
In the Linux kernel, the following vulnerability has been resolved: futex: Drop CLONE_THREAD requirement for private default hash alloc…
highCVSSv3 7.8 - CVE-2026-52971
In the Linux kernel, the following vulnerability has been resolved: net: ena: PHC: Fix potential use-after-free in get_timestamp Move t…
highCVSSv3 7.8 - CVE-2026-52970
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: fix missing expect put in obj eval nft_ct_expect…
mediumCVSSv3 5.5 - CVE-2026-52969
In the Linux kernel, the following vulnerability has been resolved: KVM: Reject wrapped offset in kvm_reset_dirty_gfn() kvm_reset_dirty…
highCVSSv3 7.1 - CVE-2026-52968
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: fix GAIT table indexing due to double-scaling pointe…
highCVSSv3 8.8 - CVE-2026-52967
In the Linux kernel, the following vulnerability has been resolved: smb/client: fix possible infinite loop and oob read in symlink_data(…
highCVSSv3 8.1 - CVE-2026-52965
In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure…
mediumCVSSv3 5.5 - CVE-2026-52964
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans The USB M…
mediumCVSSv3 5.5 - CVE-2026-52963
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Bound MIDI endpoint descriptor scans snd_usbmidi_g…
mediumCVSSv3 5.5 - CVE-2026-52962
In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in __ceph_setxattr() The old_blob in __ceph…
criticalCVSSv3 9.8 - CVE-2026-52961
In the Linux kernel, the following vulnerability has been resolved: ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob siz…
highCVSSv3 7.1 - CVE-2026-52960
In the Linux kernel, the following vulnerability has been resolved: ceph: put folios not suitable for writeback The batch holds referen…
highCVSSv3 7.5 - CVE-2026-52959
In the Linux kernel, the following vulnerability has been resolved: virt: sev-guest: Do not use host-controlled page order in cleanup pa…
highCVSSv3 7.8 - CVE-2026-52958
In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in osdmap_decode() When…
criticalCVSSv3 9.1 - CVE-2026-52957
In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential null-ptr-deref in decode_choose_args() A mes…
highCVSSv3 7.5 - CVE-2026-52956
In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() I…
criticalCVSSv3 9.8 - CVE-2026-52955
In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in crush_decode() A mes…
criticalCVSSv3 9.8 - CVE-2026-52954
In the Linux kernel, the following vulnerability has been resolved: libceph: handle rbtree insertion error in decode_choose_args() A me…
highCVSSv3 7.5 - CVE-2026-52953
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix oops due to out of scope access Below oops triggers…
highCVSSv3 7.1 - CVE-2026-52952
In the Linux kernel, the following vulnerability has been resolved: iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset…
highCVSSv3 8.8 - CVE-2026-52951
In the Linux kernel, the following vulnerability has been resolved: drm/xe/dma-buf: handle empty bo and UAF races There look to be some…
highCVSSv3 7.8 - CVE-2026-52950
In the Linux kernel, the following vulnerability has been resolved: drm/xe/dma-buf: fix UAF with retry loop Retry doesn't work here, si…
highCVSSv3 7.8 - CVE-2026-52949
In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure Ap…
mediumCVSSv3 5.5 - CVE-2026-52948
In the Linux kernel, the following vulnerability has been resolved: i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl While fuzzi…
mediumCVSSv3 5.5 - CVE-2026-52947
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_re…
criticalCVSSv3 9.8 - CVE-2026-52944
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix FSCTL permission bypass by adding a permission check for…
criticalCVSSv3 9.8 - CVE-2026-52943
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskb_carve helpers p…
highCVSSv3 7.8 - CVE-2026-52942
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_log: validate MAC header was set before dumping it Th…
highCVSSv3 7.1 - CVE-2026-52941
In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint…
mediumCVSSv3 5.5 - CVE-2026-52940
In the Linux kernel, the following vulnerability has been resolved: tun: zero the whole vnet header in tun_put_user() tun_put_user() de…
mediumCVSSv3 5.5 - CVE-2026-52939
In the Linux kernel, the following vulnerability has been resolved: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomi…
mediumCVSSv3 5.5 - CVE-2026-52938
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag p…
