CVEs published in January 2026
4,393 vulnerabilities, 438 critical, 16 exploited.
- linux, linux kernel +1 morenfsd: fix nfsd_file reference leak in nfsd4_add_rdaccess_to_wrdeleg()7.5 High
- linux, linux kernel +1 moreiommu: disable SVA when CONFIG_X86 is set7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremptcp: fallback earlier on simult connection5.5 Medium
- linux, linux kernel +1 moreiavf: fix off-by-one issues in iavf_config_rss_reg()5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: rose: fix invalid array index in rose_kill_by_device()7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()7.5 High
- linux, linux kernel +1 moreRDMA/cm: Fix leaking the multicast GID table reference5.5 Medium
- linux, linux kernel +1 moredrm/ttm: Avoid NULL pointer deref for evicted BOs5.5 Medium
- linux, linux kernel +1 moreBluetooth: btusb: revert use of devm_kzalloc in btusb7.8 High
- linux, linux kernel +1 moreASoC: stm32: sai: fix OF node leak on probe5.5 Medium
- linux, linux kernel +1 moreipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write5.5 Medium
- linux, linux kernel +1 morepowerpc/64s/slb: Fix SLB multihit issue during SLB preload7.8 High
- linux, linux kernel +1 moretpm: Cap the number of PCR banks5.5 Medium
- linux, linux kernel +1 moredrm/xe/oa: Limit num_syncs to prevent oversized allocations5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morescsi: aic94xx: fix use-after-free in device removal path7.8 High
- linux, linux kernel +1 morefunctionfs: fix the open/removal races7.8 High
- linux, linux kernel +1 moreInput: lkkbd - disable pending work before freeing device7.8 High
- linux, linux kernel +1 moreshmem: fix recovery on rename failures8.2 High
- linux, linux kernel +1 moreiommu/mediatek: fix use-after-free on probe deferral7.8 High
- linuxublk: clean up user copy references on ublk server exit7.8 High
- linuxf2fs: invalidate dentry cache on failed whiteout creation5.3 Medium
- linux, linux kernel +1 moresvcrdma: bound check rq_pages index in inline path9.8 Critical
- linuxntfs: set dummy blocksize to read boot_block when mounting9.8 Critical
- linuxnet/sched: ets: Always remove class from active list before deleting in ets_qdisc_change7.8 High
- linuxf2fs: fix to avoid potential deadlock6.0 Medium
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morenet: hns3: using the num_tqps in the vf driver to apply for resources8.8 High
- linux, linux kernel +1 moreublk: fix deadlock when reading partition table5.5 Medium
- linuxInput: alps - fix use-after-free bugs caused by dev3_register_work7.8 High
- linuxfuse: fix readahead reclaim deadlock7.8 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreext4: xattr: fix null pointer deref in ext4_raw_inode()7.1 High
- linuxmedia: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()7.8 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morescsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"8.8 High
- linux, linux kernel +1 moreksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency9.8 Critical
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morenet/mlx5: fw_tracer, Validate format string parameters7.0 High
- linuxnet/sched: ets: Remove drr class from the active list if it changes to strict7.8 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreio_uring: fix filename leak in __io_openat_prep()6.8 Medium
- linuxipvs: fix ipv4 null-ptr-deref in route error path6.8 Medium
- linuxsvcrdma: use rc_pageoff for memcpy byte offset9.8 Critical
- linuxKVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot7.8 High
- linuxksmbd: vfs: fix race on m_flags in vfs_cache9.1 Critical
- linuxmedia: vidtv: initialize local pointers upon transfer of memory ownership7.8 High
- linuxblock: fix race between wbt_enable_default and IO submissionNo score
- linuxksmbd: fix buffer validation by including null terminator size in EA length7.5 High
- linuxfuse: fix io-uring list corruption for terminated non-committed requests7.8 High
- linuxplatform/chrome: cros_ec_ishtp: Fix UAF after unbinding driverNo score
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreNFSD: NFSv4 file creation neglects setting ACL8.0 High
- linuxdrm/xe: Limit num_syncs to prevent oversized allocations6.8 Medium
- linuxmlxsw: spectrum_router: Fix neighbour use-after-free7.8 High
- linuxmlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats7.8 High
- Show moreLoading…