CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- linuxnet/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload lengthNo score
- linuxnet: prestera: validate firmware header lengthNo score
- linuxnet/smc: fix TOCTOU race between smc_listen_out() and listener close7.5 High
- linuxnet: thunderbolt: Tear down DMA paths before stopping the rings8.8 High
- linuxs390/ism: Fix UAF of sba and ieq during ism_dev_exit()8.4 High
- linuxnet/atm: fix slab-out-of-bounds read in vcc_setsockopt()7.1 High
- linuxsctp: clear control chunk transport if it is being removed9.8 Critical
- linuxwatchdog: at91sam9_wdt: prevent timer rearm during teardown7.8 High
- linuxrqspinlock: Reset tail when preserving queue on deadlockNo score
- linuxhwmon: (ltc4282) Clamp negative current limitsNo score
- linuxnet: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()7.1 High
- linuxInput: evdev - sanitize event type index when fetching event masks1.8 Low
- linuxALSA: usb-audio: fix OOB write on Type II inbound URBs7.0 High
- linuxusb: misc: usbio: check ibuf_len against rxbuf_len in bulk msgNo score
- linuxusb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()2.4 Low
- linuxusb: gadget: f_ncm: Use unsigned int for ndp_index5.1 Medium
- linuxnet: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()7.5 High
- linuxnet: usb: ipheth: fix carrier_work UAF on disconnect7.0 High
- linuxvt: add permission check for KDSKBMETA ioctl4.6 Medium
- linuxvt: stabilize tty reference in kbd_keycode with tty_port_tty_get7.8 High
- linuxmm: fix incorrect flush address in direct page table reclaim7.8 High
- linuxInput: evdev - fix information leak in evdev_pass_values()4.6 Medium
- linuxmm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAFNo score
- linuxima: fix out-of-bounds read in xattr_verify()5.3 Medium
- linuxipvs: stop estimator after disabled calc phase7.8 High
- linuxipvs: clear IPv4 options after rebasing tunnel ICMP errors9.8 Critical
- linuxpacket: use consistent hard_header_len in TX_RING send path7.8 High
- linuxnet/packet: reset the MAC header on the packet-socket transmit path7.8 High
- linuxpacket: synchronize pressure clearing with ring reconfiguration7.8 High
- linuxnet: fix skb length accounting after generic XDP frag adjustment9.1 Critical
- linuxnet: openvswitch: reallocate update replies for mismatched IDs6.8 Medium
- linuxnet/sched: reject overly deep qdisc hierarchies7.8 High
- linuxinet: frags: publish queues before arming timer9.8 Critical
- linuxmac802154: fix netdev use-after-free in beacon worker7.8 High
- linuxnetfilter: ebt_nflog: pin the NFLOG backend7.8 High
- linuxnet: bridge: mrp: fix uninitialised bytes on the wire4.8 Medium
- linuxfutex: Prevent robust futex exit race some more5.7 Medium
- linuxipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops4.8 Medium
- linuxipv4: fix use-after-free in fib_nhc_update_mtu()7.8 High
- linuxserial: qcom-geni: fix TX DMA buffer flush8.8 High
- linuxserial: 8250_dma: Clear stale RX state on shutdown5.6 Medium
- linuxserial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xxNo score
- linuxserial: amba-pl011: cancel RS485 hrtimers after freeing IRQ7.8 High
- linuxstaging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()8.1 High
- linuxstaging: rtl8723bs: fix OOB read in WMM_param_handler()5.3 Medium
- linuxstaging: rtl8723bs: fix missing shared-key auth challenge length check8.8 High
- linuxstaging: rtl8723bs: validate monitor transmit frame lengths7.8 High
- linuxmisc: fastrpc: Remove buffer from list prior to unmap operation7.8 High
- linuxmisc: fastrpc: take fl->lock when moving mmaps on interrupted invoke7.8 High
- linuxmm/damon/lru_sort: error out for >10000 active_mem_bpNo score
- Show moreLoading…