mediumCVSSv3 5.5 - CVE-2026-52937
In the Linux kernel, the following vulnerability has been resolved: tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR In the SIOCGI…
mediumCVSSv3 5.5 - CVE-2026-52936
In the Linux kernel, the following vulnerability has been resolved: crypto: jitterentropy - replace long-held spinlock with mutex jent_…
mediumCVSSv3 5.5 - CVE-2026-52935
In the Linux kernel, the following vulnerability has been resolved: xfrm: espintcp: do not reuse an in-progress partial send espintcp k…
highCVSSv3 7.8 - CVE-2026-52934
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tvlv: reject oversized TVLV packets batadv_tvlv_contain…
criticalCVSSv3 9.8 - CVE-2026-52932
In the Linux kernel, the following vulnerability has been resolved: xfrm: ipcomp: Free destination pages on acomp errors Move the out_f…
highCVSSv3 7.5 - CVE-2026-52931
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: avoid use of uninit sender vars batadv_tp_rec…
criticalCVSSv3 9.8 - CVE-2026-52930
In the Linux kernel, the following vulnerability has been resolved: ipc/shm: serialize orphan cleanup with shm_nattch updates shm_destr…
mediumCVSSv3 5.5 - CVE-2026-52929
In the Linux kernel, the following vulnerability has been resolved: sctp: stream: fully roll back denied add-stream state When ADD_OUT_…
highCVSSv3 7.5 - CVE-2026-52928
In the Linux kernel, the following vulnerability has been resolved: af_unix: Reject SIOCATMARK on non-stream sockets SIOCATMARK reports…
mediumCVSSv3 5.5 - CVE-2026-52927
In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix OOB read in compat_mtw_from_user Luxiao Xu…
highCVSSv3 7.8 - CVE-2026-52926
In the Linux kernel, the following vulnerability has been resolved: batman-adv: clear current gateway during teardown batadv_gw_node_fr…
highCVSSv3 7.8 - CVE-2026-52925
In the Linux kernel, the following vulnerability has been resolved: vrf: Fix a potential NPD when removing a port from a VRF RCU reader…
mediumCVSSv3 5.5 - CVE-2026-52924
In the Linux kernel, the following vulnerability has been resolved: sctp: purge outqueue on stale COOKIE-ECHO handling sctp_stream_upda…
criticalCVSSv3 9.8 - CVE-2026-52923
In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/…
highCVSSv3 7.8 - CVE-2026-52922
In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: handle forward allocation error batadv_dat_forward…
criticalCVSSv3 9.8 - CVE-2026-52921
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: stop hash:* range iteration at end The following…
mediumCVSSv3 5.5 - CVE-2026-52920
In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_policy: fix strict mode inbound policy matching match…
highCVSSv3 8.3 - CVE-2026-52919
In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix tp_meter counter underflow during shutdown batadv_t…
criticalCVSSv3 9.8 - CVE-2026-52918
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: serialize accept_q access bt_sock_poll() walks the accep…
highCVSSv3 8.8 - CVE-2026-52917
In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dump_one path The SCTP exa…
highCVSSv3 7.1 - CVE-2026-52916
In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: disallow unicast fragment in fragment batadv_frag…
mediumCVSSv3 5.5 - CVE-2026-52915
In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_hbh: reject oversized option lists struct ip6t_opts…
highCVSSv3 7.1 - CVE-2026-52914
In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix fragment reassembly length accounting batman-adv ke…
criticalCVSSv3 9.8 - CVE-2026-52913
In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: stop OGMv2 on disabled interface When a batadv_hard_…
criticalCVSSv3 9.8 - CVE-2026-52912
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: hold bridge skb->dev while queued br_pass_fram…
highCVSSv3 7.8 - CVE-2026-52911
In the Linux kernel, the following vulnerability has been resolved: ksmbd: scope conn->binding slowpath to bound sessions only When the…
highCVSSv3 8.8 - CVE-2026-52910
In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period.
highCVSSv3 7.8 - CVE-2026-52909
In the Linux kernel, the following vulnerability has been resolved: ip6_vti: set netns_immutable on the fallback device.
highCVSSv3 7.8 - CVE-2026-52908
In the Linux kernel, the following vulnerability has been resolved: RDMA: During rereg_mr ensure that REREG_ACCESS is compatible If IB_…
highCVSSv3 7.8 - CVE-2026-46331
A flaw was found in the Linux kernel's traffic control packet editing (pedit) subsystem.
