Skip to contentLinux Kernel vulnerabilities
- linux, linux kernel +1 morecrypto: chacha20poly1305 - validate poly1305 template argumentCVE-2026-64314Fix available5.5 Medium
- linux, linux kernel +1 morecrypto: ecc - Fix carry overflow in vli multiplicationCVE-2026-64313Fix available8.8 High
- linux, linux kernel +1 morecrypto: pcrypt - restore callback for non-parallel fallbackCVE-2026-64312Fix available7.5 High
- linux, linux kernel +1 morecrypto: loongson - Remove broken and unused loongson-rngCVE-2026-64311Fix available7.8 High
- linux, linux kernel +1 morecrypto: ccp - Do not initialize SNP for SEV ioctlsCVE-2026-64310Fix available5.5 Medium
- linux, linux kernel +1 morecrypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)CVE-2026-64309Fix available5.5 Medium
- linux, linux kernel +1 morecrypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)CVE-2026-64308Fix available5.5 Medium
- linux, linux kernel +1 morecrypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)CVE-2026-64307Fix available5.5 Medium
- linux, linux kernel +1 morecrypto: drbg - Fix returning success on failure in CTR_DRBGCVE-2026-64306Fix available5.5 Medium
- linux, linux kernel +1 morecrypto: qat - protect service table iterations with service_lockCVE-2026-64305Fix available7.8 High
- linux, linux kernel +1 morecrypto: qat - validate RSA CRT component lengthsCVE-2026-64304Fix available7.8 High
- linux, linux kernel +1 morespi: fsl-lpspi: terminate the RX channel on TX prepare failure pathCVE-2026-64303Fix available9.8 Critical
- linux, linux kernel +1 morex86/mm: Fix freeing of PMD-sized vmemmap pagesCVE-2026-64302Fix available5.5 Medium
- linux, linux kernel +1 moreregulator: scmi: fix of_node refcount leak in scmi_regulator_probe()CVE-2026-64301Fix available5.5 Medium
- linux, linux kernel +1 moreperf/aux: Fix page UAF in map_range()CVE-2026-64300Fix available7.8 High
- linux, linux kernel +1 moretracing: Prevent out-of-bounds read in glob matchingCVE-2026-64299Fix available7.1 High
- linux, linux kernel +1 moreNFSv4: include MAY_WRITE in open permission mask for O_TRUNCCVE-2026-64298Fix available7.1 High
- linux, linux kernel +1 moremodule: decompress: check return value of module_extend_max_pages()CVE-2026-64297Fix available5.5 Medium
- linux, linux kernel +1 moreexfat: bound uniname advance in exfat_find_dir_entry()CVE-2026-64296Fix available7.8 High
- linux, linux kernel +1 moremm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN accessCVE-2026-64295Fix available5.5 Medium
- linux, linux kernel +1 moremm: do file ownership checks with the proper mount idmapCVE-2026-64294Fix available5.5 Medium
- linux, linux kernel +1 moreiommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq readCVE-2026-64293Fix available7.8 High
- linux, linux kernel +1 moreiommufd: Move vevent memory allocation outside spinlockCVE-2026-64292Fix available5.5 Medium
- linux, linux kernel +1 moreiommufd: Set veventq_depth upper boundCVE-2026-64291Fix available5.5 Medium
- linux, linux kernel +1 moreiommufd: Break the loop on failure in iommufd_fault_fops_read()CVE-2026-64290Fix available5.5 Medium
- linux, linux kernel +1 moreiommufd: Set upper bounds on cache invalidation entry_num and entry_lenCVE-2026-64289Fix available5.5 Medium
- linux, linux kernel +1 moreKVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLBCVE-2026-64288Fix available5.5 Medium
- linux, linux kernel +1 moreKVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPUCVE-2026-64287Fix available8.2 High
- linux, linux kernel +1 moreKVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPUCVE-2026-64286Fix available8.2 High
- linux, linux kernel +1 moreKVM: SEV: Pin source page for write when adding CPUID data for SNP guestCVE-2026-64285Fix available5.5 Medium
- linux, linux kernel +1 moreKVM: x86: Ensure vendor's exit handler runs before fastpath userspace exitsCVE-2026-64284Fix available7.1 High
- linux, linux kernel +1 moreKVM: guest_memfd: Treat memslot binding offset+size as unsigned valuesCVE-2026-64283Fix available7.0 High
- linux, linux kernel +1 moreKVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifierCVE-2026-64282Fix available4.7 Medium
- linux, linux kernel +1 moresvcrdma: wake sq waiters when the transport closesCVE-2026-64281Fix available7.5 High
- linux, linux kernel +1 morefpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()CVE-2026-64280Fix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morei2c: core: fix adapter deregistration raceCVE-2026-64279Fix available7.8 High
- linux, linux kernel +1 morei2c: imx-lpi2c: mark I2C adapter when hardware is powered downCVE-2026-64278Fix available5.5 Medium
- linux, linux kernel +1 moreInput: synaptics-rmi4 - bound the F3A keymap to the GPIO countCVE-2026-64277Fix available7.8 High
- linux, linux kernel +1 moreInput: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED countCVE-2026-64276Fix available7.8 High
- linux, linux kernel +1 moreInput: elan_i2c - prevent division by zero and arithmetic underflowCVE-2026-64275Fix available5.5 Medium
- linux, linux kernel +1 moreInput: goodix - clamp the device-reported contact countCVE-2026-64274Fix available7.8 High
- linux, linux kernel +1 moreInput: iforce - bound the device-reported force-feedback effect indexCVE-2026-64273Fix available7.8 High
- linux, linux kernel +1 moreInput: mms114 - fix touch indexing for MMS134S and MMS136CVE-2026-64272Fix available7.8 High
- linux, linux kernel +1 moreInput: touchwin - reset the packet index on every complete packetCVE-2026-64271Fix available7.8 High
- linux, linux kernel +1 moreInput: mms114 - reject an oversized device packet sizeCVE-2026-64270Fix available7.8 High
- linux, linux kernel +1 moreRDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sgCVE-2026-64269Fix available9.1 Critical
- linux, linux kernel +1 moreRDMA/siw: bound Read Response placement to the RREAD lengthCVE-2026-64268Fix available9.8 Critical
- linux, linux kernel +1 morefuse: avoid 32-bit prune notification count wrapCVE-2026-64267Fix available5.5 Medium
- linux, linux kernel +1 morefuse: re-lock request before returning from fuse_ref_folio()CVE-2026-64266Fix available7.8 High
- linux, linux kernel +1 morefuse: clear intr_entry in fuse_resend and fuse_remove_pending_reqCVE-2026-64265Fix available7.8 High
- Show moreLoading…