Skip to contentLinux Kernel vulnerabilities
- linux, linux kernel +1 morecxl: Fix race of nvdimm_bus object when creating nvdimm objectsCVE-2026-23348Fix available4.7 Medium
- linux, linux kernel +1 morecan: usb: f81604: correctly anchor the urb in the read bulk callbackCVE-2026-23347Fix available5.5 Medium
- linux, linux kernel +1 morearm64: io: Extract user memory type in ioremap_prot()CVE-2026-23346Fix available5.5 Medium
- linux, linux kernel +1 morearm64: gcs: Do not set PTE_SHARED on GCS mappings if FEAT_LPA2 is enabledCVE-2026-23345Fix available5.5 Medium
- linux, linux kernel +1 morecrypto: ccp - Fix use-after-free on error pathCVE-2026-23344Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morexdp: produce a warning when calculated tailroom is negativeCVE-2026-23343Fix available7.8 High
- linux, linux kernel +1 morebpf: Fix race in cpumap on PREEMPT_RTCVE-2026-23342Fix available4.7 Medium
- linux, linux kernel +1 moreaccel/amdxdna: Fix crash when destroying a suspended hardware contextCVE-2026-23341Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscsCVE-2026-23340Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenfc: nci: free skb on nci_transceive early error pathsCVE-2026-23339Fix available5.5 Medium
- linux, linux kernel +1 moredrm/amdgpu/userq: Do not allow userspace to trivially triger kernel warningsCVE-2026-23338Fix available5.5 Medium
- linux, linux kernel +1 morepinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config()CVE-2026-23337Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: cfg80211: cancel rfkill_block work in wiphy_unregister()CVE-2026-23336Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreRDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()CVE-2026-23335Fix available5.5 Medium
- linux, linux kernel +1 morecan: usb: f81604: handle short interrupt urb messages properlyCVE-2026-23334Fix available5.5 Medium
- linux, linux kernel +1 morecpufreq: intel_pstate: Fix crash during turbo disableCVE-2026-23332Fix available5.5 Medium
- linux, linux kernel +1 moreudp: Unhash auto-bound connected sk from 4-tuple hash table when disconnected.CVE-2026-23331Fix available5.5 Medium
- linux, linux kernel +1 morenfc: nci: complete pending data exchange on device closeCVE-2026-23330Fix available5.5 Medium
- linux, linux kernel +1 morelibie: don't unroll if fwlog isn't supportedCVE-2026-23329Fix available5.5 Medium
- linux, linux kernel +1 moreaccel/amdxdna: Fix NULL pointer dereference of mgmt_channCVE-2026-23328Fix available5.5 Medium
- linux, linux kernel +1 morecxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()CVE-2026-23327Fix available7.1 High
- linux, linux kernel +1 morexsk: Fix fragment node deletion to prevent buffer leakCVE-2026-23326Fix available7.8 High
- linux, linux kernel +1 morewifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()CVE-2026-23325Fix available7.1 High
- linux, linux kernel +1 morecan: usb: etas_es58x: correctly anchor the urb in the read bulk callbackCVE-2026-23324Fix available5.5 Medium
- linux, linux kernel +1 morehwmon: (macsmc) Fix regressions in Apple Silicon SMC hwmon driverCVE-2026-23323Fix available7.8 High
- linux, linux kernel +1 moreipmi: Fix use-after-free and list corruption on sender errorCVE-2026-23322Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moremptcp: pm: in-kernel: always mark signal+subflow endp as usedCVE-2026-23321Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morebpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shimCVE-2026-23319Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreALSA: usb-audio: Use correct version for UAC3 header validationCVE-2026-23318Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrm/vmwgfx: Return the correct value in vmw_translate_ptr functionsCVE-2026-23317Fix available7.8 High
- linux, linux kernel +1 morenet: ipv4: fix ARM64 alignment fault in multipath hash seedCVE-2026-23316Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()CVE-2026-23315Fix available7.1 High
- linux, linux kernel +1 moreregulator: bq257xx: Fix device node reference leak in bq257xx_reg_dt_parse_gpio()CVE-2026-23314Fix available5.5 Medium
- linux, linux kernel +1 morei40e: Fix preempt count leak in napi poll tracepointCVE-2026-23313Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: usb: kaweth: validate USB endpointsCVE-2026-23312Fix available5.5 Medium
- linux, linux kernel +1 moreperf/core: Fix invalid wait context in ctx_sched_in()CVE-2026-23311Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loadedCVE-2026-23310Fix available5.5 Medium
- linux, linux kernel +1 moretracing: Add NULL pointer check to trigger_data_free()CVE-2026-23309Fix available5.5 Medium
- linux, linux kernel +1 morepinctrl: equilibrium: fix warning trace on loadCVE-2026-23308Fix available5.5 Medium
- linux, linux kernel +1 morecan: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a messageCVE-2026-23307Fix available5.5 Medium
- linux, linux kernel +1 morescsi: pm8001: Fix use-after-free in pm8001_queue_command()CVE-2026-23306Fix available7.8 High
- linux, linux kernel +1 moreaccel/rocket: fix unwinding in error path in rocket_probeCVE-2026-23305Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()CVE-2026-23304Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresmb: client: Don't log plaintext credentials in cifs_set_cifscredsCVE-2026-23303Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: annotate data-races around sk->sk_{data_ready,write_space}CVE-2026-23302Fix available4.7 Medium
- linux, linux kernel +1 moreASoC: SDCA: Add allocation failure check for Entity nameCVE-2026-23301Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet: ipv6: fix panic when IPv4 route references loopback IPv6 nexthopCVE-2026-23300Fix available5.5 Medium
- linux, linux kernel +1 moreBluetooth: purge error queues in socket destructorsCVE-2026-23299Fix available5.5 Medium
- linux, linux kernel +1 morecan: ucan: Fix infinite loop from zero-length messagesCVE-2026-23298Fix available5.5 Medium
- linux, linux kernel +1 morenfsd: Fix cred ref leak in nfsd_nl_threads_set_doit().CVE-2026-23297Fix available5.5 Medium
- Show moreLoading…