CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- linux, linux kernel +1 moreALSA: ctxfi: Limit PTP to a single page7.8 High
- linux, linux kernel +1 morevfio/xe: Reorganize the init to decouple migration from reset5.5 Medium
- linux, linux kernel +1 morearm64: mm: Handle invalid large leaf mappings correctly7.5 High
- linux, linux kernel +1 moremedia: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections5.5 Medium
- linux, linux kernel +1 moreocfs2: fix possible deadlock between unlink and dio_end_io_write7.5 High
- linux, linux kernel +1 moreocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY7.8 High
- linux, linux kernel +1 moreocfs2: handle invalid dinode in ocfs2_group_extend5.5 Medium
- linux, linux kernel +1 morePCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup5.5 Medium
- linux, linux kernel +1 morePCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown5.5 Medium
- linux, linux kernel +1 moreKVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU5.5 Medium
- linux, linux kernel +1 moreKVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock5.5 Medium
- linux, linux kernel +1 moreKVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish5.5 Medium
- linux, linux kernel +1 moreKVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION5.5 Medium
- linux, linux kernel +1 moremm: call ->free_folio() directly in folio_unmap_invalidate()9.8 Critical
- linux, linux kernel +1 moreKVM: x86: Use scratch field in MMIO fragment to hold small write values8.8 High
- linux, linux kernel +1 moreASoC: qcom: q6apm: move component registration to unmanaged version7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremm: blk-cgroup: fix use-after-free in cgwb_release_workfn()7.8 High
- linux, linux kernel +1 moremedia: vidtv: fix nfeeds state corruption on start_streaming failure5.5 Medium
- linux, linux kernel +1 moremedia: mediatek: vcodec: fix use-after-free in encoder release path7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremedia: em28xx: fix use-after-free in em28xx_v4l2_open()7.8 High
- linux, linux kernel +1 morehwmon: (powerz) Fix use-after-free on USB disconnect7.8 High
- linux, linux kernel +1 moreALSA: 6fire: fix use-after-free on disconnect7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebcache: fix cached_dev.sb_bio use-after-free and crash7.8 High
- linux, linux kernel +1 morewireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit5.5 Medium
- linux, linux kernel +1 moremedia: as102: fix to not free memory after the device is registered in as102_usb_probe()7.8 High
- linux, linux kernel +1 morenilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map5.5 Medium
- linux, linux kernel +1 moremedia: hackrf: fix to not free memory after the device is registered in hackrf_probe()7.8 High
- linux, linux kernel +1 moremm/userfaultfd: fix hugetlb fault mutex hash calculation5.5 Medium
- linux, linux kernel +1 moreclockevents: Add missing resets of the next_event_forced flag5.5 Medium
- linux, linux kernel +1 moremedia: verisilicon: Fix kernel panic due to __initconst misuse5.5 Medium
- linux, linux kernel +1 morei2c: designware: amdisp: Fix resume-probe race condition issue4.7 Medium
- linux, linux kernel +1 moredrm/i915: Unlink NV12 planes earlier5.5 Medium
- linux, linux kernel +1 morecan: gw: fix OOB heap access in cgw_csum_crc8_rel()8.8 High
- linux, linux kernel +1 moreLoongArch: KVM: Handle the case that EIOINTC's coremap is empty7.3 High
- linux, linux kernel +1 mores390/mm: Add missing secure storage access fixups for donated memory7.1 High
- linux, linux kernel +1 morePM: sleep: Drop spurious WARN_ON() from pm_restore_gfp_mask()5.5 Medium
- linux, linux kernel +1 moredrm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreRDMA/irdma: Fix deadlock during netdev reset with active connections5.5 Medium
- linux, linux kernel +1 moreLoongArch: KVM: Fix base address calculation in kvm_eiointc_regs_access()5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: macb: Use dev_consume_skb_any() to free TX SKBs7.5 High
- linux, linux kernel +1 moredrm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register5.5 Medium
- linux, linux kernel +1 morex86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask5.5 Medium
- linux, linux kernel +1 morespi: spi-dw-dma: fix print error log when wait finish transaction5.5 Medium
- linux, linux kernel +1 moreLoongArch: Fix missing NULL checks for kstrdup()5.5 Medium
- linux, linux kernel +1 moreLoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust8.8 High
- linux, linux kernel +1 morenvmet: move async event work off nvmet-wq7.5 High
- linux, linux kernel +1 morexfs: scrub: unlock dquot before early return in quota scrub5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morefutex: Clear stale exiting pointer in futex_lock_pi() retry path5.5 Medium
- linux, linux kernel +1 morefutex: Require sys_futex_requeue() to have identical flags7.8 High
- linux, linux kernel +1 moreKVM: arm64: Fix the descriptor address in __kvm_at_swap_desc()8.8 High
- Show moreLoading…