CVEs published in September 2026
14,845 vulnerabilities, 1,524 critical, 36 exploited.
- linux, linux kernel +1 moreEDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation5.5 Medium
- linux, linux kernel +1 moredrm/virtio: use the DMA API for resource backing on Xen7.8 High
- linux, linux kernel +1 moreaccel/qaic: Address potential out-of-bounds read in resp_worker()7.1 High
- linux, linux kernel +1 morenvme-rdma: fix -EIO cleanup order in queue_rq7.0 High
- linux, linux kernel +1 morenvme: fix racy access to FDP placement id array5.5 Medium
- linux, linux kernel +1 morenvmet-rdma: fix queue leak when connect backlog is exceeded5.5 Medium
- linux, linux kernel +1 morebpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic5.5 Medium
- linux, linux kernel +1 morebpf: Fix BPF_F_CPU validation for sparse CPU IDs7.0 High
- linux, linux kernel +1 morebpf: Fix percpu map update indexing with sparse CPU IDs7.8 High
- linux, linux kernel +1 moredrm/gud: validate GUD_ROTATION_0 is present in supported rotations5.5 Medium
- linux, linux kernel +1 moreprintk: Don't WARN on kthread_run failure.5.5 Medium
- linux, linux kernel +1 moreaccel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain5.5 Medium
- linux, linux kernel +1 moreaccel/amdxdna: reject a command chain that carries no commands5.5 Medium
- linux, linux kernel +1 moreaccel/amdxdna: put the chained BO when its mapping fails5.5 Medium
- linux, linux kernel +1 moreaccel: ethosu: Don't read the U65 rounding mode as a storage mode7.8 High
- linux, linux kernel +1 moredrm/cirrus-qemu: Validate BAR0 size during probe5.5 Medium
- linux, linux kernel +1 morentfs: propagate reparse index insertion failure5.5 Medium
- linux, linux kernel +1 morentfs: fix kmap_local leak in write_mft_record_nolock() error paths5.5 Medium
- linux, linux kernel +1 morentfs: only count successfully cleared runs when freeing clusters5.5 Medium
- linux, linux kernel +1 morentfs: do not mark the volume clean in sync_fs when errors were recorded5.5 Medium
- linux, linux kernel +1 morentfs: treat any nonzero dio zero-range return as an error5.5 Medium
- linux, linux kernel +1 morentfs: bound $AttrDef table walk to the loaded table size7.1 High
- linux, linux kernel +1 morentfs: reject invalid sectors_per_cluster in the boot sector5.5 Medium
- linux, linux kernel +1 morebpf: check_cond_jmp_op(): properly infer if register is null5.5 Medium
- linux, linux kernel +1 morentfs: leave HasEA flag untouched on setxattr failure5.5 Medium
- linux, linux kernel +1 morebpf: don't downgrade half-dead scalar zero spills to STACK_ZERO5.5 Medium
- linux, linux kernel +1 morenet: stmmac: fix dma mapping leak in stmmac_tso_xmit()5.5 Medium
- linux, linux kernel +1 moresctp: fix a TOCTOU race in SCTP_CMD_TIMER_START8.1 High
- linux, linux kernel +1 morescsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add()5.5 Medium
- linux, linux kernel +1 morescsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add()5.5 Medium
- linux, linux kernel +1 moresmb/client: validate new EOF for insert range5.5 Medium
- linux, linux kernel +1 moresmb/client: validate new EOF for zero range5.5 Medium
- linux, linux kernel +1 moresmb/client: fix stale page cache in insert/collapse range5.5 Medium
- linux, linux kernel +1 moresmb/client: invalidate fscache for fallocate range operations5.5 Medium
- linux, linux kernel +1 moresctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration5.5 Medium
- linux, linux kernel +1 morevxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del()7.8 High
- linux, linux kernel +1 morewatchdog: msc313e: Fix NULL pointer dereference in PM callbacks5.5 Medium
- linux, linux kernel +1 morenetfs: Fix subreq ref leak5.5 Medium
- linux, linux kernel +1 morenetfs: break unbuffered write when netfs_alloc_subrequest() fails5.5 Medium
- linux, linux kernel +1 morenetfs: Fix readahead synchronisation issues by loading all folios upfront7.1 High
- linux, linux kernel +1 morecachefiles: Fix potential UAF/KASAN warning7.8 High
- linux, linux kernel +1 moreALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF7.8 High
- linux, linux kernel +1 moreksmbd: safely drain sessions during logoff8.8 High
- linux, linux kernel +1 moreksmbd: propagate DACL parsing errors5.5 Medium
- linux, linux kernel +1 moreksmbd: rate limit unmapped SID errors5.5 Medium
- linux, linux kernel +1 moreksmbd: fix listener task lifetime on netdev events7.8 High
- linux, linux kernel +1 moreBluetooth: btintel: validate version TLV value lengths7.1 High
- linux, linux kernel +1 moreBluetooth: btintel: bound firmware ID by TLV length7.1 High
- linux, linux kernel +1 moreBluetooth: hci_core: Fix race condition during device registration4.7 Medium
- linux, linux kernel +1 moreBluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan7.5 High
- Show moreLoading…