CVEs published in July 2026
10,022 vulnerabilities, 1,307 critical, 23 exploited.
- linux, linux kernel +1 moresmb: client: fix double-free in SMB2_open() replay8.8 High
- linux, linux kernel +1 moresmb: client: Fix next buffer leak in receive_encrypted_standard()7.8 High
- linux, linux kernel +1 moresmb: client: harden POSIX SID length parsing8.2 High
- linux, linux kernel +1 moresmb: client: mask server-provided mode to 07777 in modefromsid7.1 High
- linux, linux kernel +1 morewriteback: fix race between cgroup_writeback_umount() and inode_switch_wbs()7.8 High
- linux, linux kernel +1 morecpufreq: qcom-cpufreq-hw: Fix possible double free7.8 High
- linux, linux kernel +1 morefirmware_loader: fix device reference leak in firmware_upload_register()5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreproc: protect ptrace_may_access() with exec_update_lock (FD links)7.8 High
- linux, linux kernel +1 moresched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT7.5 High
- linux, linux kernel +1 morecpufreq: Fix hotplug-suspend race during reboot4.7 Medium
- linux, linux kernel +1 morecpufreq: pcc: fix use-after-free and double free in _OSC evaluation7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreproc: protect ptrace_may_access() with exec_update_lock (part 1)5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreposix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path5.5 Medium
- linux, linux kernel +1 mores390: Revert support for DCACHE_WORD_ACCESS5.5 Medium
- linux, linux kernel +1 moremm/slab: do not limit zeroing to orig_size when only red zoning is enabled8.1 High
- linux, linux kernel +1 moreHID: hid-goodix-spi: validate report size to prevent stack buffer overflow7.8 High
- linux, linux kernel +1 moreHID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert8.8 High
- linux, linux kernel +1 moreHID: letsketch: fix UAF on inrange_timer at driver unbind7.8 High
- linux, linux kernel +1 moreHID: multitouch: fix out-of-bounds bit access on mt_io_flags8.8 High
- linux, linux kernel +1 moreHID: appleir: fix UAF on pending key_up_timer in remove()7.8 High
- linux, linux kernel +1 moreHID: lg-g15: cancel pending work on remove to fix a use-after-free7.8 High
- linux, linux kernel +1 morehfs/hfsplus: fix u32 overflow in check_and_correct_requested_length7.8 High
- linux, linux kernel +1 morehfs/hfsplus: zero-initialize buffer in hfs_bnode_read5.5 Medium
- linux, linux kernel +1 morenilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers5.5 Medium
- linux, linux kernel +1 moremedia: mtk-jpeg: cancel workqueue on release for supported platforms only5.5 Medium
- linux, linux kernel +1 morexfs: fix exchmaps reservation limit check5.5 Medium
- linux, linux kernel +1 morexfs: fix memory leak in xfs_dqinode_metadir_create()5.5 Medium
- linux, linux kernel +1 morebpf: Reject fragmented frames in devmap9.8 Critical
- linux, linux kernel +1 morebpf: Validate BTF repeated field counts before expansion7.8 High
- linux, linux kernel +1 morebpf: Keep dynamic inner array lookups nullable5.5 Medium
- linux, linux kernel +1 morebpf: Allow LPM map access from sleepable BPF programs7.8 High
- linux, linux kernel +1 morenet: usb: kalmia: bound RX frame length in kalmia_rx_fixup()5.5 Medium
- linux, linux kernel +1 moreusb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()5.5 Medium
- linux, linux kernel +1 moreusb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup()5.5 Medium
- linux, linux kernel +1 moreusb: free iso schedules on failed submit7.8 High
- linux, linux kernel +1 moreusb: gadget: composite: fix dead empty check in the USB_DT_OTG handler5.5 Medium
- linux, linux kernel +1 moreusb: gadget: udc: Fix use-after-free in gadget_match_driver7.8 High
- linux, linux kernel +1 moreusb: gadget: f_printer: take kref only for successful open5.5 Medium
- linux, linux kernel +1 moreUSB: idmouse: fix use-after-free on disconnect race7.8 High
- linux, linux kernel +1 moreUSB: ldusb: fix use-after-free on disconnect race7.8 High
- linux, linux kernel +1 moreUSB: iowarrior: fix use-after-free on disconnect7.8 High
- linux, linux kernel +1 moreUSB: iowarrior: fix use-after-free on disconnect race7.8 High
- linux, linux kernel +1 moreUSB: legousbtower: fix use-after-free on disconnect race7.8 High
- linux, linux kernel +1 moreusb: misc: usbio: bound bulk IN response length to the received transfer7.1 High
- linux, linux kernel +1 moreUSB: misc: uss720: unregister parport on probe failure5.5 Medium
- linux, linux kernel +1 moreusb: mtu3: unmap request DMA on queue failure5.5 Medium
- linux, linux kernel +1 moreUSB: serial: keyspan_pda: fix information leak5.5 Medium
- linux, linux kernel +1 moreUSB: serial: digi_acceleport: fix broken rx after throttle5.5 Medium
- linux, linux kernel +1 moreUSB: serial: digi_acceleport: fix hard lockup on disconnect5.5 Medium
- linux, linux kernel +1 moreUSB: serial: digi_acceleport: fix write buffer corruption7.8 High
- Show moreLoading…