CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- linuxs390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing7.8 High
- linuxs390/zcrypt: Pad trailing CCA or EP11 message with zerosNo score
- linuxdrm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank()6.8 Medium
- linuxdrm/amdgpu: validate GEM_CREATE domain combinations7.8 High
- linuxdrm/amdgpu: Fix UVD decode image min size calculation7.8 High
- linuxdrm/amdgpu: disallow multiple FENCE chunks in one submit6.8 Medium
- linuxxfs: propagate errors from xfs_rtginode_load7.1 High
- linuxxfs: fix off-by-one in rtrefcount btree root level validation7.8 High
- linuxxfs: bounds-check buffer log item's dirty bitmap8.4 High
- linuxxfs: don't double-lock when deleting a self-referential directoryNo score
- linuxxfs: fix ilock leak on error in xfs_dq_get_next_id7.0 High
- linuxxfs: don't walk off the end of a null sc->sa.agi_bp in AGI repairNo score
- linuxxfs: fix another iunlink infinite loop bug in online fsck7.1 High
- linuxxfs: avoid UAF on sc->tempip in xrep_tempfile_create7.8 High
- linuxxfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN7.1 High
- linuxxfs: don't swallow dquot recovery verification errors5.3 Medium
- linuxceph: avoid fs reclaim while using current->journal_info9.8 Critical
- linuxceph: fix hanging __ceph_get_caps() with stale mds_wanted7.5 High
- linuxASoC: tas2562: Validate values for volume writes7.8 High
- linuxASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup2.0 Low
- linuxoptee: ffa: Add NULL check in optee_ffa_lend_protmemNo score
- linuxclk: spacemit: k3: set hdma clock as critical7.1 High
- linuxcrypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()7.8 High
- linuxaf_unix: Unlink scc_entry in unix_del_edge().7.8 High
- linuxovpn: fix NULL dereference when killing missing key7.5 High
- linuxovpn: finish crypto callback cleanup before peer release9.8 Critical
- linuxscsi: core: pair EH runtime PM get and putNo score
- linuxperf: Reject exited events as group leaders7.8 High
- linuxsctp: validate cookie AUTH state before use9.8 Critical
- linuxriscv: lib: Fix ZBB strnlen reading past count boundary9.4 Critical
- linuxovpn: defer key slot crypto freeing to workqueue7.5 High
- linuxrseq: Prevent hard lockup on granted time slice extension5.7 Medium
- linuxnetfilter: ipset: fix refcount race between list:set GC and swap7.8 High
- linuxipvs: revalidate ihl to prevent out-of-bounds access7.8 High
- linuxnetfilter: flowtable: publish GC-visible tuple last9.8 Critical
- linuxeth: bnxt: avoid deadlock when canceling IRQ affinity notifier7.5 High
- linuxipvlan: inherit needed_headroom and needed_tailroom from phy_dev9.8 Critical
- linuxmacvlan: inherit needed_headroom and needed_tailroom from lowerdev9.8 Critical
- linuxveth: fix queue index used to wake the peer txq in veth_poll7.5 High
- linuxnet: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling7.5 High
- linuxnet/sched: act_api: fix TOCTOU NULL deref on a->goto_chain5.7 Medium
- linuxnet/sched: cls_u32: skip hash tables in u32_bind_class()7.8 High
- linuxregmap: sdw-mbq: don't call an unset readable_reg callback5.7 Medium
- linuxnet: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG9.8 Critical
- linuxnet/sched: cls_bpf: reject dev-bound programs bound to a different device7.8 High
- linuxl2tp: fix tunnel and session refcount leak on seq_file release6.8 Medium
- linuxfirewire: ohci: fix NULL pointer dereference in ar_context_release5.1 Medium
pantheon-agentsPyPITrojanized pantheon-agents 0.6.1 and 0.6.2 on PyPI ship a credential stealer (supply-chain account compromise)No score- dahlia logtape@logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys8.6 High
- izpackIzPack: Path Traversal in UnpackerBase allows writing files outside the installation directory via malicious pack entries7.4 High
- Show moreLoading…