Skip to contentLinux vulnerabilities
Newest
- linuxbtrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()CVE-2026-68422Fix availableNo score
- linuxsched_ext: Don't warn on core-sched forced idle in put_prev_task_scx()CVE-2026-68421Fix available5.7 Medium
- linuxxfrm: reject optional IPTFS templates in outbound policiesCVE-2026-68420Fix available7.1 High
- linuxRDMA/irdma: Prevent rereg_mr for non-mem regionsCVE-2026-68419Fix available7.8 High
- linuxRDMA/irdma: Prevent user-triggered null deref on QP createCVE-2026-68418Fix available6.8 Medium
- linuxRDMA/siw: publish QP after initializationCVE-2026-68417Fix available7.8 High
- linuxmtd: fix double free and WARN_ON in add_mtd_device() error pathsCVE-2026-68416Fix availableNo score
- linuxxfrm: clear mode callbacks after failed mode setupCVE-2026-68415Fix available7.8 High
- linuxwifi: cfg80211: cancel sched scan results work on unregisterCVE-2026-68414Fix available7.5 High
- linuxwifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()CVE-2026-68413Fix availableNo score
- linuxwifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()CVE-2026-68412Fix available6.7 Medium
- linuxwifi: mac80211_hwsim: clamp virtio RX length before skb_putCVE-2026-68411Fix availableNo score
- linuxwifi: libertas: fix memory leak in helper_firmware_cb()CVE-2026-68410Fix available2.4 Low
- linuxwifi: mac80211: defer link RX stats percpu free to RCUCVE-2026-68409Fix available8.8 High
- linuxwifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlockCVE-2026-68408Fix available5.7 Medium
- linuxwifi: nl80211: free RNR data on MBSSID mismatchCVE-2026-68407Fix available6.8 Medium
- linuxwifi: cfg80211: validate PMSR FTM preamble rangeCVE-2026-68406Fix available4.8 Medium
- linuxwifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lockCVE-2026-68405Fix availableNo score
- linuxwifi: cfg80211: use wiphy work for socket owner autodisconnectCVE-2026-68404Fix available7.8 High
- linuxwifi: brcmfmac: initialize SDIO data work before cleanupCVE-2026-68403Fix availableNo score
- linuxwifi: cfg80211: bound element ID read when checking non-inheritanceCVE-2026-68402Fix available7.1 High
- linuxfirmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit()CVE-2026-68401Fix available7.8 High
- linuxfirmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculationCVE-2026-68400Fix available7.8 High
- linuxbpf: Fix UAF in sock clone early bailoutsCVE-2026-68399Fix available7.8 High
- linuxppp: defer channel free to an RCU grace period to fix pppol2tp RX UAFCVE-2026-68398Public exploitFix available7.8 High
- linuxnet/iucv: take a reference on the socket found in afiucv_hs_rcv()CVE-2026-68397Fix available8.8 High
- linuxscsi: core: wake eh reliably when using scsi_schedule_ehCVE-2026-68396Fix availableNo score
- linuxata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registeredCVE-2026-68395Fix availableNo score
- linuxBluetooth: MGMT: revalidate LOAD_CONN_PARAM queued updateCVE-2026-68394Fix available7.8 High
- linuxBluetooth: hci_sync: extend conn_hash lookup critical sectionsCVE-2026-68393Fix available8.8 High
- linuxBluetooth: mgmt: fix locking in unpair_device/disconnect_syncCVE-2026-68392Fix available7.8 High
- linuxBluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmdsCVE-2026-68391Fix available7.8 High
- linuxBluetooth: hci_sync: hold hdev->lock for hci_conn_params lookupsCVE-2026-68390Fix available8.8 High
- linuxBluetooth: hci_qca: Clear memdump state on invalid dump sizeCVE-2026-68389Fix available8.8 High
- linuxsmb/client: handle overlapping allocated ranges in fallocateCVE-2026-68388Fix available9.8 Critical
- linuxcan: raw: add locking for raw flags bitfieldCVE-2026-68387Fix available7.8 High
- linuxbpf, sockmap: Reject unhashed UDP sockets on sockmap updateCVE-2026-68386Fix available5.6 Medium
- linuxs390/checksum: Fix csum_partial() without vector facilityCVE-2026-68385Fix available9.8 Critical
- linuxdrm/xe/vf: Fix VF CCS attach/detach race with in-flight BO movesCVE-2026-68384Fix available7.8 High
- linuxdrm/xe/guc: Keep scheduler timeline name aliveCVE-2026-68383Fix available7.8 High
- linuxdrm/xe/guc: Hold device ref until queue teardown completesCVE-2026-68382Fix available7.8 High
- linuxksmbd: pin conn during async oplock break notificationCVE-2026-68381Fix available9.8 Critical
- linuxaccel/amdxdna: Fix use-after-free of mm_struct in job schedulerCVE-2026-68380Fix available7.8 High
- linuxtcp: fix TIME_WAIT socket reference leak on PSP policy failureCVE-2026-68379Fix available7.5 High
- linuxdpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync()CVE-2026-68378Fix availableNo score
- linuxnet/sched: act_tunnel_key: Defer dst_release to RCU callbackCVE-2026-68377Fix available7.8 High
- linuxsctp: fix auth_hmacs array size in struct sctp_cookieCVE-2026-68376Public exploitFix available8.1 High
- linuxbnxt_en: Handle partially initialized auxiliary devicesCVE-2026-68375Fix availableNo score
- linuxusb: core: sysfs: add lock to bos_descriptors_read()CVE-2026-68374Fix available7.8 High
- linuxwifi: at76c50x-usb: avoid length underflow in at76_guess_freq()CVE-2026-68373Fix available8.1 High
- Show moreLoading…