Skip to contentLinux vulnerabilities
Newest
- linuxBluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error pathCVE-2026-74301Fix available5.7 Medium
- linuxBluetooth: hci: validate codec capability element lengthCVE-2026-74300Fix available8.8 High
- linuxRDMA/core: Fix FRMR aging push to queue error flowCVE-2026-74299Fix availableNo score
- linuxRDMA/core: Fix FRMR set pinned push error pathCVE-2026-74298Fix availableNo score
- linuxRDMA/mlx5: Fix undefined shift of user RQ WQE sizeCVE-2026-74297Fix available7.8 High
- linuxRDMA/mlx5: Release the HW‑provided UAR index rather than the SW oneCVE-2026-74296Fix available7.8 High
- linuxASoC: codecs: hdac_hdmi: Validate written enum valueCVE-2026-74295Fix available7.1 High
- linuxASoC: meson: aiu: Validate written enum valuesCVE-2026-74294Fix available7.3 High
- linuxASoC: fsl: fsl_audmix: Validate written enum valuesCVE-2026-74293Fix available7.8 High
- linuxASoC: tegra: tegra210_ahub: Validate written enum valueCVE-2026-74292Fix available7.1 High
- linuxASoC: topology: Check PCM and DAI name strings before useCVE-2026-74291Fix available7.0 High
- linuxnet/sched: cls_flow: Dont expose folded kernel pointersCVE-2026-74290Fix available4.8 Medium
- linuxipv4: fib: Don't dump dying fib_info in fib_leaf_notify().CVE-2026-74289Fix available7.8 High
- linuxnet: fib_rules: Don't dump dying fib_rule in fib_rules_dump().CVE-2026-74288Fix available7.8 High
- linuxsctp: validate embedded address parameter lengthCVE-2026-74287Fix available9.1 Critical
- linuxnet: pfcp: allocate per-cpu tstats for PFCP netdevsCVE-2026-74286Fix available6.8 Medium
- linuxnet: Stop leased rxq before uninstalling its memory providerCVE-2026-74285Fix available8.8 High
- linuxnet/sched: sch_hfsc: Don't make class passive twiceCVE-2026-74284Fix available4.8 Medium
- linuxtipc: require net admin for TIPCv2 netlink mutatorsCVE-2026-74283Fix available7.8 High
- linuxtipc: prevent snt_unacked underflow on CONN_ACKCVE-2026-74282Fix available7.5 High
- linuxtipc: reject inverted service ranges from peer bindingsCVE-2026-74281Fix available7.5 High
- linuxcrypto: marvell/octeontx - fix DMA cleanup using wrong loop indexCVE-2026-74280Fix available10.0 Critical
- linuxcrypto: cavium/cpt - fix DMA cleanup using wrong loop indexCVE-2026-74279Fix available10.0 Critical
- linuxALSA: seq: Fix kernel heap address leak in bounce_error_event()CVE-2026-74278Fix available4.8 Medium
- linuxiommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA pathCVE-2026-74277Fix available8.8 High
- linuxspi: xilinx: use FIFO occupancy register to determine buffer sizeCVE-2026-74276Fix available6.7 Medium
- linuxcxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach()CVE-2026-74275Fix available8.4 High
- linuxcxl/region: Fill first free targets[] slot during auto-discoveryCVE-2026-74274Fix availableNo score
- linuxcxl/region: Block region delete during region creationCVE-2026-74273Fix availableNo score
- linuxcxl/region: Resolve region deletion racesCVE-2026-74272Fix availableNo score
- linuxpower: supply: core: fix supplied_from allocationsCVE-2026-74271Fix available9.8 Critical
- linuxhandshake: Require admin permission for DONE commandCVE-2026-74270Fix available7.8 High
- linuxbnxt: fix head underflow on XDP head-growCVE-2026-74269Fix available9.8 Critical
- linuxtcp: clear sock_ops cb flags before force-closing a child socketCVE-2026-74268Fix available9.8 Critical
- linuxnet/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlenCVE-2026-74267Fix available9.8 Critical
- linuxnet/sched: sch_dualpi2: Do not call qdisc_tree_reduce_backlog during peek before restoring qlenCVE-2026-74266Fix available6.8 Medium
- linuxnet: mana: initialize gdma queue id to INVALID_QUEUE_IDCVE-2026-74265Fix availableNo score
- linuxnet: watchdog: fix refcount tracking racesCVE-2026-74264Fix available7.8 High
- linuxnet: wwan: t7xx: check skb_clone in control TXCVE-2026-74263Fix availableNo score
- linuxkcm: use WRITE_ONCE() when changing lower socket callbacksCVE-2026-74262Fix available7.8 High
- linuxALSA: seq: avoid stale FIFO cells during resizeCVE-2026-74261Fix available5.7 Medium
- linuxnetfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use themCVE-2026-74260Fix available7.8 High
- linuxbpf: Guard __get_user acesss with access_ok for uprobe_multi dataCVE-2026-74258Fix available7.8 High
- linuxsockmap: Fix use-after-free in udp_bpf_recvmsg()CVE-2026-74257Fix available7.8 High
- linuxbpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds checkCVE-2026-74256Fix available8.4 High
- linuxtipc: fix UAF in tipc_l2_send_msg()CVE-2026-74255Fix available9.8 Critical
- linuxtcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)CVE-2026-72502Fix available7.5 High
- linuxRDMA/bnxt_re: Initialize dpi variable to zeroCVE-2026-72501Fix available4.8 Medium
- linuxRDMA/bnxt_re: Free SRQ toggle page after firmware teardownCVE-2026-72500Fix available8.8 High
- linuxRDMA/bnxt_re: Free CQ toggle page after firmware teardownCVE-2026-72499Fix available8.8 High
- Show moreLoading…