Skip to contentLinux Kernel vulnerabilities
- linux, linux kernel +1 moreHID: multitouch: fix out-of-bounds bit access on mt_io_flagsCVE-2026-64364Fix available8.8 High
- linux, linux kernel +1 moreHID: appleir: fix UAF on pending key_up_timer in remove()CVE-2026-64363Fix available7.8 High
- linux, linux kernel +1 moreHID: lg-g15: cancel pending work on remove to fix a use-after-freeCVE-2026-64362Fix available7.8 High
- linux, linux kernel +1 morehfs/hfsplus: fix u32 overflow in check_and_correct_requested_lengthCVE-2026-64361Fix available7.8 High
- linux, linux kernel +1 morehfs/hfsplus: zero-initialize buffer in hfs_bnode_readCVE-2026-64360Fix available5.5 Medium
- linux, linux kernel +1 morenilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbersCVE-2026-64359Fix available5.5 Medium
- linux, linux kernel +1 moremedia: mtk-jpeg: cancel workqueue on release for supported platforms onlyCVE-2026-64358Fix available5.5 Medium
- linux, linux kernel +1 morexfs: fix exchmaps reservation limit checkCVE-2026-64357Fix available5.5 Medium
- linux, linux kernel +1 morexfs: fix memory leak in xfs_dqinode_metadir_create()CVE-2026-64356Fix available5.5 Medium
- linux, linux kernel +1 morebpf: Reject fragmented frames in devmapCVE-2026-64355Fix available9.8 Critical
- linux, linux kernel +1 morebpf: Validate BTF repeated field counts before expansionCVE-2026-64354Fix available7.8 High
- linux, linux kernel +1 morebpf: Keep dynamic inner array lookups nullableCVE-2026-64353Fix available5.5 Medium
- linux, linux kernel +1 morebpf: Allow LPM map access from sleepable BPF programsCVE-2026-64352Fix available7.8 High
- linux, linux kernel +1 morenet: usb: kalmia: bound RX frame length in kalmia_rx_fixup()CVE-2026-64351Fix available5.5 Medium
- linux, linux kernel +1 moreusb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()CVE-2026-64350Fix available5.5 Medium
- linux, linux kernel +1 moreusb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup()CVE-2026-64349Fix available5.5 Medium
- linux, linux kernel +1 moreusb: free iso schedules on failed submitCVE-2026-64348Fix available7.8 High
- linux, linux kernel +1 moreusb: gadget: composite: fix dead empty check in the USB_DT_OTG handlerCVE-2026-64347Fix available5.5 Medium
- linux, linux kernel +1 moreusb: gadget: udc: Fix use-after-free in gadget_match_driverCVE-2026-64346Fix available7.8 High
- linux, linux kernel +1 moreusb: gadget: f_printer: take kref only for successful openCVE-2026-64345Fix available5.5 Medium
- linux, linux kernel +1 moreUSB: idmouse: fix use-after-free on disconnect raceCVE-2026-64344Fix available7.8 High
- linux, linux kernel +1 moreUSB: ldusb: fix use-after-free on disconnect raceCVE-2026-64343Fix available7.8 High
- linux, linux kernel +1 moreUSB: iowarrior: fix use-after-free on disconnectCVE-2026-64342Fix available7.8 High
- linux, linux kernel +1 moreUSB: iowarrior: fix use-after-free on disconnect raceCVE-2026-64341Fix available7.8 High
- linux, linux kernel +1 moreUSB: legousbtower: fix use-after-free on disconnect raceCVE-2026-64340Fix available7.8 High
- linux, linux kernel +1 moreusb: misc: usbio: bound bulk IN response length to the received transferCVE-2026-64339Fix available7.1 High
- linux, linux kernel +1 moreUSB: misc: uss720: unregister parport on probe failureCVE-2026-64338Fix available5.5 Medium
- linux, linux kernel +1 moreusb: mtu3: unmap request DMA on queue failureCVE-2026-64337Fix available5.5 Medium
- linux, linux kernel +1 moreUSB: serial: keyspan_pda: fix information leakCVE-2026-64336Fix available5.5 Medium
- linux, linux kernel +1 moreUSB: serial: digi_acceleport: fix broken rx after throttleCVE-2026-64335Fix available5.5 Medium
- linux, linux kernel +1 moreUSB: serial: digi_acceleport: fix hard lockup on disconnectCVE-2026-64334Fix available5.5 Medium
- linux, linux kernel +1 moreUSB: serial: digi_acceleport: fix write buffer corruptionCVE-2026-64333Fix available7.8 High
- linux, linux kernel +1 moreUSB: ulpi: fix memory leak on registration failureCVE-2026-64332Fix available5.5 Medium
- linux, linux kernel +1 moreusbip: vudc: fix NULL deref in vep_dequeue()CVE-2026-64331Fix available5.5 Medium
- linux, linux kernel +1 moreusb: typec: tcpm: Validate SVID index in svdm_consume_modes()CVE-2026-64330Fix available7.8 High
- linux, linux kernel +1 moreusb: typec: ucsi: ccg: Fix use-after-free of ucsi on removeCVE-2026-64329Fix available7.8 High
- linux, linux kernel +1 moreusb: gadget: f_fs: Fix DMA fence leakCVE-2026-64328Fix available5.5 Medium
- linux, linux kernel +1 moreusb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checksCVE-2026-64327Fix available5.5 Medium
- linux, linux kernel +1 moreblock: skip sync_blockdev() on surprise removal in bdev_mark_dead()CVE-2026-64326Fix available5.5 Medium
- linux, linux kernel +1 morewifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beaconCVE-2026-64325Fix available5.5 Medium
- linux, linux kernel +1 moreudf: validate free block extents against the partition lengthCVE-2026-64324Fix available7.8 High
- linux, linux kernel +1 moreudf: validate VAT header length against the VAT inode sizeCVE-2026-64323Fix available7.1 High
- linux, linux kernel +1 moreudf: validate sparing table length as an entry count, not a byte countCVE-2026-64322Fix available7.8 High
- linux, linux kernel +1 morenvme: target: rdma: fix ndev refcount leak on queue connectCVE-2026-64321Fix available5.5 Medium
- linux, linux kernel +1 morenvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log PageCVE-2026-64320Fix available9.1 Critical
- linux, linux kernel +1 morenvmet-auth: validate reply message payload bounds against transfer lengthCVE-2026-64319Fix available9.1 Critical
- linux, linux kernel +1 morepartitions: aix: bound the pp_count scan to the ppe arrayCVE-2026-64318Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreisofs: bound Rock Ridge symlink components to the SL recordCVE-2026-64317Fix available7.1 High
- linux, linux kernel +1 morecrypto: caam - use print_hex_dump_devel to guard key hex dumpsCVE-2026-64316Fix available5.5 Medium
- linux, linux kernel +1 morecrypto: caam - use print_hex_dump_devel to guard key hex dumpsCVE-2026-64315Fix available7.0 High
- Show moreLoading…