CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- linux, linux kernel +1 moreRDMA/core: Validate the passed in fops for ib_get_ucaps()8.8 High
- linux, linux kernel +1 moreRDMA/core: Validate cpu_id against nr_cpu_ids in DMAH alloc7.1 High
- linux, linux kernel +1 moreRDMA/srp: bound SRP_RSP sense copy by the received length9.1 Critical
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morezram: fix use-after-free in zram_bvec_write_partial()7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreudp: clear skb->dev before running a sockmap verdict7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremptcp: allow subflow rcv wnd to shrink7.5 High
- linux, linux kernel +1 morewifi: nl80211: reject oversized EMA RNR lists7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morevsock/vmci: fix sk_ack_backlog leak on failed handshake5.5 Medium
- linux, linux kernel +1 moretimers/migration: Fix livelock in tmigr_handle_remote_up()7.5 High
- linux, linux kernel +1 morestaging: rtl8723bs: fix buffer over-read in rtw_update_protection7.1 High
- linux, linux kernel +1 morestaging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction8.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebnxt_en: Fix NULL pointer dereference5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreIB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreinet: frags: fix use-after-free caused by the fqdir_pre_exit() flush9.8 Critical
- linux, linux kernel +1 moreovl: keep err zero after successful ovl_cache_get()7.8 High
- linux, linux kernel +1 moreaccel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validate()7.8 High
- linux, linux kernel +1 moreaccel/ethosu: fix IFM region index out-of-bounds in command stream parser7.8 High
- linux, linux kernel +1 moreaccel/ethosu: fix arithmetic issues in dma_length()8.8 High
- linux, linux kernel +1 moreaccel/ethosu: reject DMA commands with uninitialized length8.8 High
- linux, linux kernel +1 moreaccel/ethosu: reject NPU_OP_RESIZE commands from userspace5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morefuse: reject fuse_notify() pagecache ops on directories5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morefuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios5.5 Medium
- linux, linux kernel +1 moreiomap: avoid potential null folio->mapping deref during error reporting7.5 High
- linux, linux kernel +1 moreiommu/dma: Do not try to iommu_map a 0 length region in swiotlb5.5 Medium
- linux, linux kernel +1 morelocking/rtmutex: Skip remove_waiter() when waiter is not enqueued5.5 Medium
- linux, linux kernel +1 morememcg: use round-robin victim selection in refill_stock7.8 High
- linux, linux kernel +1 moremisc: fastrpc: fix use-after-free of fastrpc_user in workqueue context7.8 High
- linux, linux kernel +1 moremisc: fastrpc: fix use-after-free race in fastrpc_map_create7.8 High
- linux, linux kernel +1 moremisc: fastrpc: fix DMA address corruption due to find_vma misuse8.8 High
- linux, linux kernel +1 moremisc: fastrpc: Fix NULL pointer dereference in rpmsg callback5.5 Medium
- linux, linux kernel +1 morenet: phonet: free phonet_device after RCU grace period7.8 High
- linux, linux kernel +1 morenvmem: core: fix use-after-free bugs in error paths7.8 High
- linux, linux kernel +1 moremm/huge_memory: use correct flags for device private PMD entry5.5 Medium
- linux, linux kernel +1 moremm/hugetlb: restore reservation on error in hugetlb folio copy paths5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moremm/list_lru: drain before clearing xarray entry on reparent7.8 High
- linux, linux kernel +1 moremmc: dw_mmc-rockchip: Add missing private data for very old controllers5.5 Medium
- linux, linux kernel +1 morerxrpc: Fix the ACK parser to extract the SACK table for parsing9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morethunderbolt: Reject zero-length property entries in validator5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morethunderbolt: Bound root directory content to block size7.1 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 morethunderbolt: Clamp XDomain response data copy to allocation size7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morethunderbolt: Validate XDomain request packet size before type cast8.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morethunderbolt: Limit XDomain response copy to actual frame size7.1 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moredrm/gem: Try to fix change_handle ioctl, attempt 47.8 High
- linux, linux kernel +1 moredrm/amdkfd: fix NULL dereference in get_queue_ids()5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moredrm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX117.8 High
- linux, linux kernel +1 moredrm/xe/display: fix oops in suspend/shutdown without display5.5 Medium
- linux, linux kernel +1 moredrm/v3d: Fix global performance monitor reference counting5.5 Medium
- linux, linux kernel +1 moredrm/v3d: Fix vaddr leak when indirect CSD has zeroed workgroups5.5 Medium
- linux, linux kernel +1 moredrm/v3d: Skip CSD when it has zeroed workgroups5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Bound VBIOS record-chain walk loops7.1 High
- Show moreLoading…