highCVSSv3 7.8 - CVE-2026-46324
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for netlink hooks nft_netdev…
highCVSSv3 7.8 - CVE-2026-46322
In the Linux kernel, the following vulnerability has been resolved: tun: free page on build_skb failure in tun_xdp_one() When build_skb…
highCVSSv3 7.1 - CVE-2026-46321
In the Linux kernel, the following vulnerability has been resolved: tun: free page on short-frame rejection in tun_xdp_one() tun_xdp_on…
highCVSSv3 7.1 - CVE-2026-46320
In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tap_get_user_xdp() tap_get_user_xd…
highCVSSv3 7.4 - CVE-2026-46319
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: Only release RCU read lock after ct_ft When look…
highCVSSv3 7.8 - CVE-2026-46318
In the Linux kernel, the following vulnerability has been resolved: Revert "mm/hugetlbfs: update hugetlbfs to use mmap_prepare" This re…
mediumCVSSv3 5.5 - CVE-2026-46317
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nested_mmus array behind mmu_lock kvm->arch.ne…
highCVSSv3 8.8 - CVE-2026-46316
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for…
criticalCVSSv3 9.3 - CVE-2026-46315
In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: clear waitid info before copying it to userspace I…
mediumCVSSv3 5.5 - CVE-2026-46314
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Reject empty multisync extension to prevent infinite loop…
mediumCVSSv3 5.5 - CVE-2026-46313
In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix error pointer dereference In a error path is…
mediumCVSSv3 5.5 - CVE-2026-46312
In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: Set vma_flags in vb2_dma_sg_mmap vb2_dma_contig s…
mediumCVSSv3 5.5 - CVE-2026-46311
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix access to stale wptr mapping Use drm_exec to…
highCVSSv3 7.8 - CVE-2026-46310
In the Linux kernel, the following vulnerability has been resolved: media: renesas: vsp1: Fix NULL pointer deref on module unload When…
mediumCVSSv3 5.5 - CVE-2026-46309
In the Linux kernel, the following vulnerability has been resolved: drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madv…
highCVSSv3 7.0 - CVE-2026-46308
In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix use-after-free in scpsys_get_bus_protection_…
highCVSSv3 7.8 - CVE-2026-46307
In the Linux kernel, the following vulnerability has been resolved: wifi: ath5k: do not access array OOB Vincent reports: > The ath5k d…
highCVSSv3 8.3 - CVE-2026-46306
In the Linux kernel, the following vulnerability has been resolved: flow_dissector: do not dissect PPPoE PFC frames RFC 2516 Section 7…
highCVSSv3 7.5 - CVE-2026-46305
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: os_dep: avoid NULL pointer dereference in rtw_cb…
mediumCVSSv3 5.5 - CVE-2026-46304
In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free nvmet_tcp_…
highCVSSv3 7.5 - CVE-2026-46303
In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume siz…
highCVSSv3 8.2 - CVE-2026-46302
In the Linux kernel, the following vulnerability has been resolved: selinux: allow multiple opens of /sys/fs/selinux/policy Currently t…
mediumCVSSv3 5.5 - CVE-2026-46301
In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a c…
highCVSSv3 7.8 - CVE-2026-46299
In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix held lock freed on hfsplus_fill_super() hfsplus_fill_s…
highCVSSv3 7.0 - CVE-2026-46298
In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Fix race with interrupt handler While executin…
mediumCVSSv3 4.7 - CVE-2026-46297
In the Linux kernel, the following vulnerability has been resolved: net: libwx: use request_irq for VF misc interrupt Currently, reques…
mediumCVSSv3 5.5 - CVE-2026-46296
In the Linux kernel, the following vulnerability has been resolved: spi: s3c64xx: fix NULL-deref on driver unbind A change moving DMA c…
mediumCVSSv3 5.5 - CVE-2026-46295
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is empty…
mediumCVSSv3 5.5 - CVE-2026-46294
In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson (using C…
highCVSSv3 7.8 - CVE-2026-46293
In the Linux kernel, the following vulnerability has been resolved: clk: microchip: mpfs-ccc: fix out of bounds access during output reg…
highCVSSv3 7.1 - CVE-2026-46292
In the Linux kernel, the following vulnerability has been resolved: pmdomain: core: Fix detach procedure for virtual devices in genpd I…
mediumCVSSv3 5.5 - CVE-2026-46291
In the Linux kernel, the following vulnerability has been resolved: crypto: caam - guard HMAC key hex dumps in hash_digest_key Use prin…
mediumCVSSv3 5.5 - CVE-2026-46290
In the Linux kernel, the following vulnerability has been resolved: x86/efi: Fix graceful fault handling after FPU softirq changes Sinc…
mediumCVSSv3 5.5 - CVE-2026-46289
In the Linux kernel, the following vulnerability has been resolved: lib/scatterlist: fix length calculations in extract_kvec_to_sg Patc…
criticalCVSSv3 9.8 - CVE-2026-46275
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix UAFs and race conditions in close and init…
highCVSSv3 7.8 - CVE-2026-46274
In the Linux kernel, the following vulnerability has been resolved: io-wq: check that the predecessor is hashed in io_wq_remove_pending(…
highCVSSv3 7.8 - CVE-2026-46273
In the Linux kernel, the following vulnerability has been resolved: ibmveth: Disable GSO for packets with small MSS Some physical adapt…
highCVSSv3 8.6 - CVE-2026-46244
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6 inner_thoff desync In nft_inner_pars…
criticalCVSSv3 9.1 - CVE-2026-46243
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation.
