Skip to contentLinux Kernel vulnerabilities
- linux, linux kernel +1 morerust_binder: clear freeze listener on node removalCVE-2026-64466Fix available5.5 Medium
- linux, linux kernel +1 moreusb: xhci: Fix sleep in atomic context in xhci_free_streams()CVE-2026-64465Fix available5.5 Medium
- linux, linux kernel +1 morexhci: sideband: fix ring sg table pages leakCVE-2026-64464Fix available5.5 Medium
- linux, linux kernel +1 moreusb: typec: tcpci_rt1711h: unregister TCPCI port with devresCVE-2026-64463Fix available7.8 High
- linux, linux kernel +1 morePCI: mediatek: Fix IRQ domain leak when port fails to enableCVE-2026-64461Fix available5.5 Medium
- linux, linux kernel +1 morePCI/IOV: Skip VF Resizable BAR restore on read errorCVE-2026-64460Fix available7.0 High
- linux, linux kernel +1 moremm/damon/ops-common: handle extreme intervals in damon_hot_score()CVE-2026-64458Fix available5.5 Medium
- linux, linux kernel +1 morevirtio_pci: fix vq info pointer lookup via wrong indexCVE-2026-64457Fix available5.5 Medium
- linux, linux kernel +1 morehwrng: virtio: clamp device-reported used.len at copy_data()CVE-2026-64456Fix available7.7 High
- linux, linux kernel +1 moreUSB: chaoskey: Fix slab-use-after-free in chaoskey_release()CVE-2026-64455Fix available7.8 High
- linux, linux kernel +1 moreusb: dwc3: run gadget disconnect from sleepable suspend contextCVE-2026-64454Fix available5.5 Medium
- linux, linux kernel +1 moreusb: misc: usbio: fix disconnect UAF in client teardownCVE-2026-64453Fix available7.8 High
- linux, linux kernel +1 more6lowpan: fix NHC entry use-after-free on error pathCVE-2026-64452Fix available7.1 High
- linux, linux kernel +1 moretracing: Fix NULL pointer dereference in func_set_flag()CVE-2026-64451Fix available5.5 Medium
- linux, linux kernel +1 moretipc: fix out-of-bounds read in broadcast Gap ACK blocksCVE-2026-64450Fix available9.1 Critical
- linux, linux kernel +1 morestaging: vme_user: bound slave read/write to the kern_buf sizeCVE-2026-64449Fix available7.8 High
- linux, linux kernel +1 moresmb: client: restrict implied bcc[0] exemption to responses without data areaCVE-2026-64448Fix available8.2 High
- linux, linux kernel +1 morestaging: media: ipu7: fix double-free and use-after-free in error pathsCVE-2026-64447Fix available7.8 High
- linux, linux kernel +1 morestaging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()CVE-2026-64446Fix available7.8 High
- linux, linux kernel +1 morestaging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()CVE-2026-64445Fix available8.8 High
- linux, linux kernel +1 morestaging: rtl8723bs: fix OOB read in OnAssocRsp() IE loopCVE-2026-64444Fix available8.1 High
- linux, linux kernel +1 morestaging: rtl8723bs: fix OOB read in update_beacon_info() IE loopCVE-2026-64443Fix available8.1 High
- linux, linux kernel +1 morestaging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()CVE-2026-64442Fix available8.1 High
- linux, linux kernel +1 morestaging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()CVE-2026-64441Fix available8.8 High
- linux, linux kernel +1 morestaging: rtl8723bs: fix OOB write in HT_caps_handler()CVE-2026-64440Fix available8.1 High
- linux, linux kernel +1 morecrypto: qat - fix VF2PF work teardown race in adf_disable_sriov()CVE-2026-64438Fix available8.8 High
- linux, linux kernel +1 moreksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCELCVE-2026-64437Fix available8.8 High
- linux, linux kernel +1 morenet: af_key: initialize alg_key_len for IPComp statesCVE-2026-64436Fix available7.1 High
- linux, linux kernel +1 moreaudit: Fix data races of skb_queue_len() readers on audit_queueCVE-2026-64435Fix available8.2 High
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix UAF in channel timeout by holding conn refCVE-2026-64434Fix available8.8 High
- linux, linux kernel +1 moreBluetooth: MGMT: Fix UAF of hci_conn_params in add_device_completeCVE-2026-64433Fix available7.8 High
- linux, linux kernel +1 morefs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcnsCVE-2026-64432Fix available7.8 High
- linux, linux kernel +1 morentfs: avoid calling post_write_mst_fixup() for invalid index_blockCVE-2026-64431Fix available7.8 High
- linux, linux kernel +1 moreNTB: epf: Avoid calling pci_irq_vector() from hardirq contextCVE-2026-64430Fix available7.5 High
- linux, linux kernel +1 moregpio: eic-sprd: use raw_spinlock_t in the irq startup pathCVE-2026-64429Fix available5.5 Medium
- linux, linux kernel +1 moregpio: sch: use raw_spinlock_t in the irq startup pathCVE-2026-64428Fix available5.5 Medium
- linux, linux kernel +1 moreHID: logitech-dj: Fix maxfield check in DJ short report validationCVE-2026-64427Fix available5.5 Medium
- linux, linux kernel +1 moreio_uring/nop: fix file reference leak with IOSQE_FIXED_FILECVE-2026-64426Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreio_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work itemCVE-2026-64425Fix available5.5 Medium
- linux, linux kernel +1 morenetpoll: fix a use-after-free on shutdown pathCVE-2026-64424Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv4: igmp: remove multicast group from hash table on device destructionCVE-2026-64423Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: ipv4: bound TCP reordering sysctl writes and MTU probe sizesCVE-2026-64422Fix available7.1 High
- linux, linux kernel +1 moremedia: nxp: imx8-isi: Fix use-after-free on removeCVE-2026-64421Fix available7.8 High
- linux, linux kernel +1 moremfd: cros_ec: Delay dev_set_drvdata() until probe successCVE-2026-64420Fix available7.0 High
- linux, linux kernel +1 moremm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()CVE-2026-64419Fix available5.5 Medium
- linux, linux kernel +1 moremm: shrinker: fix shrinker_info teardown race with expansionCVE-2026-64418Fix available7.8 High
- linux, linux kernel +1 moremm: shrinker: fix NULL pointer dereference in debugfsCVE-2026-64417Fix available5.5 Medium
- linux, linux kernel +1 moremm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless hostCVE-2026-64416Fix available5.5 Medium
- linux, linux kernel +1 moremm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockupCVE-2026-64415Fix available5.5 Medium
- linux, linux kernel +1 morenetfilter: handle unreadable fragsCVE-2026-64414Fix available7.5 High
- Show moreLoading…