Skip to contentLinux Kernel vulnerabilities
- linux, linux kernel +1 morememfd: deny writeable mappings when implying SEAL_WRITECVE-2026-63952Fix available8.4 High
- linux, linux kernel +1 morezram: fix use-after-free in zram_writeback_endioCVE-2026-63951Fix available7.8 High
- linux, linux kernel +1 moremm/rmap: initialize nr_pages to 1 at loop start in try_to_unmap_oneCVE-2026-63950Fix available7.8 High
- linux, linux kernel +1 moreauxdisplay: line-display: fix OOB read on zero-length message_store()CVE-2026-63949Fix available7.1 High
- linux, linux kernel +1 moreBluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !connCVE-2026-63948Fix available5.5 Medium
- linux, linux kernel +1 moreBluetooth: HIDP: fix missing length checks in hidp_input_report()CVE-2026-63947Fix available8.8 High
- linux, linux kernel +1 moreBluetooth: ISO: fix UAF in iso_recv_frameCVE-2026-63946Fix available8.8 High
- linux, linux kernel +1 moreBluetooth: ISO: serialize iso_sock_clear_timer with socket lockCVE-2026-63945Fix available7.8 High
- linux, linux kernel +1 moreBluetooth: hci_sync: fix UAF in hci_le_create_cis_syncCVE-2026-63944Fix available8.8 High
- linux, linux kernel +1 moreInput: xpad - fix out-of-bounds access for Share buttonCVE-2026-63943Fix available7.1 High
- linux, linux kernel +1 moreparport: Fix race between port and client registrationCVE-2026-63942Fix available7.8 High
- linux, linux kernel +1 moreKVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisorCVE-2026-63941Fix available8.8 High
- linux, linux kernel +1 moreKVM: SEV: Ignore Port I/O requests of length '0'CVE-2026-63940Fix available9.3 Critical
- linux, linux kernel +1 moreKVM: SEV: Compute the correct max length of the in-GHCB scratch areaCVE-2026-63939Fix available9.3 Critical
- linux, linux kernel +1 moreKVM: SEV: Check PSC request indices against the actual size of the bufferCVE-2026-63938Fix available9.3 Critical
- linux, linux kernel +1 moreKVM: SEV: Use READ_ONCE() when reading entries/indices from PSC bufferCVE-2026-63937Fix available8.8 High
- linux, linux kernel +1 moreiio: adc: mt6359: fix unchecked return value in mt6358_read_impCVE-2026-63936Fix available5.5 Medium
- linux, linux kernel +1 moreiio: adc: nxp-sar-adc: fix division by zero in write_rawCVE-2026-63935Fix available5.5 Medium
- linux, linux kernel +1 moreiio: gyro: itg3200: fix i2c read into the wrong stack locationCVE-2026-63934Fix available7.1 High
- linux, linux kernel +1 moreiio: gyro: adis16260: fix division by zero in write_rawCVE-2026-63933Fix available5.5 Medium
- linux, linux kernel +1 moreiio: chemical: mhz19b: reject oversized serial repliesCVE-2026-63932Fix available5.5 Medium
- linux, linux kernel +1 moreiio: chemical: scd30: fix division by zero in write_rawCVE-2026-63931Fix available5.5 Medium
- linux, linux kernel +1 moreiio: buffer: hw-consumer: fix use-after-free in error pathCVE-2026-63930Fix available7.8 High
- linux, linux kernel +1 moreiio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf()CVE-2026-63929Fix available5.5 Medium
- linux, linux kernel +1 moreUSB: serial: omninet: fix memory corruption with small endpointCVE-2026-63928Fix available7.8 High
- linux, linux kernel +1 moreusb: dwc2: Fix use after free in debug codeCVE-2026-63927Fix available7.8 High
- linux, linux kernel +1 morebpf: sockmap: fix tail fragment offset in bpf_msg_push_dataCVE-2026-63926Fix available8.4 High
- linux, linux kernel +1 moremacsec: fix replay protection at XPN lower-PN wrapCVE-2026-63925Fix available8.1 High
- linux, linux kernel +1 moreipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()CVE-2026-63924Fix available9.8 Critical
- linux, linux kernel +1 moreocteontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notifyCVE-2026-63923Fix available8.8 High
- linux, linux kernel +1 moreipv6: exthdrs: refresh nh after handling HAO optionCVE-2026-63922Fix available9.8 Critical
- linux, linux kernel +1 moreip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().CVE-2026-63921Fix available8.8 High
- linux, linux kernel +1 moreipv6: validate extension header length before copying to cmsgCVE-2026-63920Fix available7.1 High
- linux, linux kernel +1 morexfrm: input: hold netns during deferred transport reinjectionCVE-2026-63919Fix available8.8 High
- linux, linux kernel +1 morel2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifnameCVE-2026-63918Fix available7.8 High
- linux, linux kernel +1 moreip6: vti: Use ip6_tnl.net in vti6_changelink().CVE-2026-63917Fix available8.8 High
- linux, linux kernel +1 moreHID: wacom: Fix OOB write in wacom_hid_set_device_mode()CVE-2026-63916Fix available8.8 High
- linux, linux kernel +1 morenfc: hci: fix out-of-bounds read in HCP header parsingCVE-2026-63915Fix available8.8 High
- linux, linux kernel +1 morexfrm: route MIGRATE notifications to caller's netnsCVE-2026-63914Fix available7.3 High
- linux, linux kernel +1 morenetfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction checkCVE-2026-63913Fix available8.2 High
- linux, linux kernel +1 morexfrm: esp: restore combined single-frag length gateCVE-2026-63912Fix available9.8 Critical
- linux, linux kernel +1 morexfrm: iptfs: reset runtime state when cloning SAsCVE-2026-63911Fix available7.8 High
- linux, linux kernel +1 moredma-buf: fix UAF in dma_buf_fd() tracepointCVE-2026-63910Fix available7.8 High
- linux, linux kernel +1 moreksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loopsCVE-2026-63909Fix available8.1 High
- linux, linux kernel +1 moreInput: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_memCVE-2026-63908Fix available5.5 Medium
- linux, linux kernel +1 moreuio: uio_pci_generic_sva: fix double free of devm_kzalloc() memoryCVE-2026-63907Fix available7.8 High
- linux, linux kernel +1 moreusb: musb: omap2430: Fix use-after-free in omap2430_probe()CVE-2026-63906Fix available8.4 High
- linux, linux kernel +1 moreusbip: vudc: Fix use after free bug in vudc_remove due to race conditionCVE-2026-63905Fix available7.8 High
- linux, linux kernel +1 moreusb: usbtmc: check URB actual_length for interrupt-IN notificationsCVE-2026-63904Fix available7.1 High
- linux, linux kernel +1 moreUSB: serial: belkin_sa: validate interrupt status lengthCVE-2026-63903Fix available7.1 High
- Show moreLoading…