highCVSSv3 7.8 - CVE-2026-46242
In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct eventpoll / struct file UAF ep_remo…
highCVSSv3 7.8 - CVE-2026-46241
In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix use-after-free on registration failure Make sure…
mediumCVSSv3 5.5 - CVE-2026-46240
In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix use-after-free in iris_release_internal_buffers()…
highCVSSv3 7.8 - CVE-2026-46239
In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov5647: Fix runtime PM refcount leak in s_ctrl Three co…
—CVSSv3 0.0 - CVE-2026-46238
In the Linux kernel, the following vulnerability has been resolved: batman-adv: stop caching unowned originator pointers in BAT IV BAT…
highCVSSv3 8.8 - CVE-2026-46236
In the Linux kernel, the following vulnerability has been resolved: media: rc: xbox_remote: heed DMA restrictions The buffer for IO mus…
mediumCVSSv3 5.5 - CVE-2026-46235
In the Linux kernel, the following vulnerability has been resolved: media: saa7164: add ioremap return checks and cleanups Add checks f…
mediumCVSSv3 5.5 - CVE-2026-46234
In the Linux kernel, the following vulnerability has been resolved: vsock: fix buffer size clamping order In vsock_update_buffer_size()…
mediumCVSSv3 5.5 - CVE-2026-46233
In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: only purge non-released claims When batadv_bla_pur…
highCVSSv3 7.1 - CVE-2026-46232
In the Linux kernel, the following vulnerability has been resolved: HID: playstation: Clamp num_touch_reports A device would never lie…
highCVSSv3 8.1 - CVE-2026-46231
In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: put backbone reference on failed claim hash insert…
highCVSSv3 7.1 - CVE-2026-46230
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg Check bound…
highCVSSv3 7.1 - CVE-2026-46229
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure…
highCVSSv3 7.1 - CVE-2026-46228
In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix devres lifetime USB drivers bind to USB interfaces…
—CVSSv3 0.0 - CVE-2026-46227
In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SE…
highCVSSv3 7.8 - CVE-2026-46226
In the Linux kernel, the following vulnerability has been resolved: spi: fsl: fix controller deregistration Make sure to deregister the…
highCVSSv3 7.1 - CVE-2026-46225
In the Linux kernel, the following vulnerability has been resolved: spi: rspi: fix controller deregistration Make sure to deregister th…
highCVSSv3 7.1 - CVE-2026-46224
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure…
—CVSSv3 0.0 - CVE-2026-46223
In the Linux kernel, the following vulnerability has been resolved: cgroup: Defer css percpu_ref kill on rmdir until cgroup is depopulat…
—CVSSv3 0.0 - CVE-2026-46222
In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads The p…
—CVSSv3 0.0 - CVE-2026-46221
In the Linux kernel, the following vulnerability has been resolved: EDAC/versalnet: Fix device name memory leak The device name allocat…
—CVSSv3 0.0 - CVE-2026-46220
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission sdm…
mediumCVSSv3 6.6 - CVE-2026-46219
In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix use-after-free on unbind The state machine work i…
mediumCVSSv3 5.5 - CVE-2026-46218
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add bounds checking to ib_{get,set}_value The uvd/vce/v…
highCVSSv3 7.1 - CVE-2026-46216
In the Linux kernel, the following vulnerability has been resolved: drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_sta…
—CVSSv3 0.0 - CVE-2026-46215
In the Linux kernel, the following vulnerability has been resolved: drm: Set old handle to NULL before prime swap in change_handle Ther…
highCVSSv3 7.8 - CVE-2026-46214
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix accept queue count leak on transport mismatch vir…
mediumCVSSv3 5.5 - CVE-2026-46213
In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix UAF in inactivity-timer cleanup path Commit 3…
—CVSSv3 0.0 - CVE-2026-46212
In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: prevent use-after-free when deleting claims When b…
highCVSSv3 8.8 - CVE-2026-46211
