Skip to contentLinux Kernel vulnerabilities
- linux, linux kernel +1 moreaccel/qaic: Add overflow check to remap_pfn_range during mmapCVE-2026-64051Fix available7.8 High
- linux, linux kernel +1 moredrm/msm/dpu: don't mix devm and drmm functionsCVE-2026-64050Fix available7.8 High
- linux, linux kernel +1 moredrm/msm/adreno: fix userspace-triggered crash on a2xx-a4xxCVE-2026-64049Fix available5.5 Medium
- linux, linux kernel +1 morenet/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slotCVE-2026-64048Fix available7.5 High
- linux, linux kernel +1 morenet: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ringCVE-2026-64047Fix available9.8 Critical
- linux, linux kernel +1 morenet: tls: prevent chain-after-chain in plain text SGCVE-2026-64046Fix available9.8 Critical
- linux, linux kernel +1 moreovpn: tcp - use cached peer pointer in ovpn_tcp_close()CVE-2026-64045Fix available8.4 High
- linux, linux kernel +1 moreovpn: respect peer refcount in CMD_NEW_PEER error pathCVE-2026-64044Fix available7.8 High
- linux, linux kernel +1 moreovpn: fix race between deleting interface and adding new peerCVE-2026-64043Fix available4.7 Medium
- linux, linux kernel +1 morevfio/pci: Check BAR resources before exporting a DMABUFCVE-2026-64042Fix available8.8 High
- linux, linux kernel +1 moreASoC: codecs: fs210x: fix possible buffer overflowCVE-2026-64041Fix available7.8 High
- linux, linux kernel +1 morecachefiles: Fix error return when vfs_mkdir() failsCVE-2026-64040Fix available5.5 Medium
- linux, linux kernel +1 moredrm/msm/snapshot: fix dumping of the unaligned regionsCVE-2026-64039Fix available7.7 High
- linux, linux kernel +1 morehwmon: (lm90) Stop work before releasing hwmon deviceCVE-2026-64038Fix available4.7 Medium
- linux, linux kernel +1 morewifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabledCVE-2026-64037Fix available9.8 Critical
- linux, linux kernel +1 morecgroup/rstat: validate cpu before css_rstat_cpu() accessCVE-2026-64036Fix available7.8 High
- linux, linux kernel +1 moreigc: set tx buffer type for SMD framesCVE-2026-64035Fix available9.8 Critical
- linux, linux kernel +1 morenet: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA bufferCVE-2026-64034Fix available9.3 Critical
- linux, linux kernel +1 moreRDMA/rtrs: Fix use-after-free in path file creation cleanupCVE-2026-64033Fix available9.8 Critical
- linux, linux kernel +1 morebridge: mcast: Fix a possible use-after-free when removing a bridge portCVE-2026-64032Fix available7.8 High
- linux, linux kernel +1 moreerofs: fix managed cache race for unaligned extentsCVE-2026-64031Fix available7.8 High
- linux, linux kernel +1 morewifi: mac80211: bounds-check link_id in ieee80211_ml_epcsCVE-2026-64030Fix available8.8 High
- linux, linux kernel +1 moreALSA: seq: Serialize UMP output teardown with event_inputCVE-2026-64029Fix available7.8 High
- linux, linux kernel +1 moretracing: Avoid NULL return from hist_field_name() on truncationCVE-2026-64028Fix available5.5 Medium
- linux, linux kernel +1 morenet: shaper: rework the VALID marking (again)CVE-2026-64027Fix available7.8 High
- linux, linux kernel +1 morerxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsgCVE-2026-64026Fix available7.8 High
- linux, linux kernel +1 morebpf, skmsg: fix verdict sk_data_ready racing with ktls rxCVE-2026-64025Fix available9.8 Critical
- linux, linux kernel +1 moretcp: fix stale per-CPU tcp_tw_isn leak enabling ISN predictionCVE-2026-64024Fix available9.4 Critical
- linux, linux kernel +1 moregpio: aggregator: fix a potential use-after-freeCVE-2026-64023Fix available7.8 High
- linux, linux kernel +1 moregpio: aggregator: remove the software node when deactivating the aggregatorCVE-2026-64022Fix available5.5 Medium
- linux, linux kernel +1 moredrm/xe/oa: Fix exec_queue leak on width check in stream openCVE-2026-64021Fix available5.5 Medium
- linux, linux kernel +1 morenvme-pci: fix dma_vecs leak on p2p memoryCVE-2026-64020Fix available7.5 High
- linux, linux kernel +1 morenvme-pci: fix dma mapping leak on data setup errorCVE-2026-64019Fix available5.5 Medium
- linux, linux kernel +1 morenet: mana: validate rx_req_idx to prevent out-of-bounds array accessCVE-2026-64018Fix available9.3 Critical
- linux, linux kernel +1 moreblk-mq: pop cached request if it is usableCVE-2026-64017Fix available7.8 High
- linux, linux kernel +1 moreksmbd: fix durable reconnect error path file lifetimeCVE-2026-64016Fix available9.8 Critical
- linux, linux kernel +1 moresecurity/keys: fix missed RCU read section on lookupCVE-2026-64015Fix available7.8 High
- linux, linux kernel +1 moreInput: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer sizeCVE-2026-64014Fix available7.1 High
- linux, linux kernel +1 moreACPI: button: Fix ACPI GPE handler leak during removalCVE-2026-64013Fix available5.5 Medium
- linux, linux kernel +1 morenet/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peekedCVE-2026-64012Fix available5.5 Medium
- linux, linux kernel +1 morenfc: llcp: Fix use-after-free in llcp_sock_release()CVE-2026-64011Fix available7.8 High
- linux, linux kernel +1 morenfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc()CVE-2026-64010Fix available8.8 High
- linux, linux kernel +1 morexfrm: Check for underflow in xfrm_state_mtuCVE-2026-64009Fix available7.8 High
- linux, linux kernel +1 moreaccel/rocket: fix UAF via dangling GEM handle in create_boCVE-2026-64008Fix available7.8 High
- linux, linux kernel +1 morenetfilter: synproxy: refresh tcphdr after skb_ensure_writableCVE-2026-64007Fix available9.8 Critical
- linux, linux kernel +1 morenetfilter: nf_tables: fix dst corruption in same register operationCVE-2026-64006Fix available5.5 Medium
- linux, linux kernel +1 morenet/smc: Do not re-initialize smc hashtablesCVE-2026-64005Fix available7.8 High
- linux, linux kernel +1 morenet/iucv: fix locking in .getsockoptCVE-2026-64004Fix available7.8 High
- linux, linux kernel +1 morescsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queuesCVE-2026-64003Fix available7.5 High
- linux, linux kernel +1 moreipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()CVE-2026-64002Fix available7.8 High
- Show moreLoading…