Skip to contentLinux Kernel vulnerabilities
- linux, linux kernel +1 morebpf: Fix use-after-free in arena_vm_close on forkCVE-2026-45837Fix available7.8 High
- linux, linux kernel +1 morecrypto: algif_aead - snapshot IV for async AEAD requestsCVE-2026-46028Fix available5.5 Medium
- linux, linux kernel +1 morerxrpc: Fix conn-level packet handling to unshare RESPONSE packetsCVE-2026-46000Fix available5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +8 more +10 morerxrpc: Fix potential UAF after skb_unshare() failureCVE-2026-45998Fix available7.8 High
- linux, linux kernel +1 moreapparmor: fix NULL pointer dereference in __unix_needs_revalidationCVE-2026-45966Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()CVE-2026-45836Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()CVE-2026-45835Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()CVE-2026-45834Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet/rds: handle zerocopy send cleanup before the message is queuedCVE-2026-43502Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreipv6: rpl: reserve mac_len headroom when recompressed SRH growsCVE-2026-43501Public exploitFix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morertmutex: Use waiter::task instead of current in remove_waiter()CVE-2026-43499Public exploitFix available7.8 High
- linux, linux kernel +1 moreaccel/ivpu: Disallow re-exporting imported GEM objectsCVE-2026-43498Fix available7.8 High
- linux, linux kernel +1 morefbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-freeCVE-2026-43497Fix available7.3 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peekedCVE-2026-43496Fix available5.5 Medium
- linux, linux kernel +1 morenet: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handlerCVE-2026-43495Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morenet/rds: reset op_nents when zerocopy page pin failsCVE-2026-43494Public exploitFix available7.8 High
- linux, linux kernel, red hat nvidia for rhel 10 +28 more +30 morenet: skbuff: propagate shared-frag marker through frag-transfer helpersCVE-2026-43503Public exploitFix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecrypto: pcrypt - Fix handling of MAY_BACKLOG requestsCVE-2026-43493Fix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morelib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()CVE-2026-43492Fix available5.5 Medium
- linux, linux kernel +1 morenet: qrtr: ns: Limit the maximum server registration per nodeCVE-2026-43491Fix available5.5 Medium
- debian linux, linux kernel, red hat nvidia for rhel 10 +25 more +27 moreptrace: slightly saner 'get_dumpable()' logicCVE-2026-46333Public exploitFix available7.1 High
- linux, linux kernel +1 moreksmbd: validate inherited ACE SID lengthCVE-2026-43490Fix available8.8 High
- linux kernel, linux, red hat nvidia for rhel 10 +38 more +40 morenet: skbuff: preserve shared-frag marker during coalescingCVE-2026-46300In KEVPublic exploitFix availableEPSS 16.1%7.8 High
- linux, linux kernel +1 moreliveupdate: luo_file: remember retrieve() statusCVE-2026-43489Fix available5.5 Medium
- linux, linux kernel +1 moreusb: xhci: Prevent interrupt storm on host controller error (HCE)CVE-2026-43488Fix available5.5 Medium
- linux, linux kernel +1 moreata: libata-core: Disable LPM on ST1000DM010-2EP102CVE-2026-43487Fix available5.5 Medium
- linux, linux kernel +1 morearm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faultsCVE-2026-43486Fix available5.5 Medium
- linux, linux kernel +1 morenouveau/gsp: drop WARN_ON in ACPI probesCVE-2026-43485Fix available5.5 Medium
- linux, linux kernel +1 moremmc: core: Avoid bitfield RMW for claim/retune flagsCVE-2026-43484Fix available5.5 Medium
- linux, linux kernel +1 moreKVM: SVM: Set/clear CR8 write interception when AVIC is (de)activatedCVE-2026-43483Fix available5.5 Medium
- linux, linux kernel +1 moresched_ext: Disable preemption between scx_claim_exit() and kicking helper workCVE-2026-43482Fix available5.5 Medium
- linux, linux kernel +1 morenet-shapers: don't free reply skb after genlmsg_reply()CVE-2026-43481Fix available7.8 High
- linux, linux kernel +1 moreASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisitionCVE-2026-43480Fix available5.5 Medium
- linux, linux kernel +1 morenet: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnectCVE-2026-43479Fix available5.5 Medium
- linux, linux kernel +1 moreASoC: codecs: rt1011: Use component to get the dapm context in spk_mode_putCVE-2026-43478Fix available5.5 Medium
- linux, linux kernel +1 moredrm/i915/vrr: Configure VRR timings after enabling TRANS_DDI_FUNC_CTLCVE-2026-43477Fix available5.5 Medium
- linux, linux kernel +1 moreiio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()CVE-2026-43476Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 morerxrpc: Also unshare DATA/RESPONSE packets when paged frags are presentCVE-2026-43500Public exploitFix availableEPSS 94.1%7.8 High
- linux, linux kernel +1 morescsi: storvsc: Fix scheduling while atomic on PREEMPT_RTCVE-2026-43475Fix available5.5 Medium
- linux, linux kernel +1 morefs: init flags_valid before calling vfs_fileattr_getCVE-2026-43474Fix available5.5 Medium
- linux, linux kernel +1 morescsi: mpi3mr: Add NULL checks when resetting request and reply queuesCVE-2026-43473Fix available5.5 Medium
- linux, linux kernel +1 moreunshare: fix unshare_fs() handlingCVE-2026-43472Fix available5.5 Medium
- linux, linux kernel +1 morescsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace()CVE-2026-43471Fix available5.5 Medium
- linux, linux kernel +1 morenfs: return EISDIR on nfs3_proc_create if d_alias is a dirCVE-2026-43470Fix available5.5 Medium
- linux, linux kernel +1 morexprtrdma: Decrement re_receiving on the early exit pathsCVE-2026-43469Fix available7.5 High
- linux, linux kernel +1 morenet/mlx5: Fix deadlock between devlink lock and esw->wqCVE-2026-43468Fix available5.5 Medium
- linux, linux kernel +1 morenet/mlx5: Fix crash when moving to switchdev modeCVE-2026-43467Fix available5.5 Medium
- linux, linux kernel +1 morenet/mlx5e: Fix DMA FIFO desync on error CQE SQ recoveryCVE-2026-43466Fix available8.2 High
- linux, linux kernel +1 morenet/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQCVE-2026-43465Fix available9.8 Critical
- linux, linux kernel +1 morenet/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQCVE-2026-43464Fix available7.5 High
- Show moreLoading…