In the Linux kernel, the following vulnerability has been resolved: drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata()…
—CVSSv3 0.0 - CVE-2026-46210
In the Linux kernel, the following vulnerability has been resolved: media: iris: fix use-after-free of fmt_src during MBPF check During…
highCVSSv3 7.8 - CVE-2026-46209
In the Linux kernel, the following vulnerability has been resolved: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_…
highCVSSv3 7.8 - CVE-2026-46208
In the Linux kernel, the following vulnerability has been resolved: batman-adv: stop tp_meter sessions during mesh teardown TP meter se…
highCVSSv3 7.8 - CVE-2026-46207
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix empty payload in tap skb for non-linear buffers F…
—CVSSv3 0.0 - CVE-2026-46206
In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject new tp_meter sessions during teardown Prevent tp…
highCVSSv3 7.8 - CVE-2026-46205
In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Disallow all private IOCTLs Disallow all p…
highCVSSv3 7.8 - CVE-2026-46204
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB Rewrite the IB p…
highCVSSv3 7.1 - CVE-2026-46203
In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: fix unclocked access on unbind Make sure that…
highCVSSv3 7.1 - CVE-2026-46202
In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: run inactivity autodim from workqueues The autodi…
—CVSSv3 0.0 - CVE-2026-46201
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() When x…
highCVSSv3 7.8 - CVE-2026-46200
In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix controller deregistration Make sure to deregister…
mediumCVSSv3 5.5 - CVE-2026-46199
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg Check bound…
highCVSSv3 7.1 - CVE-2026-46198
In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix integer overflow on buff_pos Fixing an integer over…
highCVSSv3 8.8 - CVE-2026-46197
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: validate SVM ioctl nattr against buffer size Validate n…
highCVSSv3 7.8 - CVE-2026-46196
In the Linux kernel, the following vulnerability has been resolved: tracepoint: balance regfunc() on func_add() failure in tracepoint_ad…
mediumCVSSv3 5.5 - CVE-2026-46195
In the Linux kernel, the following vulnerability has been resolved: smb: client: validate dacloffset before building DACL pointers pars…
criticalCVSSv3 9.8 - CVE-2026-46193
In the Linux kernel, the following vulnerability has been resolved: xfrm: ah: account for ESN high bits in async callbacks AH allocates…
mediumCVSSv3 5.5 - CVE-2026-46192
In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core-qspi: don't attempt to transmit during emulated…
—CVSSv3 0.0 - CVE-2026-46191
In the Linux kernel, the following vulnerability has been resolved: fbcon: Avoid OOB font access if console rotation fails Clear the fo…
highCVSSv3 7.7 - CVE-2026-46190
In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show…
highCVSSv3 7.1 - CVE-2026-46189
In the Linux kernel, the following vulnerability has been resolved: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error pa…
highCVSSv3 7.8 - CVE-2026-46188
In the Linux kernel, the following vulnerability has been resolved: octeon_ep_vf: add NULL check for napi_build_skb() napi_build_skb()…
—CVSSv3 0.0 - CVE-2026-46187
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix kthread lifetime race between self-exit and external-…
mediumCVSSv3 5.5 - CVE-2026-46186
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: virtio_bt: validate rx pkt_type header length virtbt_rx_…
mediumCVSSv3 5.5 - CVE-2026-46185
In the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in symlink_data() Since smb2_che…
criticalCVSSv3 9.1 - CVE-2026-46184
In the Linux kernel, the following vulnerability has been resolved: sound: ua101: fix division by zero at probe Add a missing sanity ch…
mediumCVSSv3 5.5 - CVE-2026-46183
In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: protect path kfree() with damon_sysfs_lock…
—CVSSv3 0.0 - CVE-2026-46182
In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace…
—CVSSv3 0.0 - CVE-2026-46181
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() Sashiko points ou…
