Skip to contentLinux Kernel vulnerabilities
- linux, linux kernel +1 moreKVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT pathCVE-2026-63794Fix available7.8 High
- linux, linux kernel +1 morentfs: serialize volume label accessesCVE-2026-63793Fix available7.8 High
- linux, linux kernel +1 morefbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_varCVE-2026-53403Fix available5.5 Medium
- linux, linux kernel +1 morefbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()CVE-2026-53402Fix available7.1 High
- linux, linux kernel +1 morefbdev: omap2: fix use-after-free in omapfb_mmapCVE-2026-53401Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morei2c: core: fix adapter registration raceCVE-2026-53400Fix available7.8 High
- linux, linux kernel +1 morenfsd: release layout stid on setlease failureCVE-2026-53399Fix available9.8 Critical
- linux, linux kernel +1 moreNFSD: Fix SECINFO_NO_NAME decode error cleanupCVE-2026-53398Fix available9.8 Critical
- linux, linux kernel +1 morenfsd: fix posix_acl leak on SETACL decode failureCVE-2026-53397Fix available7.5 High
- linux, linux kernel +1 morenfsd: fix posix_acl leak and ignored error in nfsd4_create_fileCVE-2026-53396Fix available7.1 High
- linux, linux kernel +1 morenfsd: fix dead ACL conflict guard in nfsd4_createCVE-2026-53395Fix available7.5 High
- linux, linux kernel +1 morenfsd: avoid leaking pre-allocated openowner on unconfirmed retry raceCVE-2026-53394Fix available7.5 High
- linux, linux kernel +1 morenfsd: reset write verifier on deferred writeback errorsCVE-2026-53393Fix available5.5 Medium
- linux, linux kernel +1 moreNFSv4/flexfiles: reject zero filehandle version countCVE-2026-53392Fix available7.5 High
- linux, linux kernel +1 moreNFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addrCVE-2026-53391Fix available7.5 High
- linux, linux kernel +1 moreksmbd: fix out-of-bounds read in smb_check_perm_dacl()CVE-2026-53390Fix available8.1 High
- linux, linux kernel +1 morenet/tcp-ao: fix use-after-free of key in del_async pathCVE-2026-53389Fix available7.8 High
- linux, linux kernel +1 morefuse: re-lock request before replacing page cache folioCVE-2026-53388Fix available7.8 High
- linux, linux kernel +1 moreiio: light: veml6075: add bounds check to veml6075_it_ms indexCVE-2026-53387Fix available7.1 High
- linux, linux kernel +1 moreiio: adc: ti-ads1298: add bounds check to pga_settings indexCVE-2026-53386Fix available7.8 High
- linux, linux kernel +1 morevc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_writeCVE-2026-53385Fix available5.5 Medium
- linux, linux kernel +1 moreserial: 8250_dw: unregister 8250 port if clk_notifier_register() failsCVE-2026-53384Fix available9.8 Critical
- linux, linux kernel +1 moreksmbd: reject non-VALID session in compound request branchCVE-2026-53383Fix available7.5 High
- linux, linux kernel +1 moremedia: vidtv: fix NULL pointer dereference in vidtv_mux_push_siCVE-2026-53382Fix available5.5 Medium
- linux, linux kernel +1 morevirtiofs: fix UAF on submount umountCVE-2026-53381Fix available7.8 High
- linux, linux kernel +1 moremedia: rzv2h-ivc: Fix concurrent buffer list accessCVE-2026-53380Fix available7.8 High
- linux, linux kernel +1 moremedia: i2c: ov8856: free control handler on error in ov8856_init_controls()CVE-2026-53379Fix available5.5 Medium
- linux, linux kernel +1 moredrm/colorop: Fix blob property reference tracking in state lifecycleCVE-2026-53378Fix available5.5 Medium
- linux, linux kernel +1 moredrm/msm: always recover the gpuCVE-2026-53377Fix available5.5 Medium
- linux, linux kernel +1 moredrm/amdkfd: Add upper bound check for num_of_nodesCVE-2026-53376Fix available5.5 Medium
- linux, linux kernel +1 moredrm/amdgpu/vce: Prevent partial address patchesCVE-2026-53375Fix available8.8 High
- linux, linux kernel +1 moredrm/amdgpu: zero-initialize GART table on allocationCVE-2026-53374Fix available8.8 High
- linux, linux kernel +1 moremm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap()CVE-2026-53373Fix available7.8 High
- linux, linux kernel +1 moreiommu/vt-d: Block PASID attachment to nested domain with dirty trackingCVE-2026-53372Fix available5.5 Medium
- linux, linux kernel +1 moreRDMA/ionic: bound node_desc sysfs read with %.64sCVE-2026-53371Fix available5.5 Medium
- linux, linux kernel +1 moreperf/x86/intel: Improve validation and configuration of ACR masksCVE-2026-53370Fix available5.5 Medium
- linux, linux kernel +1 moreudf: reject descriptors with oversized CRC lengthCVE-2026-53369Fix available8.4 High
- linux, linux kernel +1 moref2fs: fix fsck inconsistency caused by incorrect nat_entry flag usageCVE-2026-53368Fix available7.1 High
- linux, linux kernel +1 moreselinux: fix avdcache auditingCVE-2026-53367Fix available5.5 Medium
- linux, linux kernel +1 morexfs: resample the data fork mapping after cycling ILOCKCVE-2026-64600Public exploitFix available7.8 High
- linux, linux kernel +1 morevsock/virtio: fix zerocopy completion for multi-skb sendsCVE-2026-53365Public exploitFix available5.5 Medium
- linux, linux kernel +1 moreBluetooth: hci_conn: Fix memory leak in hci_le_big_terminate()CVE-2026-53364Fix available5.5 Medium
- linux, linux kernel +1 morexfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags()CVE-2026-53363Fix available9.8 Critical
- linux, linux kernel +1 morecrypto: krb5 - filter out async aead implementations at allocCVE-2026-64439Fix available9.8 Critical
- linux, linux kernel +1 moreaf_unix: Set gc_in_progress to true in unix_gc().CVE-2026-53361Public exploitFix available7.1 High
- linux, linux kernel +1 moreKVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in useCVE-2026-53360Public exploitFix available8.8 High
- linux, linux kernel +1 moreKVM: x86: Fix shadow paging use-after-free due to unexpected roleCVE-2026-53359Public exploitFix available8.8 High
- linux, linux kernel +1 moreipv4: account for fraggap on the paged allocation pathCVE-2026-53366Fix available7.8 High
- linux kernel, linux, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 more +3 moreipv6: account for fraggap on the paged allocation pathCVE-2026-53362In KEVPublic exploitFix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: L2CAP: use chan timer to close channels in cleanup_listen()CVE-2026-53358Fix available8.8 High
- Show moreLoading…