Skip to contentLinux Kernel vulnerabilities
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ebtables: zero chainstack arrayCVE-2026-64413Fix available7.0 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ebtables: module names must be null-terminatedCVE-2026-64412Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ebtables: terminate table name before find_table_lock()CVE-2026-64411Fix available7.1 High
- linux, linux kernel +1 morenetfilter: flowtable: IPIP tunnel hardware offload is not yet supportCVE-2026-64410Fix available9.8 Critical
- linux, linux kernel +1 moreBluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()CVE-2026-64409Fix available5.5 Medium
- linux, linux kernel +1 moreBluetooth: bnep: pin L2CAP connection during netdev registrationCVE-2026-64408Fix available8.8 High
- linux, linux kernel +1 moreBluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()CVE-2026-64407Fix available7.1 High
- linux, linux kernel +1 moreBluetooth: fix UAF in bt_accept_dequeue()CVE-2026-64406Fix available8.0 High
- linux, linux kernel +1 moreBluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()CVE-2026-64405Fix available5.5 Medium
- linux, linux kernel +1 moreBluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()CVE-2026-64404Fix available5.5 Medium
- linux, linux kernel +1 moreBluetooth: L2CAP: validate option length before reading conf opt valueCVE-2026-64403Fix available7.1 High
- linux, linux kernel +1 morecoresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()CVE-2026-64402Fix available7.8 High
- linux, linux kernel +1 moresmb: client: resolve SWN tcon from live registrationsCVE-2026-64401Fix available7.8 High
- linux, linux kernel +1 moreksmbd: prevent path traversal bypass by restricting caseless retryCVE-2026-64400Fix available8.6 High
- linux, linux kernel +1 moreksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILECVE-2026-64399Fix available9.8 Critical
- linux, linux kernel +1 moreksmbd: add a permission check for FSCTL_SET_ZERO_DATACVE-2026-64398Fix available8.1 High
- linux, linux kernel +1 moreksmbd: serialize QUERY_DIRECTORY requests per fileCVE-2026-64397Fix available9.8 Critical
- linux, linux kernel +1 moreksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellationCVE-2026-64396Fix available8.8 High
- linux, linux kernel +1 moreksmbd: require source read access for duplicate extentsCVE-2026-64395Fix available7.5 High
- linux, linux kernel +1 moreksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITYCVE-2026-64394Fix available8.8 High
- linux, linux kernel +1 moreksmbd: run set info with opener credentialsCVE-2026-64393Fix available9.1 Critical
- linux, linux kernel +1 moreksmbd: use opener credentials for delete-on-closeCVE-2026-64392Fix available9.1 Critical
- linux, linux kernel +1 moreksmbd: use opener credentials for ADS I/OCVE-2026-64391Fix available9.8 Critical
- linux, linux kernel +1 moreksmbd: track the connection owning a byte-range lockCVE-2026-64390Fix available8.8 High
- linux, linux kernel +1 moreksmbd: validate NTLMv2 response before updating session keyCVE-2026-64389Fix available8.2 High
- linux, linux kernel +1 moresmb/client: fix chown/chgrp with SMB3 POSIX ExtensionsCVE-2026-64388Fix available7.8 High
- linux, linux kernel +1 moresmb: client: fix query directory replay double-freeCVE-2026-64387Fix available9.8 Critical
- linux, linux kernel +1 moresmb: client: fix query_info() replay double-freeCVE-2026-64386Fix available9.8 Critical
- linux, linux kernel +1 moresmb: client: fix double-free in SMB2_ioctl() replayCVE-2026-64385Fix available9.8 Critical
- linux, linux kernel +1 moresmb: client: fix change notify replay double-freeCVE-2026-64384Fix available9.8 Critical
- linux, linux kernel +1 moresmb: client: fix double-free in SMB2_flush() replayCVE-2026-64383Fix available9.8 Critical
- linux, linux kernel +1 moresmb: client: fix double-free in SMB2_open() replayCVE-2026-64382Fix available8.8 High
- linux, linux kernel +1 moresmb: client: Fix next buffer leak in receive_encrypted_standard()CVE-2026-64381Fix available7.8 High
- linux, linux kernel +1 moresmb: client: harden POSIX SID length parsingCVE-2026-64380Fix available8.2 High
- linux, linux kernel +1 moresmb: client: mask server-provided mode to 07777 in modefromsidCVE-2026-64379Fix available7.1 High
- linux, linux kernel +1 morewriteback: fix race between cgroup_writeback_umount() and inode_switch_wbs()CVE-2026-64378Fix available7.8 High
- linux, linux kernel +1 morecpufreq: qcom-cpufreq-hw: Fix possible double freeCVE-2026-64377Fix available7.8 High
- linux, linux kernel +1 morefirmware_loader: fix device reference leak in firmware_upload_register()CVE-2026-64376Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreproc: protect ptrace_may_access() with exec_update_lock (FD links)CVE-2026-64375Fix available7.8 High
- linux, linux kernel +1 moresched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RTCVE-2026-64374Fix available7.5 High
- linux, linux kernel +1 morecpufreq: Fix hotplug-suspend race during rebootCVE-2026-64373Fix available4.7 Medium
- linux, linux kernel +1 morecpufreq: pcc: fix use-after-free and double free in _OSC evaluationCVE-2026-64372Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreproc: protect ptrace_may_access() with exec_update_lock (part 1)CVE-2026-64371Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreposix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error pathCVE-2026-64370Fix available5.5 Medium
- linux, linux kernel +1 mores390: Revert support for DCACHE_WORD_ACCESSCVE-2026-64369Fix available5.5 Medium
- linux, linux kernel +1 moremm/slab: do not limit zeroing to orig_size when only red zoning is enabledCVE-2026-64368Fix available8.1 High
- linux, linux kernel +1 moreHID: hid-goodix-spi: validate report size to prevent stack buffer overflowCVE-2026-64367Fix available7.8 High
- linux, linux kernel +1 moreHID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insertCVE-2026-64366Fix available8.8 High
- linux, linux kernel +1 moreHID: letsketch: fix UAF on inrange_timer at driver unbindCVE-2026-64365Fix available7.8 High
- linux, linux kernel +1 moreHID: multitouch: fix out-of-bounds bit access on mt_io_flagsCVE-2026-64364Fix available8.8 High
- Show moreLoading…