CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- linuxwifi: mt76: mt7996: Fix NULL pointer dereference in mt7996_init_tx_queues()No score
- linuxbtrfs: lzo: reject compressed segment that overflows the compressed input7.5 High
- linuxnet/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen9.8 Critical
- linuxocteontx2-af: npc: Fix size of entry2cntr_mapNo score
- linuxALSA: seq: oss: Serialize readq reset state with q->lock7.8 High
- linuxMIPS: mm: Fix out-of-bounds write in maar_res_walk()No score
- linuxpowerpc/perf: fix preempt count underflow in fsl_emb_pmu_del5.7 Medium
- linuxRDMA/hns: Fix memory leak of bonding resourcesNo score
- linuxmfd: cs42l43: Sanity check firmware sizeNo score
- linuxcoresight: ete: Always save state on power down2.0 Low
- linuxchar: tlclk: fix use-after-free in tlclk_cleanup()7.8 High
- linuxPCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference when no RAS DES capabilityNo score
- linuxRevert "PCI/MSI: Unmap MSI-X region on error"No score
- linuxapparmor: fix potential UAF in aa_replace_profiles7.8 High
- linuxdrm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free4.8 Medium
- linuxnet: airoha: fix foe_check_time allocation size9.8 Critical
- linuxieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns()1.8 Low
- linuxnet: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone8.2 High
- linuxnet: emac: Fix NULL pointer dereference in emac_probe7.5 High
- linuxveth: fix NAPI leak in XDP enable error path7.8 High
- linuxnet: lwtunnel: Drop skb metadata before LWT encapsulation9.8 Critical
- linuxACPI: processor_idle: Mark LPI enter functions as __cpuidle10.0 Critical
- linuxnet: enetc: fix potential divide-by-zero when num_vsi is zeroNo score
- linuxqede: fix out-of-bounds check for cqe->len_list[]9.8 Critical
- linuxaccel/amdxdna: Fix iommu domain lifetime race during device removal8.8 High
- linuxtracing/probes: Remove WARN_ON_ONCE from parse_btf_arg10.0 Critical
- linuxdrm/xe/userptr: Hold notifier_lock for write on inject test path7.8 High
- linuxHID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()4.1 Medium
- linuxHID: core: Fix OOB read in hid_get_report for numbered reports8.8 High
- linuxnetfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read9.1 Critical
- linuxperf/x86/amd/lbr: Fix kernel address leakage4.8 Medium
- linuxbatman-adv: gw: acquire ethernet header only after skb realloc8.8 High
- linuxbatman-adv: dat: acquire ARP hw source only after skb realloc9.8 Critical
- linuxbatman-adv: dat: ensure accessible eth_hdr proto field8.1 High
- linuxntfs3: fix out-of-bounds read in decompress_lznt7.8 High
- linuxmtd: maps: vmu-flash: fix NULL pointer dereference in initialization5.1 Medium
- linuxInput: ims-pcu - only expose sysfs attributes on control interface8.4 High
- linuxInput: ims-pcu - add response length checks5.2 Medium
- linuxInput: ims-pcu - fix potential infinite loop in CDC union descriptor parsing5.1 Medium
- linuxhwmon: (asus_atk0110) Check package count before accessing element8.4 High
- linuxsamples/damon/mtier: fail early if address range parameters are invalidNo score
- linuxf2fs: fix listxattr handling of corrupted xattr entries7.8 High
- ameliabooking booking for appointments and events calendar – ameliaBooking for Appointments and Events Calendar <= 2.2 - Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission7.2 High
- tomdever wpforo forumwpForo Forum <= 2.4.17 - Unauthenticated SQL Injection via 'referer' Parameter7.5 High
- wpmudev wpmu dev dashboardWPMU DEV Dashboard <= 5.0.1 - Authentication Bypass to Administrator via SSO HMAC Canonicalization Confusion9.8 Critical
- linuxinet: frags: strip GSO state from fragments before reassembly8.6 High
- nippon institute of agroinformatics ltd. soy cmsSOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be...9.3 Critical
- tsuyoshi saito soy gallerySOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed...4.8 Medium
- tsuyoshi saito soy calendarSOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed...4.8 Medium
- tsuyoshi saito soy calendarSOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed...4.8 Medium
- Show moreLoading…