Skip to contentLinux vulnerabilities
Newest
- linux, linux kernel +1 moremm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN accessCVE-2026-64295Fix available5.5 Medium
- linux, linux kernel +1 moremm: do file ownership checks with the proper mount idmapCVE-2026-64294Fix available5.5 Medium
- linux, linux kernel +1 moreiommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq readCVE-2026-64293Fix available7.8 High
- linux, linux kernel +1 moreiommufd: Move vevent memory allocation outside spinlockCVE-2026-64292Fix available5.5 Medium
- linux, linux kernel +1 moreiommufd: Set veventq_depth upper boundCVE-2026-64291Fix available5.5 Medium
- linux, linux kernel +1 moreiommufd: Break the loop on failure in iommufd_fault_fops_read()CVE-2026-64290Fix available5.5 Medium
- linux, linux kernel +1 moreiommufd: Set upper bounds on cache invalidation entry_num and entry_lenCVE-2026-64289Fix available5.5 Medium
- linux, linux kernel +1 moreKVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLBCVE-2026-64288Fix available5.5 Medium
- linux, linux kernel +1 moreKVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPUCVE-2026-64287Fix available8.2 High
- linux, linux kernel +1 moreKVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPUCVE-2026-64286Fix available8.2 High
- linux, linux kernel +1 moreKVM: SEV: Pin source page for write when adding CPUID data for SNP guestCVE-2026-64285Fix available5.5 Medium
- linux, linux kernel +1 moreKVM: x86: Ensure vendor's exit handler runs before fastpath userspace exitsCVE-2026-64284Fix available7.1 High
- linux, linux kernel +1 moreKVM: guest_memfd: Treat memslot binding offset+size as unsigned valuesCVE-2026-64283Fix available7.0 High
- linux, linux kernel +1 moreKVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifierCVE-2026-64282Fix available4.7 Medium
- linux, linux kernel +1 moresvcrdma: wake sq waiters when the transport closesCVE-2026-64281Fix available7.5 High
- linux, linux kernel +1 morefpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()CVE-2026-64280Fix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morei2c: core: fix adapter deregistration raceCVE-2026-64279Fix available7.8 High
- linux, linux kernel +1 morei2c: imx-lpi2c: mark I2C adapter when hardware is powered downCVE-2026-64278Fix available5.5 Medium
- linux, linux kernel +1 moreInput: synaptics-rmi4 - bound the F3A keymap to the GPIO countCVE-2026-64277Fix available7.8 High
- linux, linux kernel +1 moreInput: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED countCVE-2026-64276Fix available7.8 High
- linux, linux kernel +1 moreInput: elan_i2c - prevent division by zero and arithmetic underflowCVE-2026-64275Fix available5.5 Medium
- linux, linux kernel +1 moreInput: goodix - clamp the device-reported contact countCVE-2026-64274Fix available7.8 High
- linux, linux kernel +1 moreInput: iforce - bound the device-reported force-feedback effect indexCVE-2026-64273Fix available7.8 High
- linux, linux kernel +1 moreInput: mms114 - fix touch indexing for MMS134S and MMS136CVE-2026-64272Fix available7.8 High
- linux, linux kernel +1 moreInput: touchwin - reset the packet index on every complete packetCVE-2026-64271Fix available7.8 High
- linux, linux kernel +1 moreInput: mms114 - reject an oversized device packet sizeCVE-2026-64270Fix available7.8 High
- linux, linux kernel +1 moreRDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sgCVE-2026-64269Fix available9.1 Critical
- linux, linux kernel +1 moreRDMA/siw: bound Read Response placement to the RREAD lengthCVE-2026-64268Fix available9.8 Critical
- linux, linux kernel +1 morefuse: avoid 32-bit prune notification count wrapCVE-2026-64267Fix available5.5 Medium
- linux, linux kernel +1 morefuse: re-lock request before returning from fuse_ref_folio()CVE-2026-64266Fix available7.8 High
- linux, linux kernel +1 morefuse: clear intr_entry in fuse_resend and fuse_remove_pending_reqCVE-2026-64265Fix available7.8 High
- linux, linux kernel +1 morefuse-uring: fix EFAULT clobber in fuse_uring_commitCVE-2026-64264Fix available5.5 Medium
- linux, linux kernel +1 morefuse-uring: fix moving cancelled entry to ent_in_userspace listCVE-2026-64263Fix available5.5 Medium
- linux, linux kernel +1 morefuse-uring: end fuse_req on io-uring cancel task workCVE-2026-64262Fix available5.5 Medium
- linux, linux kernel +1 morefuse-uring: Avoid use-after-free in fuse_uring_async_stop_queuesCVE-2026-64261Fix available7.8 High
- linux, linux kernel +1 morefuse-uring: Avoid queue->stopped races and set/read that value under lockCVE-2026-64260Fix available7.8 High
- linux, linux kernel +1 morefuse-uring: make a fuse_req on SQE commit only findable after memcpyCVE-2026-64259Fix available7.8 High
- linux, linux kernel +1 morefuse-uring: remove request-less entries from ent_w_req_queue to fix NULL derefCVE-2026-64258Fix available5.5 Medium
- linux, linux kernel +1 moresmb: client: reject overlapping data areas in SMB2 responsesCVE-2026-64257Fix available9.1 Critical
- linux, linux kernel +1 morexfs: don't wrap around quota ids in dqiterateCVE-2026-64256Fix available5.5 Medium
- linux, linux kernel +1 morewifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlersCVE-2026-64255Fix available8.8 High
- linux, linux kernel +1 moreNTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BARCVE-2026-64254Fix available5.5 Medium
- linux, linux kernel +1 morekernel/fork: clear PF_BLOCK_TS in copy_process()CVE-2026-64253Fix available5.5 Medium
- linux, linux kernel +1 moreMIPS: DEC: Prevent initial console buffer from landing in XKPHYSCVE-2026-64252Fix available5.5 Medium
- linux, linux kernel +1 morepwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()CVE-2026-64251Fix available7.8 High
- linux, linux kernel +1 moreLoongArch: Report dying CPU to RCU in stop_this_cpu()CVE-2026-64250Fix available5.5 Medium
- linux, linux kernel +1 morefpga: region: fix use-after-free in child_regions_with_firmware()CVE-2026-64249Fix available7.8 High
- linux, linux kernel +1 moreMIPS: smp: report dying CPU to RCU in stop_this_cpu()CVE-2026-64248Fix available5.5 Medium
- linux, linux kernel +1 moreKVM: x86: hyper-v: Bound the bank index when querying sparse banksCVE-2026-64247Fix available8.4 High
- linux, linux kernel +1 morepower: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init()CVE-2026-64246Fix available7.8 High
- Show moreLoading…