Skip to contentLinux Kernel vulnerabilities
- linux, linux kernel +1 moreerofs: set fileio bio failed in short read caseCVE-2026-31514Fix available5.5 Medium
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_reqCVE-2026-31513Fix available8.1 High
- linux, linux kernel +1 moreBluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()CVE-2026-31512Fix available5.5 Medium
- linux, linux kernel +1 moreBluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_completeCVE-2026-31511Fix available7.8 High
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cbCVE-2026-31510Fix available5.5 Medium
- linux, linux kernel +1 morenfc: nci: fix circular locking dependency in nci_close_deviceCVE-2026-31509Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: openvswitch: Avoid releasing netdev before teardown completesCVE-2026-31508Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe bufferCVE-2026-31507Fix available7.8 High
- linux, linux kernel +1 morenet: bcmasp: fix double free of WoL irqCVE-2026-31506Fix available7.8 High
- linux, linux kernel +1 moreiavf: fix out-of-bounds writes in iavf_get_ethtool_stats()CVE-2026-31505Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: fix fanout UAF in packet_release() via NETDEV_UP raceCVE-2026-31504Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreudp: Fix wildcard bind conflict check when using hash2CVE-2026-31503Fix available5.5 Medium
- linux, linux kernel +1 moreteam: fix header_ops type confusion with non-Ethernet portsCVE-2026-31502Fix available7.8 High
- linux, linux kernel +1 morenet: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX pathCVE-2026-31501Fix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lockCVE-2026-31500Fix available7.8 High
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix deadlock in l2cap_conn_del()CVE-2026-31499Fix available5.5 Medium
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loopCVE-2026-31498Fix available5.5 Medium
- linux, linux kernel +1 moreBluetooth: btusb: clamp SCO altsetting table indicesCVE-2026-31497Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nf_conntrack_expect: skip expectations in other netns via procCVE-2026-31496Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ctnetlink: use netlink policy range checksCVE-2026-31495Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: macb: use the current queue number for statsCVE-2026-31494Fix available7.8 High
- linux, linux kernel +1 moreRDMA/efa: Fix use of completion ctx after freeCVE-2026-31493Fix available7.8 High
- linux, linux kernel +1 moreRDMA/irdma: Initialize free_qp completion before using itCVE-2026-31492Fix available5.5 Medium
- linux, linux kernel +1 moreRDMA/irdma: Harden depth calculation functionsCVE-2026-31491Fix available5.5 Medium
- linux, linux kernel +1 moredrm/xe/pf: Fix use-after-free in migration restoreCVE-2026-31490Fix available7.8 High
- linux, linux kernel +1 morespi: meson-spicc: Fix double-put in remove pathCVE-2026-31489Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +11 more +13 moredrm/amd/display: Do not skip unrelated mode changes in DSC validationCVE-2026-31488Fix available7.8 High
- linux, linux kernel +1 morespi: use generic driver_override infrastructureCVE-2026-31487Fix available5.5 Medium
- linux, linux kernel +1 morehwmon: (pmbus/core) Protect regulator operations with mutexCVE-2026-31486Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morespi: spi-fsl-lpspi: fix teardown order issue (UAF)CVE-2026-31485Fix available7.8 High
- linux, linux kernel +1 moreio_uring/fdinfo: fix OOB read in SQE_MIXED wrap checkCVE-2026-31484Fix available7.1 High
- linux, linux kernel +1 mores390/syscalls: Add spectre boundary for syscall dispatch tableCVE-2026-31483Fix available5.5 Medium
- linux, linux kernel +1 mores390/entry: Scrub r12 register on kernel entryCVE-2026-31482Fix available5.5 Medium
- linux, linux kernel +1 moretracing: Drain deferred trigger frees if kthread creation failsCVE-2026-31481Fix available5.5 Medium
- linux, linux kernel +1 moretracing: Fix potential deadlock in cpu hotplug with osnoiseCVE-2026-31480Fix available5.5 Medium
- linux, linux kernel +1 moredrm/xe: always keep track of remap prev/nextCVE-2026-31479Fix available7.8 High
- linux, linux kernel +1 moreksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()CVE-2026-31478Fix available9.8 Critical
- linux, linux kernel +1 moreksmbd: fix memory leaks and NULL deref in smb2_lock()CVE-2026-31477Fix available7.5 High
- linux, linux kernel +1 moreksmbd: do not expire session on binding failureCVE-2026-31476Fix available8.2 High
- linux, linux kernel +1 moreASoC: sma1307: fix double free of devm_kzalloc() memoryCVE-2026-31475Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 morecan: isotp: fix tx.buf use-after-free in isotp_sendmsg()CVE-2026-31474Fix available7.8 High
- linux, linux kernel +1 moremedia: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutexCVE-2026-31473Fix available7.8 High
- linux, linux kernel +1 morexfrm: iptfs: validate inner IPv4 header length in IPTFS payloadCVE-2026-31472Fix available5.5 Medium
- linux, linux kernel +1 morexfrm: iptfs: only publish mode_data after clone setupCVE-2026-31471Fix available7.8 High
- linux, linux kernel +1 morevirt: tdx-guest: Fix handling of host controlled 'quote' buffer lengthCVE-2026-31470Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morevirtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is falseCVE-2026-31469Fix available7.8 High
- linux, linux kernel +1 morevfio/pci: Fix double free in dma-buf featureCVE-2026-31468Fix available7.8 High
- linux, linux kernel +1 moreerofs: add GFP_NOIO in the bio completion if neededCVE-2026-31467Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremm/huge_memory: fix folio isn't locked in softleaf_to_folio()CVE-2026-31466Fix available4.7 Medium
- linux, linux kernel +1 morewriteback: don't block sync for filesystems with no data integrity guaranteesCVE-2026-31465Fix available5.5 Medium
- Show moreLoading…