Skip to contentLinux Kernel vulnerabilities
- linux, linux kernel +1 mores390/pkey: Check length in PKEY_VERIFYPROTK ioctlCVE-2026-64559Fix available7.8 High
- linux, linux kernel +1 mores390/pkey: Check length in pkey_pckmo handler implementationCVE-2026-64558Fix available7.8 High
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()CVE-2026-64557Fix available8.8 High
- linux, linux kernel +1 moreperf/core: Detach event groups during remove_on_execCVE-2026-64556Fix available7.8 High
- linux, linux kernel +1 morenetfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()CVE-2026-64554Fix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morevirtio-net: fix len check in receive_big()CVE-2026-64552Fix available8.4 High
- linux, linux kernel +1 moresctp: validate STALE_COOKIE cause length before reading stalenessCVE-2026-64551Fix available9.1 Critical
- linux, linux kernel +1 morebpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()CVE-2026-64548Fix available8.4 High
- linux, linux kernel +1 morenet: usb: net1080: validate packet_len before pad-byte access in rx_fixupCVE-2026-64547Fix available8.1 High
- linux, linux kernel +1 moredrm/edid: fix OOB read in drm_parse_tiled_block()CVE-2026-64546Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet, bpf: check master for NULL in xdp_master_redirect()CVE-2026-64545Fix available7.5 High
- linux, linux kernel +1 moretipc: fix use-after-free of the discoverer in tipc_disc_rcv()CVE-2026-64543Fix available7.8 High
- linux, linux kernel +1 morenet/smc: fix UAF in smc_cdc_rx_handler() by pinning the socketCVE-2026-64541Fix available9.8 Critical
- linux, linux kernel +1 moreusbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()CVE-2026-64540Fix available8.1 High
- linux, linux kernel +1 moreBluetooth: eir: Fix stack OOB write when prepending the Flags ADCVE-2026-64539Fix available7.8 High
- linux, linux kernel +1 morecan: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_taskletCVE-2026-17523Fix available7.8 High
- linux, linux kernel +1 morefs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}CVE-2026-64532Fix available7.8 High
- linux, linux kernel +1 morenet: openvswitch: reject oversized nested action attrsCVE-2026-64531Public exploitFix available7.8 High
- linux, linux kernel +1 morenet/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handleCVE-2026-64530Fix available9.8 Critical
- linux, linux kernel +1 morecrypto: qat - remove unused character device and IOCTLsCVE-2026-64529Fix available7.8 High
- linux, linux kernel +1 moredrm/hyperv: validate resolution_count and fix WIN8 fallbackCVE-2026-64524Fix available7.7 High
- linux, linux kernel +1 morenet/handshake: Take a long-lived file reference at submitCVE-2026-64523Fix available9.8 Critical
- linux, linux kernel +1 morenet/mlx5e: Fix eswitch mode block underflow on IPsec acquire SACVE-2026-64522Fix available8.8 High
- linux, linux kernel +1 morewifi: mac80211: fix MLE defragmentationCVE-2026-64515Fix available8.3 High
- linux, linux kernel +1 moreACPI: NFIT: core: Fix possible NULL pointer dereferenceCVE-2026-64511Fix available5.5 Medium
- linux, linux kernel +1 moreACPI: NFIT: core: Fix acpi_nfit_init() error cleanupCVE-2026-64510Fix available7.0 High
- linux, linux kernel +1 morerust: block: fix GenDisk cleanup pathsCVE-2026-64509Fix available5.5 Medium
- linux, linux kernel +1 morebpf: Support for hardening against JIT sprayingCVE-2026-64508Fix available5.5 Medium
- linux, linux kernel +1 morex86/bugs: Enable IBPB flush on BPF JIT allocationCVE-2026-64507Public exploitFix available5.5 Medium
- linux, linux kernel +1 morewifi: rtw89: correct drop logic for malformed AMPDU framesCVE-2026-64506Fix available5.5 Medium
- linux, linux kernel +1 moreusb: gadget: function: rndis: add length check for headerCVE-2026-64505Fix available5.5 Medium
- linux, linux kernel +1 moreiio: accel: bmc150: clamp the device-reported FIFO frame countCVE-2026-64504Fix available5.5 Medium
- linux, linux kernel +1 moreiio: event: Fix event FIFO reset raceCVE-2026-64496Fix available7.1 High
- linux, linux kernel +1 moreALSA: virtio: Validate control metadata from the deviceCVE-2026-64490Fix available8.4 High
- linux, linux kernel +1 moreALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parserCVE-2026-64487Fix available7.1 High
- linux, linux kernel +1 moreALSA: compress: Fix task creation error unwindCVE-2026-64485Fix available7.8 High
- linux, linux kernel +1 moreALSA: hda/cs35l41: Fix firmware load work teardownCVE-2026-64481Fix available7.8 High
- linux, linux kernel +1 moreALSA: ice1712: check snd_ctl_new1() return valueCVE-2026-64480Fix available5.5 Medium
- linux, linux kernel +1 moreALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()CVE-2026-64479Fix available3.3 Low
- linux, linux kernel +1 moreALSA: usb-audio: avoid kobject path lookup in DualSense matchCVE-2026-64478Fix available5.5 Medium
- linux, linux kernel +1 morex86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabledCVE-2026-64477Fix available7.1 High
- linux, linux kernel +1 morevfio/pci: Latch disable_idle_d3 per deviceCVE-2026-64476Fix available5.5 Medium
- linux, linux kernel +1 morevfio/pci: Release the VGA arbiter client on register_device() failureCVE-2026-64475Fix available8.8 High
- linux, linux kernel +1 morevfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arcCVE-2026-64474Fix available5.5 Medium
- linux, linux kernel +1 morevfio: Remove device debugfs before releasing devresCVE-2026-64473Fix available5.5 Medium
- linux, linux kernel +1 morevfio/mlx5: Fix racy bitfields and tighten struct layoutCVE-2026-64472Fix available5.5 Medium
- linux, linux kernel +1 moreBluetooth: btusb: fix use-after-free on registration failureCVE-2026-64471Fix available7.8 High
- linux, linux kernel +1 moreBluetooth: btusb: fix use-after-free on marvell probe failureCVE-2026-64470Fix available7.8 High
- linux, linux kernel +1 morebinder: fix UAF in binder_thread_release()CVE-2026-64469Fix available7.8 High
- linux, linux kernel +1 morebinder: fix UAF in binder_free_transaction()CVE-2026-64468Public exploitFix available7.8 High
- Show moreLoading…