Skip to contentLinux Kernel vulnerabilities
- linux, linux kernel +1 moref2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()CVE-2026-31715Fix available7.8 High
- linux, linux kernel +1 moref2fs: fix to avoid memory leak in f2fs_rename()CVE-2026-31714Fix available5.5 Medium
- linux, linux kernel +1 morefuse: abort on fatal signal during sync initCVE-2026-31713Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreksmbd: require minimum ACE size in smb_check_perm_dacl()CVE-2026-31712Fix available8.3 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresmb: server: fix active_num_conn leak on transport allocation failureCVE-2026-31711Fix available7.5 High
- linux, linux kernel +1 moresmb: client: fix dir separator in SMB1 UNIX mountsCVE-2026-31710Fix available5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +9 more +11 moresmb: client: validate the whole DACL before rewriting it in cifsaclCVE-2026-31709Fix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresmb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO pathCVE-2026-31708Fix available8.1 High
- linux, linux kernel +1 moreksmbd: validate response sizes in ipc_validate_msg()CVE-2026-31707Fix available7.1 High
- linux, linux kernel +1 moreksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()CVE-2026-31706Fix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreksmbd: fix out-of-bounds write in smb2_get_ea() EA alignmentCVE-2026-31705Fix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreksmbd: use check_add_overflow() to prevent u16 DACL size overflowCVE-2026-31704Fix available5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morewriteback: Fix use after free in inode_switch_wbs_work_fn()CVE-2026-31703Fix available7.8 High
- linux, linux kernel +1 moref2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()CVE-2026-31702Fix available7.8 High
- linux, linux kernel +1 moreALSA: caiaq: take a reference on the USB device in create_card()CVE-2026-31701Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()CVE-2026-31700Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecrypto: ccp: Don't attempt to copy CSR to userspace if PSP command failedCVE-2026-31699Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecrypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failedCVE-2026-31698Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecrypto: ccp: Don't attempt to copy ID to userspace if PSP command failedCVE-2026-31697Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morerxrpc: Fix missing validation of ticket length in non-XDR key preparsingCVE-2026-31696Fix available7.8 High
- linux, linux kernel +1 morewifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-freeCVE-2026-31695Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 more +3 morefuse: reject oversized dirents in page cacheCVE-2026-31694Public exploitFix available7.8 High
- linux, linux kernel +1 morecifs: some missing initializations on replayCVE-2026-31693Fix available7.8 High
- linux, linux kernel +1 morertnetlink: add missing netlink_ns_capable() check for peer netnsCVE-2026-31692Fix available5.5 Medium
- linux, linux kernel +1 morexen/privcmd: fix double free via VMA splittingCVE-2026-31787Public exploitFix available7.8 High
- linux, linux kernel +1 moreBuffer overflow in drivers/xen/sys-hypervisor.cCVE-2026-31786Fix available7.8 High
- linux, linux kernel +1 moreigb: remove napi_synchronize() in igb_down()CVE-2026-31691Fix available5.5 Medium
- linux, linux kernel +1 morefirmware: thead: Fix buffer overflow and use standard endian macrosCVE-2026-31690Fix available7.8 High
- linux, linux kernel +1 moreEDAC/mc: Fix error path ordering in edac_mc_alloc()CVE-2026-31689Fix available5.5 Medium
- linux, linux kernel +1 moregpio: omap: do not register driver in probe()CVE-2026-31687Fix available5.5 Medium
- linux, linux kernel +1 moremm/kasan: fix double free for kasan pXdsCVE-2026-31686Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: ip6t_eui64: reject invalid MAC header for all packetsCVE-2026-31685Fix available9.4 Critical
- linux, linux kernel +1 morenet: sched: act_csum: validate nested VLAN headersCVE-2026-31684Fix available5.5 Medium
- linux, linux kernel +1 morebatman-adv: avoid OGM aggregation when skb tailroom is insufficientCVE-2026-31683Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morebridge: br_nd_send: linearize skb before parsing ND optionsCVE-2026-31682Fix available9.1 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: xt_multiport: validate range encoding in checkentryCVE-2026-31681Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: ipv6: flowlabel: defer exclusive option free until RCU teardownCVE-2026-31680Fix available7.8 High
- linux, linux kernel +1 moreopenvswitch: validate MPLS set/set_masked payload lengthCVE-2026-31679Fix available7.1 High
- linux, linux kernel +1 moreopenvswitch: defer tunnel netdev_put to RCU releaseCVE-2026-31678Fix available7.8 High
- linux, linux kernel +1 morecrypto: af_alg - limit RX SG extraction by receive buffer budgetCVE-2026-31677Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morerxrpc: only handle RESPONSE during service challengeCVE-2026-31676Fix available7.5 High
- linux, linux kernel +1 morenet/sched: sch_netem: fix out-of-bounds access in packet corruptionCVE-2026-31675Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()CVE-2026-31674Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreaf_unix: read UNIX_DIAG_VFS data under unix_state_lockCVE-2026-31673Fix available7.8 High
- linux, linux kernel +1 morewifi: rt2x00usb: fix devres lifetimeCVE-2026-31672Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morexfrm_user: fix info leak in build_report()CVE-2026-31671Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: rfkill: prevent unlimited numbers of rfkill events from being createdCVE-2026-31670Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremptcp: fix slab-use-after-free in __inet_lookup_establishedCVE-2026-31669Fix available9.8 Critical
- linux, linux kernel +1 moreseg6: separate dst_cache for input and output paths in seg6 lwtunnelCVE-2026-31668Fix available9.8 Critical
- linux, linux kernel +1 moreInput: uinput - fix circular locking dependency with ff-coreCVE-2026-31667Fix available7.8 High
- Show moreLoading…