highCVSSv3 7.8 - CVE-2026-46180
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential use-after-free issue when stopping wat…
mediumCVSSv3 5.5 - CVE-2026-46179
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Don't allow pointer operations on unconfigured streams W…
mediumCVSSv3 5.5 - CVE-2026-46178
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() Sashi…
highCVSSv3 7.8 - CVE-2026-46177
In the Linux kernel, the following vulnerability has been resolved: ipmi: Add limits to event and receive message requests The driver w…
highCVSSv3 7.5 - CVE-2026-46176
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()…
highCVSSv3 7.8 - CVE-2026-46175
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency caused by FGGC of node block During FG…
highCVSSv3 7.1 - CVE-2026-46174
In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2'…
highCVSSv3 8.8 - CVE-2026-46173
In the Linux kernel, the following vulnerability has been resolved: exit: prevent preemption of oopsing TASK_DEAD task When an already-…
highCVSSv3 7.8 - CVE-2026-46172
In the Linux kernel, the following vulnerability has been resolved: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() xfrm6_rcv_en…
mediumCVSSv3 5.5 - CVE-2026-46171
In the Linux kernel, the following vulnerability has been resolved: riscv: kvm: fix vector context allocation leak When the second kzal…
mediumCVSSv3 5.5 - CVE-2026-46170
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADD_ADDR rtx: free sk if last When an ADD_ADDR is retran…
mediumCVSSv3 5.5 - CVE-2026-46169
In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value by validating catalog record size Syzbot…
mediumCVSSv3 4.0 - CVE-2026-46168
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix scheduling with atomic in timestamp sockopt Using lock_s…
mediumCVSSv3 5.5 - CVE-2026-46167
In the Linux kernel, the following vulnerability has been resolved: usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl Just…
mediumCVSSv3 5.5 - CVE-2026-46166
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use safe list iteration in radar detect work The ca…
highCVSSv3 8.8 - CVE-2026-46165
In the Linux kernel, the following vulnerability has been resolved: openvswitch: vport: fix self-deadlock on release of tunnel ports vp…
mediumCVSSv3 5.5 - CVE-2026-46164
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free in create_space_info_sub_group() error path…
highCVSSv3 7.0 - CVE-2026-46163
In the Linux kernel, the following vulnerability has been resolved: wifi: b43legacy: enforce bounds check on firmware key index in RX pa…
mediumCVSSv3 5.5 - CVE-2026-46162
In the Linux kernel, the following vulnerability has been resolved: ice: fix double free in ice_sf_eth_activate() error path When auxil…
—CVSSv3 0.0 - CVE-2026-46161
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies s…
mediumCVSSv3 5.5 - CVE-2026-46160
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix missing last_unlink_trans update when removing a director…
mediumCVSSv3 6.1 - CVE-2026-46159
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead…
mediumCVSSv3 5.5 - CVE-2026-46158
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount When an ADD_AD…
mediumCVSSv3 5.5 - CVE-2026-46157
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger Curr…
highCVSSv3 7.8 - CVE-2026-46156
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang() The s…
mediumCVSSv3 5.5 - CVE-2026-46155
In the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in smb2_compound_op() If a serve…
criticalCVSSv3 9.1 - CVE-2026-46154
In the Linux kernel, the following vulnerability has been resolved: sched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup setter…
highCVSSv3 7.0 - CVE-2026-46153
In the Linux kernel, the following vulnerability has been resolved: 8021q: delete cleared egress QoS mappings vlan_dev_set_egress_prior…
mediumCVSSv3 5.5 - CVE-2026-46152
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop stray 'static' from fast-RX rx_result ieee8021…
highCVSSv3 8.8 - CVE-2026-46151
In the Linux kernel, the following vulnerability has been resolved: usb: usblp: fix heap leak in IEEE 1284 device ID via short response…
