CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- linuxriscv/mm: use physical alignment for vmemmap_start_pfn7.8 High
- linuxvxlan: re-fetch eth header after route_shortcircuit()9.8 Critical
- linuxi2c: amd-mp2: Unregister callback on adapter add failure7.8 High
- linuxs390/dasd: Fix potential NULL pointer dereferenceNo score
- linuxi2c: imx: Fix slave registration race and error handling8.4 High
- linuxdriver core: use READ_ONCE() for dev->driver in dev_has_sync_state()7.8 High
- linuxDrivers: hv: vmbus: use generic driver_override infrastructureNo score
- linuxlibbpf: Reject non-exclusive metadata maps in the signed loader7.1 High
- linuxntfs: validate resident attribute lists and harden the validator9.8 Critical
- linuxntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find()9.8 Critical
- linuxntfs: fix u16 truncation of restart-area length check8.8 High
- linuxperf sched: Fix register_pid() overflow, strcpy, and BUG_ON9.3 Critical
- linuxperf tools: Use perf_env__get_cpu_topology() in machine__resolve()9.1 Critical
- linuxbpf: Disable xfrm_decode_session hook attachment6.7 Medium
- linuxnetfilter: nf_conntrack_expect: use conntrack GC to reap expectations9.8 Critical
- linuxnet/mlx5: LAG, MPESW, Fix missing complete() on devcom error5.6 Medium
- linuxBluetooth: sco: Fix a race condition in sco_sock_timeout()5.7 Medium
- linuxKVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't resolve PFN7.1 High
- linuxnetfilter: xt_nat: reject unsupported target families7.3 High
- linuxtools/power/x86/intel-speed-select: Harden daemon pidfile open7.1 High
- linuxcxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size7.1 High
- linuxufs: core: tracing: Do not dereference pointers in TP_printk()7.8 High
- linuxhwmon: (occ) unregister sysfs devices outside occ lockNo score
- linuxmmc: vub300: defer reset until cmd_mutex is unlocked5.1 Medium
- linuxdrm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove()No score
- linuxaccel/amdxdna: Guard management mailbox channel cleanup against NULL pointerNo score
- linuxhfsplus: Add a sanity check for btree node size7.8 High
- linuxsoc: xilinx: Fix race condition in event registrationNo score
- linuxsoc: xilinx: Shutdown and free rx mailbox channelNo score
- linuxscsi: hisi_sas: Add slave_destroy interface for v3 hw8.4 High
- linuxcrypto: ccp - Treat zero-length cert chain as query for blob lengthsNo score
- linuxcrypto: ccp/sev-dev-tsm - bail out early when pdev->bus is NULLNo score
- linuxmedia: atomisp: gc2235: fix UAF and memory leakNo score
- linuxfirmware: arm_scmi: Fix OOB in scmi_power_name_get()7.8 High
- linuxpinctrl: spacemit: fix NULL check in spacemit_pin_set_configNo score
- linuxRDMA/hns: Fix warning in poll cq direct mode10.0 Critical
- linuxipv6: guard against possible NULL deref in __in6_dev_stats_get()7.5 High
- linuxrapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()8.1 High
- linuxocfs2: don't BUG_ON an invalid journal dinode7.1 High
- linuxEDAC/igen6: Fix call trace due to missing release()No score
- linuxliveupdate: Reference count incoming FLB dataNo score
- linuxwifi: wlcore: enable the right set of ciphers6.8 Medium
- linuxcxl/fwctl: Fix __fortify_panicNo score
- linuxcxl/test: Fix __fortify_panicNo score
- linuxocfs2: fix out-of-bounds write in ocfs2_remove_refcount_extent8.8 High
- linuxnetfilter: synproxy: fix unaligned memory access in timestamp adjustment7.5 High
- linuxnetfilter: conntrack: revert ct extension genid infrastructureNo score
- linuxwifi: wcn36xx: fix OOB read from short trigger BA firmware response8.8 High
- linuxnetfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag9.8 Critical
- linuxiommufd: Take dma_resv lock before dma_buf_unpin() in release path8.8 High
- Show moreLoading…