CVEs published in July 2026
10,022 vulnerabilities, 1,307 critical, 23 exploited.
- linux, linux kernel +1 morefs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns7.8 High
- linux, linux kernel +1 morentfs: avoid calling post_write_mst_fixup() for invalid index_block7.8 High
- linux, linux kernel +1 moreNTB: epf: Avoid calling pci_irq_vector() from hardirq context7.5 High
- linux, linux kernel +1 moregpio: eic-sprd: use raw_spinlock_t in the irq startup path5.5 Medium
- linux, linux kernel +1 moregpio: sch: use raw_spinlock_t in the irq startup path5.5 Medium
- linux, linux kernel +1 moreHID: logitech-dj: Fix maxfield check in DJ short report validation5.5 Medium
- linux, linux kernel +1 moreio_uring/nop: fix file reference leak with IOSQE_FIXED_FILE5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreio_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item5.5 Medium
- linux, linux kernel +1 morenetpoll: fix a use-after-free on shutdown path7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv4: igmp: remove multicast group from hash table on device destruction7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: ipv4: bound TCP reordering sysctl writes and MTU probe sizes7.1 High
- linux, linux kernel +1 moremedia: nxp: imx8-isi: Fix use-after-free on remove7.8 High
- linux, linux kernel +1 moremfd: cros_ec: Delay dev_set_drvdata() until probe success7.0 High
- linux, linux kernel +1 moremm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()5.5 Medium
- linux, linux kernel +1 moremm: shrinker: fix shrinker_info teardown race with expansion7.8 High
- linux, linux kernel +1 moremm: shrinker: fix NULL pointer dereference in debugfs5.5 Medium
- linux, linux kernel +1 moremm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host5.5 Medium
- linux, linux kernel +1 moremm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup5.5 Medium
- linux, linux kernel +1 morenetfilter: handle unreadable frags7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ebtables: zero chainstack array7.0 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ebtables: module names must be null-terminated7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ebtables: terminate table name before find_table_lock()7.1 High
- linux, linux kernel +1 morenetfilter: flowtable: IPIP tunnel hardware offload is not yet support9.8 Critical
- linux, linux kernel +1 moreBluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()5.5 Medium
- linux, linux kernel +1 moreBluetooth: bnep: pin L2CAP connection during netdev registration8.8 High
- linux, linux kernel +1 moreBluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()7.1 High
- linux, linux kernel +1 moreBluetooth: fix UAF in bt_accept_dequeue()8.0 High
- linux, linux kernel +1 moreBluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()5.5 Medium
- linux, linux kernel +1 moreBluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()5.5 Medium
- linux, linux kernel +1 moreBluetooth: L2CAP: validate option length before reading conf opt value7.1 High
- linux, linux kernel +1 morecoresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()7.8 High
- linux, linux kernel +1 moresmb: client: resolve SWN tcon from live registrations7.8 High
- linux, linux kernel +1 moreksmbd: prevent path traversal bypass by restricting caseless retry8.6 High
- linux, linux kernel +1 moreksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE9.8 Critical
- linux, linux kernel +1 moreksmbd: add a permission check for FSCTL_SET_ZERO_DATA8.1 High
- linux, linux kernel +1 moreksmbd: serialize QUERY_DIRECTORY requests per file9.8 Critical
- linux, linux kernel +1 moreksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation8.8 High
- linux, linux kernel +1 moreksmbd: require source read access for duplicate extents7.5 High
- linux, linux kernel +1 moreksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY8.8 High
- linux, linux kernel +1 moreksmbd: run set info with opener credentials9.1 Critical
- linux, linux kernel +1 moreksmbd: use opener credentials for delete-on-close9.1 Critical
- linux, linux kernel +1 moreksmbd: use opener credentials for ADS I/O9.8 Critical
- linux, linux kernel +1 moreksmbd: track the connection owning a byte-range lock8.8 High
- linux, linux kernel +1 moreksmbd: validate NTLMv2 response before updating session key8.2 High
- linux, linux kernel +1 moresmb/client: fix chown/chgrp with SMB3 POSIX Extensions7.8 High
- linux, linux kernel +1 moresmb: client: fix query directory replay double-free9.8 Critical
- linux, linux kernel +1 moresmb: client: fix query_info() replay double-free9.8 Critical
- linux, linux kernel +1 moresmb: client: fix double-free in SMB2_ioctl() replay9.8 Critical
- linux, linux kernel +1 moresmb: client: fix change notify replay double-free9.8 Critical
- linux, linux kernel +1 moresmb: client: fix double-free in SMB2_flush() replay9.8 Critical
- Show moreLoading…