mediumCVSSv3 5.5 - CVE-2026-46150
In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotify_get_mark…
highCVSSv3 7.8 - CVE-2026-46149
In the Linux kernel, the following vulnerability has been resolved: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_…
highCVSSv3 7.1 - CVE-2026-46148
In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core-qspi: control built-in cs manually The coreQSPI…
mediumCVSSv3 5.5 - CVE-2026-46146
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()…
highCVSSv3 7.1 - CVE-2026-46145
In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Validate rx_hash_key_len Sashiko points out that rx_hash…
highCVSSv3 7.8 - CVE-2026-46144
In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() Sashiko poin…
mediumCVSSv3 5.5 - CVE-2026-46143
In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens As prepare ca…
mediumCVSSv3 4.0 - CVE-2026-46142
In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix VF illegal register access Register WX_CFG_PORT_ST…
mediumCVSSv3 5.5 - CVE-2026-46141
In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: fix kmemleak caused by incorrect chip_data lookup The…
mediumCVSSv3 5.5 - CVE-2026-46140
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: validate WMT event SKB length before struct access…
highCVSSv3 7.1 - CVE-2026-46139
In the Linux kernel, the following vulnerability has been resolved: smb: client: use kzalloc to zero-initialize security descriptor buff…
mediumCVSSv3 5.5 - CVE-2026-46138
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_creat…
highCVSSv3 8.1 - CVE-2026-46137
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADD_ADDR rtx: fix potential data-race This mptcp_pm_add_…
criticalCVSSv3 9.8 - CVE-2026-46136
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix a potential clc buffer length underflow The…
mediumCVSSv3 5.5 - CVE-2026-46135
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix race between ICReq handling and queue teardown nvmet…
criticalCVSSv3 9.8 - CVE-2026-46134
In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_typec: Init mutex in Thunderbolt registrati…
mediumCVSSv3 5.5 - CVE-2026-46133
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Reject unknown opcodes before ICRC processing Even after…
highCVSSv3 7.5 - CVE-2026-46132
In the Linux kernel, the following vulnerability has been resolved: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rt…
mediumCVSSv3 5.5 - CVE-2026-46131
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: check for nEPT/nNPT in slow flush hypercalls Checking is_…
mediumCVSSv3 5.5 - CVE-2026-46130
In the Linux kernel, the following vulnerability has been resolved: dm-verity-fec: fix reading parity bytes split across blocks (take 3)…
highCVSSv3 7.3 - CVE-2026-46129
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free in create_space_info() error path When kobje…
highCVSSv3 7.8 - CVE-2026-46128
In the Linux kernel, the following vulnerability has been resolved: ipmi: Check event message buffer response for bad data The event me…
mediumCVSSv3 5.5 - CVE-2026-46127
In the Linux kernel, the following vulnerability has been resolved: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp…
mediumCVSSv3 5.5 - CVE-2026-46126
In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rs…
mediumCVSSv3 5.5 - CVE-2026-46125
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: remove station if connection prep fails If connecti…
highCVSSv3 8.8 - CVE-2026-46124
In the Linux kernel, the following vulnerability has been resolved: isofs: validate block number from NFS file handle in isofs_export_ig…
highCVSSv3 7.5 - CVE-2026-46123
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: virtio_bt: clamp rx length before skb_put virtbt_rx_work…
highCVSSv3 7.7 - CVE-2026-46122
In the Linux kernel, the following vulnerability has been resolved: wifi: b43: enforce bounds check on firmware key index in b43_rx() T…
highCVSSv3 7.1 - CVE-2026-46121
In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_…
highCVSSv3 7.0 - CVE-2026-46120
In the Linux kernel, the following vulnerability has been resolved: ip6_gre: Use cached t->net in ip6erspan_changelink().
