CVEs published in July 2026
10,022 vulnerabilities, 1,307 critical, 23 exploited.
- linux, linux kernel +1 moreUSB: ulpi: fix memory leak on registration failure5.5 Medium
- linux, linux kernel +1 moreusbip: vudc: fix NULL deref in vep_dequeue()5.5 Medium
- linux, linux kernel +1 moreusb: typec: tcpm: Validate SVID index in svdm_consume_modes()7.8 High
- linux, linux kernel +1 moreusb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove7.8 High
- linux, linux kernel +1 moreusb: gadget: f_fs: Fix DMA fence leak5.5 Medium
- linux, linux kernel +1 moreusb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks5.5 Medium
- linux, linux kernel +1 moreblock: skip sync_blockdev() on surprise removal in bdev_mark_dead()5.5 Medium
- linux, linux kernel +1 morewifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon5.5 Medium
- linux, linux kernel +1 moreudf: validate free block extents against the partition length7.8 High
- linux, linux kernel +1 moreudf: validate VAT header length against the VAT inode size7.1 High
- linux, linux kernel +1 moreudf: validate sparing table length as an entry count, not a byte count7.8 High
- linux, linux kernel +1 morenvme: target: rdma: fix ndev refcount leak on queue connect5.5 Medium
- linux, linux kernel +1 morenvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page9.1 Critical
- linux, linux kernel +1 morenvmet-auth: validate reply message payload bounds against transfer length9.1 Critical
- linux, linux kernel +1 morepartitions: aix: bound the pp_count scan to the ppe array7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreisofs: bound Rock Ridge symlink components to the SL record7.1 High
- linux, linux kernel +1 morecrypto: caam - use print_hex_dump_devel to guard key hex dumps5.5 Medium
- linux, linux kernel +1 morecrypto: caam - use print_hex_dump_devel to guard key hex dumps7.0 High
- linux, linux kernel +1 morecrypto: chacha20poly1305 - validate poly1305 template argument5.5 Medium
- linux, linux kernel +1 morecrypto: ecc - Fix carry overflow in vli multiplication8.8 High
- linux, linux kernel +1 morecrypto: pcrypt - restore callback for non-parallel fallback7.5 High
- linux, linux kernel +1 morecrypto: loongson - Remove broken and unused loongson-rng7.8 High
- linux, linux kernel +1 morecrypto: ccp - Do not initialize SNP for SEV ioctls5.5 Medium
- linux, linux kernel +1 morecrypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)5.5 Medium
- linux, linux kernel +1 morecrypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)5.5 Medium
- linux, linux kernel +1 morecrypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)5.5 Medium
- linux, linux kernel +1 morecrypto: drbg - Fix returning success on failure in CTR_DRBG5.5 Medium
- linux, linux kernel +1 morecrypto: qat - protect service table iterations with service_lock7.8 High
- linux, linux kernel +1 morecrypto: qat - validate RSA CRT component lengths7.8 High
- linux, linux kernel +1 morespi: fsl-lpspi: terminate the RX channel on TX prepare failure path9.8 Critical
- linux, linux kernel +1 morex86/mm: Fix freeing of PMD-sized vmemmap pages5.5 Medium
- linux, linux kernel +1 moreregulator: scmi: fix of_node refcount leak in scmi_regulator_probe()5.5 Medium
- linux, linux kernel +1 moreperf/aux: Fix page UAF in map_range()7.8 High
- linux, linux kernel +1 moretracing: Prevent out-of-bounds read in glob matching7.1 High
- linux, linux kernel +1 moreNFSv4: include MAY_WRITE in open permission mask for O_TRUNC7.1 High
- linux, linux kernel +1 moremodule: decompress: check return value of module_extend_max_pages()5.5 Medium
- linux, linux kernel +1 moreexfat: bound uniname advance in exfat_find_dir_entry()7.8 High
- linux, linux kernel +1 moremm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access5.5 Medium
- linux, linux kernel +1 moremm: do file ownership checks with the proper mount idmap5.5 Medium
- linux, linux kernel +1 moreiommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read7.8 High
- linux, linux kernel +1 moreiommufd: Move vevent memory allocation outside spinlock5.5 Medium
- linux, linux kernel +1 moreiommufd: Set veventq_depth upper bound5.5 Medium
- linux, linux kernel +1 moreiommufd: Break the loop on failure in iommufd_fault_fops_read()5.5 Medium
- linux, linux kernel +1 moreiommufd: Set upper bounds on cache invalidation entry_num and entry_len5.5 Medium
- linux, linux kernel +1 moreKVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB5.5 Medium
- linux, linux kernel +1 moreKVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU8.2 High
- linux, linux kernel +1 moreKVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU8.2 High
- linux, linux kernel +1 moreKVM: SEV: Pin source page for write when adding CPUID data for SNP guest5.5 Medium
- linux, linux kernel +1 moreKVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits7.1 High
- linux, linux kernel +1 moreKVM: guest_memfd: Treat memslot binding offset+size as unsigned values7.0 High
- Show moreLoading…