CVEs published in September 2026
14,845 vulnerabilities, 1,524 critical, 36 exploited.
- linuxthermal/drivers/tegra/soctherma: Switch to devm cooling device registrationNo score
- linuxwifi: iwlwifi: mld: purge async notifications upon nic error7.4 High
- linuxpowercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked()No score
- linuxipv6: addrconf: fix temp address generation after prefix deprecationNo score
- linuxACPICA: Fix condition check in acpi_ps_parse_loop()No score
- linuxACPICA: Fix use-after-free in acpi_ds_terminate_control_method()8.4 High
- linuxACPICA: add boundary checks in acpi_ps_get_next_field()7.7 High
- linuxACPICA: validate byte_count in acpi_ps_get_next_package_length()No score
- linuxACPICA: Prevent adding invalid references8.4 High
- linuxACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op)8.4 High
- linuxACPICA: validate handler object type in two places8.4 High
- linuxACPICA: Add package limit checks in parser functionsNo score
- linuxACPICA: Add validation for node in acpi_ns_build_normalized_path()7.7 High
- linuxACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op()No score
- linuxACPICA: Fix NULL pointer dereference in acpi_ns_custom_package()No score
- linuxACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources()7.7 High
- linuxACPICA: add boundary checks in two places7.7 High
- linuxperf/ftrace: Fix WARNING in __unregister_ftrace_functionNo score
- linuxwifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi8.8 High
- linuxata: ahci: fail probe if BAR too small for claimed portsNo score
- linuxnet: qrtr: fix node refcount leak on ctrl packet alloc failureNo score
- linuxfs/ntfs3: preserve non-DOS attribute bits in system.dos_attribNo score
- linuxfs/ntfs3: validate index entry key bounds7.1 High
- linuxntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e()7.1 High
- linuxdpaa2-switch: rework FDB management on the bridge leave pathNo score
- linuxnet: dsa: sja1105: flower: reject cross-chip redirectNo score
- linuxdpaa2-switch: fix handling of NAPI on the remove pathNo score
- linuxnvme: validate FDP configuration descriptor sizes8.2 High
- linuxwifi: iwlwifi: mvm: fix P2P-Device binding handling4.6 Medium
- linuxdrm/amd/display: Avoid DPMS-on for phantom streamNo score
- linuxxhci: Prevent queuing new commands if xhci is inaccessibleNo score
- linuxdrm/amdkfd: fix UAF race in destroy_queue_cpsch7.8 High
- linuxdrm/amdgpu: harden FRU PIA parsing with bounded helpers7.7 High
- linuxdrm/amd/pm: bound pp_dpm_set_pp_table() memcpy7.8 High
- linuxdrm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse errorNo score
- linuxdrm/amdgpu: fix buffer overflow during vBIOS update7.8 High
- linuxdrm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irqNo score
- linuxcxl/region: Validate partition index before array accessNo score
- linuxdrm/amdkfd: fix SMI event cross-process information leak4.8 Medium
- linuxRDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()7.8 High
- linuxbpf: NUL-terminate replaced sysctl valueNo score
- linuxhsr: broadcast netlink notifications in the device's net namespaceNo score
- linuxALSA: es18xx: check control allocation before private data setupNo score
- linuxnetfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()7.5 High
- linuxbtrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()No score
- linuxbtrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF7.8 High
- linuxASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend()No score
- linuxRDMA/rtrs-srv: Fix integer underflow in process_read and process_write9.8 Critical
- linuxpds_core: quiesce DMA before freeing resourcesNo score
- linuxnet: ibm: emac: mal: fix potential system hang in mal_remove()No score
- Show moreLoading…