Skip to contentLinux Kernel vulnerabilities
- linux, linux kernel +1 moretty: hvc_iucv: fix off-by-one in number of supported devicesCVE-2026-53306Fix available5.5 Medium
- linux, linux kernel +1 moreusb: typec: ps883x: Fix Oops at unbindCVE-2026-53305Fix available5.5 Medium
- linux, linux kernel +1 morescsi: sg: Resolve soft lockup issue when opening /dev/sgXCVE-2026-53304Fix available5.5 Medium
- linux, linux kernel +1 moref2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()CVE-2026-53303Fix available7.1 High
- linux, linux kernel +1 morecrypto: eip93 - fix hmac setkey algo selectionCVE-2026-53302Fix available5.5 Medium
- linux, linux kernel +1 morereset: amlogic: t7: Fix null reset opsCVE-2026-53301Fix available5.5 Medium
- linux, linux kernel +1 morenet: enetc: fix NTMP DMA use-after-free issueCVE-2026-53300Fix available7.8 High
- linux, linux kernel +1 morenet: airoha: Move ndesc initialization at end of airoha_qdma_init_tx()CVE-2026-53299Fix available5.5 Medium
- linux, linux kernel +1 morenet: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue()CVE-2026-53298Fix available5.5 Medium
- linux, linux kernel +1 morenet: mana: Guard mana_remove against double invocationCVE-2026-53297Fix available5.5 Medium
- linux, linux kernel +1 moremailbox: mailbox-test: free channels on probe errorCVE-2026-53296Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremailbox: add sanity check for channel arrayCVE-2026-53295Fix available5.5 Medium
- linux, linux kernel +1 moremailbox: mailbox-test: don't free the reused channelCVE-2026-53294Fix available7.8 High
- linux, linux kernel +1 moredrm/amdgpu: fix AMDGPU_INFO_READ_MMR_REGCVE-2026-53293Fix available5.5 Medium
- linux, linux kernel +1 morenet: phonet: do not BUG_ON() in pn_socket_autobind() on failed bindCVE-2026-53292Fix available5.5 Medium
- linux, linux kernel +1 moreALSA: hda/conexant: Fix missing error check for jack detectionCVE-2026-53291Fix available5.5 Medium
- linux, linux kernel +1 moredrm/xe/eustall: Fix drm_dev_put called before stream disable in closeCVE-2026-53290Fix available7.8 High
- linux, linux kernel +1 moreice: fix NULL pointer dereference in ice_reset_all_vfs()CVE-2026-53289Fix available5.5 Medium
- linux, linux kernel +1 morearm64: Reserve an extra page for early kernel mappingCVE-2026-53288Fix available5.5 Medium
- linux, linux kernel +1 moreaudit: fix incorrect inheritable capability in CAPSET recordsCVE-2026-53287Fix available5.5 Medium
- linux, linux kernel +1 moreidpf: fix double free and use-after-free in aux device error pathsCVE-2026-53286Fix available7.8 High
- linux, linux kernel +1 moredrm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLEDCVE-2026-53285Fix available5.5 Medium
- linux, linux kernel +1 morebtrfs: only release the dirty pages io tree after successful writesCVE-2026-53284Fix available7.5 High
- linux, linux kernel +1 moreiommu/amd: Bounds-check devid in __rlookup_amd_iommu()CVE-2026-53283Fix available5.5 Medium
- linux, linux kernel +1 morex86/kexec: Push kjump return address even for non-kjump kexecCVE-2026-53282Fix available5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreiommu/vt-d: Avoid NULL pointer dereference or refcount corruptionCVE-2026-53281Fix available8.8 High
- linux, linux kernel +1 moreiommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done()CVE-2026-53280Fix available5.5 Medium
- linux, linux kernel +1 moredrm/gma500/oaktrail_lvds: fix hang on init failureCVE-2026-53279Fix available5.5 Medium
- linux, linux kernel +1 morearm_mpam: Check whether the config array is allocated before destroying itCVE-2026-53278Fix available5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreKVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulationCVE-2026-53277Fix available8.8 High
- linux, linux kernel +1 moreBluetooth: ISO: Fix a use-after-free of the hci_conn pointerCVE-2026-53276Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreipv6: mcast: Fix use-after-free when processing MLD queriesCVE-2026-53275Fix available8.8 High
- linux, linux kernel +1 morenet/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoSCVE-2026-53274Fix available5.5 Medium
- linux, linux kernel +1 moretee: optee: prevent use-after-free when the client exits before the supplicantCVE-2026-53273Fix available7.8 High
- linux, linux kernel +1 moreerofs: fix use-after-free on sbi->sync_decompressCVE-2026-53272Fix available7.8 High
- linux, linux kernel +1 moreksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiersCVE-2026-53271Fix available5.5 Medium
- linux, linux kernel +1 moreipvs: clear the svc scheduler ptr early on editCVE-2026-53270Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: synproxy: add mutex to guard hook reference countingCVE-2026-53269Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: conntrack_irc: fix possible out-of-bounds readCVE-2026-53268Fix available8.2 High
- linux, linux kernel +1 morenetfilter: nft_ct: bail out on template ct in get evalCVE-2026-53267Fix available7.8 High
- linux kernel, linux +1 morenetfilter: bridge: make ebt_snat ARP rewrite writableCVE-2026-53266In KEVPublic exploitFix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredm cache policy smq: check allocation under invalidate lockCVE-2026-53265Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet/sched: act_api: use RCU with deferred freeing for action lifecycleCVE-2026-53264Public exploitFix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 more6lowpan: fix off-by-one in multicast context address compressionCVE-2026-53263Fix available5.5 Medium
- linux, linux kernel +1 morel2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()CVE-2026-53262Fix available7.8 High
- linux, linux kernel +1 moredevlink: Release nested relation on devlink freeCVE-2026-53261Fix available5.5 Medium
- linux, linux kernel +1 moretcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().CVE-2026-53260Fix available9.8 Critical
- linux, linux kernel +1 moreipv6: anycast: insert aca into global hash under idev->lockCVE-2026-53259Fix available7.8 High
- linux, linux kernel +1 morewifi: fix leak if split 6 GHz scanning failsCVE-2026-53258Fix available5.5 Medium
- linux, linux kernel +1 morewifi: cfg80211: enforce HE/EHT cap/oper consistencyCVE-2026-53257Fix available5.5 Medium
- Show moreLoading…