Skip to contentLinux vulnerabilities
Newest
- linuxusb: gadget: f_fs: initialize reset_work at allocation timeCVE-2026-64594Fix availableNo score
- linuxbtrfs: do not trim a device which is not writeableCVE-2026-64593Fix availableNo score
- linuxriscv: mm: Unconditionally sfence.vma for spurious faultCVE-2026-64592Fix availableNo score
- linuxiommu/vt-d: Avoid WARNING in sva unbind pathCVE-2026-64591Fix available4.8 Medium
- linuxdma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warningCVE-2026-64590Fix available2.0 Low
- linuxi2c: core: fix NULL-deref on adapter registration failureCVE-2026-64589Fix available4.1 Medium
- linuxfuse-uring: fix data races on ring->readyCVE-2026-64588Fix available7.8 High
- linuxnet: ethernet: arc: emac: quiesce interrupts before requesting IRQCVE-2026-64587Fix available7.0 High
- linuxwifi: brcmfmac: drain bus_reset work on device removalCVE-2026-64586Fix available8.8 High
- linuxcan: esd_usb: kill anchored URBs before freeing netdevsCVE-2026-64585Fix available7.8 High
- linuxusb: gadget: f_midi: cancel pending IN work before freeing the midi objectCVE-2026-64584Fix available7.8 High
- linuxusb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardownCVE-2026-64583Fix available7.8 High
- linuxRDMA/rxe: Fix a use-after-free problem in rxe_mmapCVE-2026-64582Fix available7.8 High
- linuxxfrm: fix sk_dst_cache double-free in xfrm_user_policy()CVE-2026-64581Fix available7.8 High
- linuxxfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()CVE-2026-64580Fix available7.8 High
- linuxxfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsertCVE-2026-64579Fix available5.7 Medium
- linuxksmbd: validate compound request size before reading StructureSize2CVE-2026-64578Fix available8.2 High
- linuxgtp: check skb_pull_data() return in gtp1u_send_echo_resp()CVE-2026-64577Fix available7.5 High
- linuxnexthop: initialize extack in nh_res_bucket_migrate()CVE-2026-64576Fix available7.1 High
- linuxbpf: tcp: fix double sock release on batch reallocCVE-2026-64575Fix available7.8 High
- linuxwifi: mac80211: tear down new links on vif update error pathCVE-2026-64574Fix available7.8 High
- linuxBluetooth: qca: fix NVM tag length underflow in TLV parserCVE-2026-64573Fix available9.8 Critical
- linuxipv4: fib: free fib_alias with kfree_rcu() on insert error pathCVE-2026-64572Fix available7.1 High
- linuxwifi: p54: validate RX frame length in p54_rx_eeprom_readback()CVE-2026-64571Fix available5.1 Medium
- linux, linux kernel +1 morewifi: mac80211: fix fils_discovery double free on alloc failureCVE-2026-64570Fix available7.8 High
- linuxmpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=nCVE-2026-64569Fix available5.7 Medium
- linuxwifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failureCVE-2026-64568Fix available7.8 High
- linux, linux kernel +1 morebtrfs: reject free space cache with more entries than pagesCVE-2026-64567Fix available7.8 High
- linuxxfrm: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_frags()CVE-2026-64566Fix available9.8 Critical
- linuxInput: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()CVE-2026-64565Fix available5.4 Medium
- linux, linux kernel +1 moresctp: don't free the ASCONF's own transport in DEL-IP processingCVE-2026-64564Public exploitFix available9.8 Critical
- linux, linux kernel +1 morerhashtable: clear stale iter->p on table restartCVE-2026-64563Public exploitFix available7.8 High
- linux, linux kernel +1 moreKVM: nVMX: Hide shadow VMCS right after VMCLEARCVE-2026-64562Fix available8.8 High
- linuxKVM: x86: wean fast IN from emulator_pio_inCVE-2022-4994Fix availableNo score
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreposix-cpu-timers: Prevent UAF caused by non-leader exec() raceCVE-2026-64560Public exploitFix available7.8 High
- linux, linux kernel +1 mores390/pkey: Check length in PKEY_VERIFYPROTK ioctlCVE-2026-64559Fix available7.8 High
- linux, linux kernel +1 mores390/pkey: Check length in pkey_pckmo handler implementationCVE-2026-64558Fix available7.8 High
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()CVE-2026-64557Fix available8.8 High
- linux, linux kernel +1 moreperf/core: Detach event groups during remove_on_execCVE-2026-64556Fix available7.8 High
- linuxKVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops()CVE-2026-64555Fix available8.8 High
- linux, linux kernel +1 morenetfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()CVE-2026-64554Fix available8.8 High
- linuxnet: psample: fix info leak in PSAMPLE_ATTR_DATACVE-2026-64553Fix available4.8 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morevirtio-net: fix len check in receive_big()CVE-2026-64552Fix available8.4 High
- linux, linux kernel +1 moresctp: validate STALE_COOKIE cause length before reading stalenessCVE-2026-64551Fix available9.1 Critical
- linuxnet: qualcomm: rmnet: validate MAP frame length before ingress parsingCVE-2026-64550Fix available7.3 High
- linuxBluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()CVE-2026-64549Fix available2.4 Low
- linux, linux kernel +1 morebpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()CVE-2026-64548Fix available8.4 High
- linux, linux kernel +1 morenet: usb: net1080: validate packet_len before pad-byte access in rx_fixupCVE-2026-64547Fix available8.1 High
- linux, linux kernel +1 moredrm/edid: fix OOB read in drm_parse_tiled_block()CVE-2026-64546Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet, bpf: check master for NULL in xdp_master_redirect()CVE-2026-64545Fix available7.5 High
- Show moreLoading…