Skip to contentLinux Kernel vulnerabilities
- linux, linux kernel +1 moreaccel/ivpu: Add bounds check for firmware runtime memoryCVE-2026-53206Fix available5.5 Medium
- linux, linux kernel +1 moreaccel/ivpu: Add bounds checks for firmware log indicesCVE-2026-53205Fix available7.1 High
- linux, linux kernel +1 morefirmware: stratix10-rsu: Fix NULL deref on rsu_send_msg() timeout in probeCVE-2026-53204Fix available5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreaccel/ivpu: Add buffer overflow check in MS get_info_ioctlCVE-2026-53203Fix available7.1 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreaccel/ivpu: Fix signed integer truncation in IPC receiveCVE-2026-53202Fix available7.8 High
- linux, linux kernel +1 moreRevert "drm/xe: Skip exec queue schedule toggle if queue is idle during suspend"CVE-2026-53201Fix available7.8 High
- linux, linux kernel +1 moreKVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNXCVE-2026-53200Fix available8.8 High
- linux, linux kernel +1 morehv_netvsc: use kmap_local_page in netvsc_copy_to_send_bufCVE-2026-53199Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCELCVE-2026-53198Fix available8.8 High
- linux, linux kernel +1 morexfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state()CVE-2026-53197Fix available5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +14 more +16 moreUSB: serial: io_ti: fix heap overflow in get_manuf_info()CVE-2026-53196Fix available6.8 Medium
- linux, linux kernel +1 moreUSB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()CVE-2026-53195Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreUSB: serial: kl5kusb105: fix bulk-out buffer overflowCVE-2026-53194Fix available7.8 High
- linux, linux kernel +1 moreALSA: timer: Forcibly close timer instances at closingCVE-2026-53193Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreALSA: timer: Fix UAF at snd_timer_user_params()CVE-2026-53192Fix available7.8 High
- linux, linux kernel +1 moreio_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retriesCVE-2026-53191Fix available7.8 High
- linux, linux kernel +1 moredrm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait()CVE-2026-53190Fix available5.5 Medium
- linux, linux kernel +1 moremm/huge_memory: update file PMD counter before folio_put()CVE-2026-53189Fix available7.8 High
- linux, linux kernel +1 moreRDMA/core: Validate the passed in fops for ib_get_ucaps()CVE-2026-53188Fix available8.8 High
- linux, linux kernel +1 moreRDMA/core: Validate cpu_id against nr_cpu_ids in DMAH allocCVE-2026-53187Fix available7.1 High
- linux, linux kernel +1 moreRDMA/srp: bound SRP_RSP sense copy by the received lengthCVE-2026-53186Fix available9.1 Critical
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morezram: fix use-after-free in zram_bvec_write_partial()CVE-2026-53185Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreudp: clear skb->dev before running a sockmap verdictCVE-2026-53184Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremptcp: allow subflow rcv wnd to shrinkCVE-2026-53183Fix available7.5 High
- linux, linux kernel +1 morewifi: nl80211: reject oversized EMA RNR listsCVE-2026-53182Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morevsock/vmci: fix sk_ack_backlog leak on failed handshakeCVE-2026-53181Fix available5.5 Medium
- linux, linux kernel +1 moretimers/migration: Fix livelock in tmigr_handle_remote_up()CVE-2026-53180Fix available7.5 High
- linux, linux kernel +1 morestaging: rtl8723bs: fix buffer over-read in rtw_update_protectionCVE-2026-53179Fix available7.1 High
- linux, linux kernel +1 morestaging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtractionCVE-2026-53178Fix available8.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebnxt_en: Fix NULL pointer dereferenceCVE-2026-53177Fix available5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreIB/isert: Reject login PDUs shorter than ISER_HEADERS_LENCVE-2026-53176Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreinet: frags: fix use-after-free caused by the fqdir_pre_exit() flushCVE-2026-53175Fix available9.8 Critical
- linux, linux kernel +1 moreovl: keep err zero after successful ovl_cache_get()CVE-2026-53174Fix available7.8 High
- linux, linux kernel +1 moreaccel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validate()CVE-2026-53173Fix available7.8 High
- linux, linux kernel +1 moreaccel/ethosu: fix IFM region index out-of-bounds in command stream parserCVE-2026-53172Fix available7.8 High
- linux, linux kernel +1 moreaccel/ethosu: fix arithmetic issues in dma_length()CVE-2026-53171Fix available8.8 High
- linux, linux kernel +1 moreaccel/ethosu: reject DMA commands with uninitialized lengthCVE-2026-53170Fix available8.8 High
- linux, linux kernel +1 moreaccel/ethosu: reject NPU_OP_RESIZE commands from userspaceCVE-2026-53169Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morefuse: reject fuse_notify() pagecache ops on directoriesCVE-2026-53168Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morefuse: limit FUSE_NOTIFY_RETRIEVE to uptodate foliosCVE-2026-53167Fix available5.5 Medium
- linux, linux kernel +1 moreiomap: avoid potential null folio->mapping deref during error reportingCVE-2026-53165Fix available7.5 High
- linux, linux kernel +1 moreiommu/dma: Do not try to iommu_map a 0 length region in swiotlbCVE-2026-53164Fix available5.5 Medium
- linux, linux kernel +1 morelocking/rtmutex: Skip remove_waiter() when waiter is not enqueuedCVE-2026-53163Fix available5.5 Medium
- linux, linux kernel +1 morememcg: use round-robin victim selection in refill_stockCVE-2026-53162Fix available7.8 High
- linux, linux kernel +1 moremisc: fastrpc: fix use-after-free of fastrpc_user in workqueue contextCVE-2026-53161Fix available7.8 High
- linux, linux kernel +1 moremisc: fastrpc: fix use-after-free race in fastrpc_map_createCVE-2026-53160Fix available7.8 High
- linux, linux kernel +1 moremisc: fastrpc: fix DMA address corruption due to find_vma misuseCVE-2026-53159Fix available8.8 High
- linux, linux kernel +1 moremisc: fastrpc: Fix NULL pointer dereference in rpmsg callbackCVE-2026-53158Fix available5.5 Medium
- linux, linux kernel +1 morenet: phonet: free phonet_device after RCU grace periodCVE-2026-53157Public exploitFix available7.8 High
- linux, linux kernel +1 morenvmem: core: fix use-after-free bugs in error pathsCVE-2026-53156Fix available7.8 High
- Show moreLoading…