Skip to contentLinux vulnerabilities
Newest
- linuxALSA: usb-audio: fix use-after-free in ump_to_endpoint()CVE-2026-74501Fix available5.4 Medium
- linuxALSA: usb-audio: fix stack info leak in RME Digiface statusCVE-2026-74500Fix available2.4 Low
- linuxALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()CVE-2026-74499Fix available7.0 High
- linuxALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is setCVE-2026-74498Fix available7.3 High
- linuxALSA: usb-audio: Clamp frame size in implicit-feedback modeCVE-2026-74497Fix available8.4 High
- linuxfou: Fix use-after-free in fou_create()CVE-2026-74496Fix available7.8 High
- linuxigbvf: Fix leak in TX DMA error cleanupCVE-2026-74495Fix available9.8 Critical
- linuxksmbd: reject repeated SMB2 NEGOTIATE requestsCVE-2026-74494Fix available8.7 High
- linuxnet/smc: fix socket use-after-free during link group terminationCVE-2026-74493Fix available9.8 Critical
- linuxnetfilter: ipset: do not update comments from kernel-side hash addsCVE-2026-74492Fix available8.4 High
- linuxof/address: Fix NULL bus dereference in of_pci_range_parser_one()CVE-2026-74491Fix availableNo score
- linuxtipc: avoid use-after-free in poll trace queue dumpsCVE-2026-74490Fix available8.8 High
- linuxwifi: mac80211: fix tid_tx use-after-free on BA session stopCVE-2026-74489Fix available8.8 High
- linuxwifi: mwifiex: use the subframe length when parsing A-MSDU TDLS framesCVE-2026-74488Fix available8.8 High
- linuxbinfmt_misc: restore write access when removing an entryCVE-2026-74487Fix available4.8 Medium
- linuxbinfmt_misc: use exe_file_deny_write_access() for the interpreter cloneCVE-2026-74486Fix availableNo score
- linuxbinfmt_misc: reject a flag character as the field delimiterCVE-2026-74485Fix available7.1 High
- linuxbinfmt_misc: don't let an 'F' entry pin its own instanceCVE-2026-74484Fix available6.8 Medium
- linuxbinfmt_misc: don't leak the user namespace when the mount failsCVE-2026-74483Fix available5.7 Medium
- linuxmm/huge_memory: unlock i_mmap_rwsem before releasing after-split foliosCVE-2026-74482Fix available7.8 High
- linuxmm/page_reporting: use system_freezable_wq to fix UAF during suspendCVE-2026-74481Fix available7.8 High
- linuxnet: bridge: stop fast-leave after deleting a port groupCVE-2026-74480Fix available9.8 Critical
- linuxnet: pktgen: fix proc entry use-after-freeCVE-2026-74479Fix available7.8 High
- linuxum: vector: fix use-after-free in vector_mmsg_rx()CVE-2026-74478Fix available9.8 Critical
- linuxuprobes: Fix NULL pointer dereference in hprobe_expire()CVE-2026-74477Fix availableNo score
- linuxveth: convert frag_list skbs before running XDPCVE-2026-74476Fix available9.1 Critical
- linuxvxlan: use neigh_ha_snapshot() in route_shortcircuit()CVE-2026-74475Fix available10.0 Critical
- linuxvxlan: use pskb_network_may_pull() for transmit path header pullsCVE-2026-74474Fix available9.8 Critical
- linuxvxlan: use pskb_network_may_pull() in route_shortcircuit()CVE-2026-74473Fix available9.8 Critical
- linuxublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev()CVE-2026-74472Fix available6.8 Medium
- linuxtracing: Check return value of __register_event() in trace_module_add_events()CVE-2026-74471Fix available7.8 High
- linuxscsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB writeCVE-2026-74470Fix available7.8 High
- linuxsctp: prevent peer transport count overflowCVE-2026-74469Public exploitFix available8.8 High
- linuxgpio: pch: use raw_spinlock_t for the register lockCVE-2026-74468Fix availableNo score
- linuxs390/qeth: Check CAP_NET_ADMIN for private ioctlsCVE-2026-74467Fix available7.8 High
- linuxs390/zcrypt: Close speculative mem read possibilityCVE-2026-74466Fix availableNo score
- linuxnet: openvswitch: fix potential UAF on meter attach failureCVE-2026-74465Fix available7.8 High
- linuxnet: openvswitch: fix skb leak on flow key update failure during ctCVE-2026-74464Fix available6.8 Medium
- linuxi2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlockCVE-2026-74463Fix available5.7 Medium
- linuxi2c: imx: mark I2C adapter when hardware is powered downCVE-2026-74462Fix availableNo score
- linuxi2c: imx: Cancel hrtimer before clearing slave pointerCVE-2026-74461Fix available8.4 High
- linuxcan: ems_usb: validate CPC message lengthsCVE-2026-74460Fix available5.2 Medium
- linuxcan: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failureCVE-2026-74459Fix available1.0 Low
- linuxcan: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extentsCVE-2026-74458Fix available7.0 High
- linuxcan: peak_usb: add bounds check for USB channel indexCVE-2026-74457Fix available5.1 Medium
- linuxcan: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit errorCVE-2026-74456Fix available7.8 High
- linuxcan: peak_usb: validate uCAN receive record lengthsCVE-2026-74455Fix available5.2 Medium
- linuxdrm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO sizeCVE-2026-74454Fix available7.8 High
- linuxdrm/vc4: Zero the tile state data array before each BIN jobCVE-2026-74453Fix available7.8 High
- linuxdrm/panthor: reject firmware sections with oversized dataCVE-2026-74452Fix available7.8 High
- Show moreLoading…