Skip to contentLinux Kernel vulnerabilities
- linux, linux kernel +1 moreipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()CVE-2026-64002Fix available7.8 High
- linux, linux kernel +1 moreALSA: pcm: oss: Fix setup list UAF on proc write errorCVE-2026-64001Fix available7.8 High
- linux, linux kernel +1 morenet: hsr: fix potential OOB access in supervision frame handlingCVE-2026-64000Fix available9.8 Critical
- linux, linux kernel +1 moreethtool: rss: fix indir_table and hkey leak on get_rxfh failureCVE-2026-63999Fix available5.5 Medium
- linux, linux kernel +1 moreethtool: module: call ethnl_ops_complete() on module flash errorsCVE-2026-63998Fix available5.5 Medium
- linux, linux kernel +1 moreethtool: module: avoid leaking a netdev ref on module flash errorsCVE-2026-63997Fix available5.5 Medium
- linux, linux kernel +1 moreethtool: cmis: require exact CDB reply lengthCVE-2026-63996Fix available7.8 High
- linux, linux kernel +1 moreethtool: cmis: validate start_cmd_payload_size from moduleCVE-2026-63995Fix available7.8 High
- linux, linux kernel +1 moretunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()CVE-2026-63994Fix available9.8 Critical
- linux, linux kernel +1 morevxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()CVE-2026-63993Fix available9.8 Critical
- linux, linux kernel +1 moretunnels: do not assume transport header in iptunnel_pmtud_check_icmp()CVE-2026-63992Fix available9.1 Critical
- linux, linux kernel +1 moreBluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt()CVE-2026-63991Fix available5.5 Medium
- linux, linux kernel +1 morebonding: refuse to enslave CAN devicesCVE-2026-63990Fix available5.5 Medium
- linux, linux kernel +1 morebridge: Fix sleep in atomic context in netlink pathCVE-2026-63989Fix available5.5 Medium
- linux, linux kernel +1 morebridge: Fix sleep in atomic context in sysfs pathCVE-2026-63988Fix available5.5 Medium
- linux, linux kernel +1 moreethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILESCVE-2026-63987Fix available7.8 High
- linux, linux kernel +1 moreethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on prepare failureCVE-2026-63986Fix available5.5 Medium
- linux, linux kernel +1 moreethtool: eeprom: add more safeties to EEPROM Netlink fallbackCVE-2026-63985Fix available7.8 High
- linux, linux kernel +1 moreipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()CVE-2026-63984Fix available9.8 Critical
- linux, linux kernel +1 morenet/sched: fix packet loop on netem when duplicate is onCVE-2026-63983Fix available5.5 Medium
- linux, linux kernel +1 morenet/sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress mirred loopCVE-2026-63982Fix available5.5 Medium
- linux, linux kernel +1 morenet/sched: act_mirred: Fix blockcast recursion bypass leading to stack overflowCVE-2026-63981Fix available5.5 Medium
- linux, linux kernel +1 morenet/handshake: Use spin_lock_bh for hn_lockCVE-2026-63980Fix available7.5 High
- linux, linux kernel +1 morenet/handshake: hand off the pinned file reference to accept_doitCVE-2026-63979Fix available9.8 Critical
- linux, linux kernel +1 morenet/handshake: Drain pending requests at net namespace exitCVE-2026-63978Fix available9.8 Critical
- linux, linux kernel +1 moredpll: zl3073x: use __dpll_device_change_ntf() and remove change_workCVE-2026-63977Fix available7.8 High
- linux, linux kernel +1 moreBluetooth: l2cap: clear chan->ident on ECRED reconfiguration successCVE-2026-63976Fix available8.8 High
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rspCVE-2026-63975Fix available8.8 High
- linux, linux kernel +1 moreBluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device closeCVE-2026-63974Fix available8.8 High
- linux, linux kernel +1 morenet: mana: Add NULL guards in teardown path to prevent panic on attach failureCVE-2026-63973Fix available5.5 Medium
- linux, linux kernel +1 morenet: mana: Skip redundant detach on already-detached portCVE-2026-63972Fix available7.5 High
- linux, linux kernel +1 moresctp: fix race between sctp_wait_for_connect and peeloffCVE-2026-63971Fix available7.8 High
- linux, linux kernel +1 morevsock/virtio: bind uarg before filling zerocopy skbCVE-2026-63970Fix available7.8 High
- linux, linux kernel +1 moreipv6: fix possible infinite loop in rt6_fill_node()CVE-2026-63969Fix available5.5 Medium
- linux, linux kernel +1 moreipv6: fix possible infinite loop in fib6_select_path()CVE-2026-63968Fix available7.5 High
- linux, linux kernel +1 moreiio: imu: st_lsm6dsx: fix stack leak in tagged FIFO bufferCVE-2026-63967Fix available7.8 High
- linux, linux kernel +1 moreiio: imu: adis16550: fix stack leak in trigger handlerCVE-2026-63966Fix available5.5 Medium
- linux, linux kernel +1 moreiio: pressure: bmp280: fix stack leak in bmp580 trigger handlerCVE-2026-63965Fix available5.5 Medium
- linux, linux kernel +1 moreusb: typec: ucsi: ccg: reject firmware images without a ':' record headerCVE-2026-63964Fix available5.5 Medium
- linux, linux kernel +1 moreusb: typec: tcpm: validate VDO count in Discover Identity ACK handlersCVE-2026-63963Fix available5.5 Medium
- linux, linux kernel +1 moreusb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()CVE-2026-63962Fix available5.5 Medium
- linux, linux kernel +1 moreusb: typec: altmodes/displayport: validate count before reading Status Update VDOCVE-2026-63961Fix available5.5 Medium
- linux, linux kernel +1 moreusb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer()CVE-2026-63960Fix available5.5 Medium
- linux, linux kernel +1 moreusb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNTCVE-2026-63959Fix available5.5 Medium
- linux, linux kernel +1 moreusb: typec: ucsi: validate connector number in ucsi_connector_change()CVE-2026-63958Fix available5.5 Medium
- linux, linux kernel +1 moreUSB: serial: safe_serial: fix memory corruption with small endpointCVE-2026-63957Fix available7.8 High
- linux, linux kernel +1 moreUSB: serial: cypress_m8: fix memory corruption with small endpointCVE-2026-63956Fix available7.8 High
- linux, linux kernel +1 moremm/vmalloc: do not trigger BUG() on BH disabled contextCVE-2026-63955Fix available7.5 High
- linux, linux kernel +1 morehpfs: fix a crash if hpfs_map_dnode_bitmap failsCVE-2026-63954Fix available7.8 High
- linux, linux kernel +1 moremm/migrate_device: fix pgtable leak in migrate_vma_insert_huge_pmd_pageCVE-2026-63953Fix available5.5 Medium
- Show moreLoading…