Skip to contentLinux vulnerabilities
Newest
- linuxgve: fix header buffer corruption with header-split and HW-GROCVE-2026-72046Fix available9.8 Critical
- linuxocteontx2-af: cn10k: restrict VF LMTLINE sharing to its own PFCVE-2026-72045Fix available8.8 High
- linuxLoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect()CVE-2026-72043Fix available7.1 High
- linuxipmi: Fix user refcount underflow in event deliveryCVE-2026-72042Fix available7.8 High
- linuxespintcp: use sk_msg_free_partial to fix partial sendCVE-2026-72041Fix available9.8 Critical
- linuxipmi: fix refcount leak in i_ipmi_request()CVE-2026-72040Fix availableNo score
- linuxbnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()CVE-2026-72039Fix availableNo score
- linuxnet: liquidio: fix BAR resource leak on PF number failureCVE-2026-72038Fix availableNo score
- linuxnet: lan743x: Initialize eth_syslock spinlock before useCVE-2026-72037Fix availableNo score
- linuxnet/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peekedCVE-2026-72036Fix available7.8 High
- linuxnet/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peekedCVE-2026-72035Fix available8.2 High
- linuxfhandle: reject detached mounts in capable_wrt_mount()CVE-2026-72034Fix available7.8 High
- linuxorangefs: keep the readdir entry size 64-bit in fill_from_part()CVE-2026-72033Fix available9.8 Critical
- linuxnet/mlx5: HWS, fix matcher leak on resize target setup failureCVE-2026-72032Fix available5.6 Medium
- linuxata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSDCVE-2026-72031Fix availableNo score
- linuxata: libata-core: Reject an invalid concurrent positioning ranges countCVE-2026-72030Fix available7.0 High
- linuxnet: wwan: iosm: bound device offsets in the MUX downlink decoderCVE-2026-72029Fix available8.8 High
- linuxriscv: probes: save original sp in rethook trampolineCVE-2026-72028Fix availableNo score
- linuxmm/compaction: handle free_pages_prepare() properly in compaction_free()CVE-2026-72027Fix available7.8 High
- linuxirqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failureCVE-2026-72026Fix availableNo score
- linuxs390/monwriter: Reject buffer reuse with different data lengthCVE-2026-72025Fix availableNo score
- linuxmac802154: remove interfaces with RCU list deletionCVE-2026-72024Fix available7.8 High
- linuxocteontx2-pf: fix SQB pointer leak on init failureCVE-2026-72023Fix availableNo score
- linuxllc: fix SAP refcount leak in llc_ui_autobind()CVE-2026-72022Fix available4.6 Medium
- linuxipvs: use parsed transport offset in SCTP state lookupCVE-2026-72021Fix available8.2 High
- linuxipvs: reset full ip_vs_seq structs in ip_vs_conn_newCVE-2026-72020Fix available9.8 Critical
- linuxmacsec: don't read an unset MAC header in macsec_encrypt()CVE-2026-72019Fix available7.3 High
- linuxdibs: loopback: validate offset and size in move_data()CVE-2026-72018Public exploitFix available7.8 High
- linuxnet: macb: drop in-flight Tx SKBs on closeCVE-2026-72017Fix available5.6 Medium
- linuxcpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable()CVE-2026-72016Fix availableNo score
- linuxfs/resctrl: Fix double-add of pseudo-locked region's RMID to free listCVE-2026-72015Fix availableNo score
- linuxdrbd: reject data replies with an out-of-range payload sizeCVE-2026-72014Fix available9.8 Critical
- linuxriscv: Prevent NULL pointer dereference in machine_kexec_prepare()CVE-2026-72013Fix available6.7 Medium
- linuxtracing/osnoise: Call synchronize_rcu() when unregisteringCVE-2026-72012Fix available7.8 High
- linuxs390/diag: Add missing array_index_nospec() call to memtop_get_page_count()CVE-2026-72011Fix available5.7 Medium
- linuxcgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowedCVE-2026-72010Fix availableNo score
- linuxpmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSICVE-2026-72009Fix available7.8 High
- linuxpmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-checkCVE-2026-72008Fix availableNo score
- linuxpmdomain: imx: Fix i.MX8MP VC8000E power up sequenceCVE-2026-72007Fix available5.7 Medium
- linuxnet/mlx5: free mlx5_st_idx_data on final deallocCVE-2026-72006Fix available6.8 Medium
- linuxwifi: rt2x00: avoid full teardown before work setup in probeCVE-2026-72005Fix available7.8 High
- linuxwifi: mac80211: fix memory leak in ieee80211_register_hw()CVE-2026-72004Fix availableNo score
- linuxwifi: brcmfmac: cyw: fix heap overflow on a short auth frameCVE-2026-72003Fix available8.8 High
- linuxBluetooth: btrtl: validate firmware patch boundsCVE-2026-68479Fix available7.8 High
- linuxmemstick: ms_block: reject a card that reports too many blocksCVE-2026-68478Fix available7.0 High
- linuxipvs: fix more places with wrong ipv6 transport offsetsCVE-2026-68477Fix available9.8 Critical
- linuxipvs: reload ip header after head reallocationCVE-2026-68476Fix available9.8 Critical
- linuxreset: sunxi: fix memory region leak on ioremap failureCVE-2026-68475Fix availableNo score
- linuxpowerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()CVE-2026-68474Fix available7.8 High
- linuxpowerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address()CVE-2026-68473Fix available7.8 High
- Show moreLoading…