highCVSSv3 7.8 - CVE-2026-46119
In the Linux kernel, the following vulnerability has been resolved: libceph: Fix slab-out-of-bounds access in auth message processing I…
criticalCVSSv3 9.1 - CVE-2026-46118
In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Fix null ptr deref in papr_hvpipe_dev_create_ha…
mediumCVSSv3 5.5 - CVE-2026-46117
In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rs…
highCVSSv3 7.8 - CVE-2026-46116
In the Linux kernel, the following vulnerability has been resolved: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete KA…
highCVSSv3 7.8 - CVE-2026-46115
In the Linux kernel, the following vulnerability has been resolved: block: add pgmap check to biovec_phys_mergeable biovec_phys_mergeab…
criticalCVSSv3 9.8 - CVE-2026-46114
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads atomic_write_repl…
highCVSSv3 7.5 - CVE-2026-46113
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN Th…
highCVSSv3 8.8 - CVE-2026-46112
In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix unlocked call to hns_roce_qp_remove() Sashiko points…
highCVSSv3 7.8 - CVE-2026-46111
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: fix potential UAF in create_big_sync Add hci_c…
highCVSSv3 7.8 - CVE-2026-46110
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Prevent NULL deref when RX memory exhausted The CPU re…
highCVSSv3 7.5 - CVE-2026-46109
In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix memory leak on ulpi_register() error paths Commit 01…
mediumCVSSv3 5.5 - CVE-2026-46108
In the Linux kernel, the following vulnerability has been resolved: ipmi:si: Return state to normal if message allocation fails There w…
mediumCVSSv3 5.5 - CVE-2026-46107
In the Linux kernel, the following vulnerability has been resolved: dm-thin: fix metadata refcount underflow There's a bug in dm-thin i…
highCVSSv3 7.8 - CVE-2026-46106
In the Linux kernel, the following vulnerability has been resolved: eventfs: Hold eventfs_mutex and SRCU when remount walks events Comm…
mediumCVSSv3 5.5 - CVE-2026-46105
In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Limit NVMe request size to 2 MiB The HBA firmware re…
highCVSSv3 7.8 - CVE-2026-46104
In the Linux kernel, the following vulnerability has been resolved: selinux: use sk blob accessor in socket permission helpers SELinux…
mediumCVSSv3 5.5 - CVE-2026-45846
In the Linux kernel, the following vulnerability has been resolved: bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()…
mediumCVSSv3 5.5 - CVE-2026-45845
In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: fix NULL pointer dereference in class dump When…
mediumCVSSv3 5.5 - CVE-2026-45844
In the Linux kernel, the following vulnerability has been resolved: netfilter: arp_tables: fix IEEE1394 ARP payload parsing Weiming Shi…
mediumCVSSv3 5.5 - CVE-2026-45843
In the Linux kernel, the following vulnerability has been resolved: slip: bound decode() reads against the compressed packet length slh…
highCVSSv3 8.2 - CVE-2026-45842
In the Linux kernel, the following vulnerability has been resolved: slip: reject VJ receive packets on instances with no rstate array s…
mediumCVSSv3 5.5 - CVE-2026-45841
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO nf_o…
mediumCVSSv3 5.5 - CVE-2026-45840
In the Linux kernel, the following vulnerability has been resolved: openvswitch: cap upcall PID array size and pre-size vport replies T…
highCVSSv3 7.0 - CVE-2026-45839
In the Linux kernel, the following vulnerability has been resolved: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()…
highCVSSv3 7.8 - CVE-2026-45838
In the Linux kernel, the following vulnerability has been resolved: bpf: fix end-of-list detection in cgroup_storage_get_next_key() lis…
mediumCVSSv3 5.5 - CVE-2026-45837
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in arena_vm_close on fork arena_vm_open() o…
—CVSSv3 0.0 - CVE-2026-45836
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()…
mediumCVSSv3 5.5 - CVE-2026-45835
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb…
mediumCVSSv3 5.5 - CVE-2026-45834
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()…
mediumCVSSv3 5.5 - CVE-2026-43502
In the Linux kernel, the following vulnerability has been resolved: net/rds: handle zerocopy send cleanup before the message is queued…
highCVSSv3 7.8 - CVE-2026-43498
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Disallow re-exporting imported GEM objects Prevent re-e…
highCVSSv3 7.8 - CVE-2026-43497
In the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free…
highCVSSv3 7.8 - CVE-2026-43496
In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_…
mediumCVSSv3 5.5 - CVE-2026-43495
In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: validate port_count against message length in t7xx_…
highCVSSv3 8.8 - CVE-2026-43492
In the Linux kernel, the following vulnerability has been resolved: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() Y…
mediumCVSSv3 5.5 - CVE-2026-43490
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate inherited ACE SID length smb_inherit_dacl() walks t…
highCVSSv3 8.8 - CVE-2025-54518
Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instruct…
highCVSSv3 7.0 - CVE-2025-10263
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cort…
criticalCVSSv3 9.1