Skip to contentLinux Kernel vulnerabilities
- linux, linux kernel +1 moreusb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()CVE-2026-31616Fix available5.5 Medium
- linux, linux kernel +1 moreusb: gadget: renesas_usb3: validate endpoint index in standard request handlersCVE-2026-31615Fix available5.5 Medium
- linux, linux kernel +1 moresmb: client: fix off-by-8 bounds check in check_wsl_eas()CVE-2026-31614Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresmb: client: fix OOB reads parsing symlink error responseCVE-2026-31613Fix available8.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreksmbd: validate EaNameLength in smb2_get_ea()CVE-2026-31612Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreksmbd: require 3 sub-authorities before reading sub_auth[2]CVE-2026-31611Fix available8.6 High
- linux, linux kernel +1 moreksmbd: fix mechToken leak when SPNEGO decode fails after token allocCVE-2026-31610Fix available5.5 Medium
- linux, linux kernel +1 moresmb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush()CVE-2026-31609Fix available9.8 Critical
- linux, linux kernel +1 moresmb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list()CVE-2026-31608Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +6 more +8 moreusbip: validate number_of_packets in usbip_pack_ret_submit()CVE-2026-31607Fix available9.8 Critical
- linux, linux kernel +1 moreusb: gadget: f_hid: don't call cdev_init while cdev in useCVE-2026-31606Fix available5.5 Medium
- linux, linux kernel +1 morefbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFOCVE-2026-31605Fix available5.5 Medium
- linux, linux kernel +1 morewifi: rtw88: fix device leak on probe failureCVE-2026-31604Fix available5.5 Medium
- linux, linux kernel +1 morestaging: sm750fb: fix division by zero in ps_to_hz()CVE-2026-31603Fix available5.5 Medium
- linux, linux kernel +1 moreALSA: ctxfi: Limit PTP to a single pageCVE-2026-31602Fix available7.8 High
- linux, linux kernel +1 morevfio/xe: Reorganize the init to decouple migration from resetCVE-2026-31601Fix available5.5 Medium
- linux, linux kernel +1 morearm64: mm: Handle invalid large leaf mappings correctlyCVE-2026-31600Fix available7.5 High
- linux, linux kernel +1 moremedia: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sectionsCVE-2026-31599Fix available5.5 Medium
- linux, linux kernel +1 moreocfs2: fix possible deadlock between unlink and dio_end_io_writeCVE-2026-31598Fix available7.5 High
- linux, linux kernel +1 moreocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRYCVE-2026-31597Fix available7.8 High
- linux, linux kernel +1 moreocfs2: handle invalid dinode in ocfs2_group_extendCVE-2026-31596Fix available5.5 Medium
- linux, linux kernel +1 morePCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanupCVE-2026-31595Fix available5.5 Medium
- linux, linux kernel +1 morePCI: endpoint: pci-epf-vntb: Remove duplicate resource teardownCVE-2026-31594Fix available5.5 Medium
- linux, linux kernel +1 moreKVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPUCVE-2026-31593Fix available5.5 Medium
- linux, linux kernel +1 moreKVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lockCVE-2026-31592Fix available5.5 Medium
- linux, linux kernel +1 moreKVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finishCVE-2026-31591Fix available5.5 Medium
- linux, linux kernel +1 moreKVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGIONCVE-2026-31590Fix available5.5 Medium
- linux, linux kernel +1 moremm: call ->free_folio() directly in folio_unmap_invalidate()CVE-2026-31589Fix available9.8 Critical
- linux, linux kernel +1 moreKVM: x86: Use scratch field in MMIO fragment to hold small write valuesCVE-2026-31588Fix available8.8 High
- linux, linux kernel +1 moreASoC: qcom: q6apm: move component registration to unmanaged versionCVE-2026-31587Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremm: blk-cgroup: fix use-after-free in cgwb_release_workfn()CVE-2026-31586Fix available7.8 High
- linux, linux kernel +1 moremedia: vidtv: fix nfeeds state corruption on start_streaming failureCVE-2026-31585Fix available5.5 Medium
- linux, linux kernel +1 moremedia: mediatek: vcodec: fix use-after-free in encoder release pathCVE-2026-31584Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremedia: em28xx: fix use-after-free in em28xx_v4l2_open()CVE-2026-31583Fix available7.8 High
- linux, linux kernel +1 morehwmon: (powerz) Fix use-after-free on USB disconnectCVE-2026-31582Fix available7.8 High
- linux, linux kernel +1 moreALSA: 6fire: fix use-after-free on disconnectCVE-2026-31581Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebcache: fix cached_dev.sb_bio use-after-free and crashCVE-2026-31580Fix available7.8 High
- linux, linux kernel +1 morewireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exitCVE-2026-31579Fix available5.5 Medium
- linux, linux kernel +1 moremedia: as102: fix to not free memory after the device is registered in as102_usb_probe()CVE-2026-31578Fix available7.8 High
- linux, linux kernel +1 morenilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_mapCVE-2026-31577Fix available5.5 Medium
- linux, linux kernel +1 moremedia: hackrf: fix to not free memory after the device is registered in hackrf_probe()CVE-2026-31576Fix available7.8 High
- linux, linux kernel +1 moremm/userfaultfd: fix hugetlb fault mutex hash calculationCVE-2026-31575Fix available5.5 Medium
- linux, linux kernel +1 moreclockevents: Add missing resets of the next_event_forced flagCVE-2026-31574Fix available5.5 Medium
- linux, linux kernel +1 moremedia: verisilicon: Fix kernel panic due to __initconst misuseCVE-2026-31573Fix available5.5 Medium
- linux, linux kernel +1 morei2c: designware: amdisp: Fix resume-probe race condition issueCVE-2026-31572Fix available4.7 Medium
- linux, linux kernel +1 moredrm/i915: Unlink NV12 planes earlierCVE-2026-31571Fix available5.5 Medium
- linux, linux kernel +1 morecan: gw: fix OOB heap access in cgw_csum_crc8_rel()CVE-2026-31570Fix available8.8 High
- linux, linux kernel +1 moreLoongArch: KVM: Handle the case that EIOINTC's coremap is emptyCVE-2026-31569Fix available7.3 High
- linux, linux kernel +1 mores390/mm: Add missing secure storage access fixups for donated memoryCVE-2026-31568Fix available7.1 High
- linux, linux kernel +1 morePM: sleep: Drop spurious WARN_ON() from pm_restore_gfp_mask()CVE-2026-31567Fix available5.5 Medium
- Show moreLoading…