Skip to contentLinux vulnerabilities
Newest
- linuxperf: Reject exited events as group leadersCVE-2026-74753Fix available7.8 High
- linuxsctp: validate cookie AUTH state before useCVE-2026-74752Fix available9.8 Critical
- linuxriscv: lib: Fix ZBB strnlen reading past count boundaryCVE-2026-74751Fix available9.4 Critical
- linuxovpn: defer key slot crypto freeing to workqueueCVE-2026-74750Fix available7.5 High
- linuxrseq: Prevent hard lockup on granted time slice extensionCVE-2026-74749Fix available5.7 Medium
- linuxnetfilter: ipset: fix refcount race between list:set GC and swapCVE-2026-74748Fix available7.8 High
- linuxipvs: revalidate ihl to prevent out-of-bounds accessCVE-2026-74747Fix available7.8 High
- linuxnetfilter: flowtable: publish GC-visible tuple lastCVE-2026-74746Fix available9.8 Critical
- linuxeth: bnxt: avoid deadlock when canceling IRQ affinity notifierCVE-2026-74745Fix available7.5 High
- linuxipvlan: inherit needed_headroom and needed_tailroom from phy_devCVE-2026-74744Fix available9.8 Critical
- linuxmacvlan: inherit needed_headroom and needed_tailroom from lowerdevCVE-2026-74743Fix available9.8 Critical
- linuxveth: fix queue index used to wake the peer txq in veth_pollCVE-2026-74742Fix available7.5 High
- linuxnet: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enablingCVE-2026-74741Fix available7.5 High
- linuxnet/sched: act_api: fix TOCTOU NULL deref on a->goto_chainCVE-2026-74740Fix available5.7 Medium
- linuxnet/sched: cls_u32: skip hash tables in u32_bind_class()CVE-2026-74739Fix available7.8 High
- linuxregmap: sdw-mbq: don't call an unset readable_reg callbackCVE-2026-74738Fix available5.7 Medium
- linuxnet: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAGCVE-2026-74737Fix available9.8 Critical
- linuxnet/sched: cls_bpf: reject dev-bound programs bound to a different deviceCVE-2026-74736Fix available7.8 High
- linuxl2tp: fix tunnel and session refcount leak on seq_file releaseCVE-2026-74735Fix available6.8 Medium
- linuxfirewire: ohci: fix NULL pointer dereference in ar_context_releaseCVE-2026-74734Fix available5.1 Medium
- linuxgpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lockCVE-2026-74733Fix available7.8 High
- linuxsched_ext: Skip sub-disable teardown for never-linked sub-schedulersCVE-2026-74731Fix available7.8 High
- linuxNFS: Pin the 'struct nfs_server' during a FREE_STATEID callCVE-2026-74730Fix available9.8 Critical
- linuxsoc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_readCVE-2026-74729Fix availableNo score
- linuxxfs: handle NULL b_addr in xfs_buf_freeCVE-2026-74728Fix availableNo score
- linuxovpn: skip rehash for peers already removed from by_idCVE-2026-74727Public exploitFix available9.8 Critical
- linuxbonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitorCVE-2026-74726Fix available7.3 High
- linuxenic: fix tx_hang_reset use-after-free on device removalCVE-2026-74725Fix available7.8 High
- linuxipvs: avoid out-of-bounds write in ip_vs_nat_icmpCVE-2026-74724Fix available7.8 High
- linuxbtrfs: lzo: reject inline extents without valid headersCVE-2026-74723Fix available9.8 Critical
- linuxbtrfs: fix memory leak in btrfs_do_encoded_write()CVE-2026-74722Fix availableNo score
- linuxaccel/amxdna: Fix page-insertion errors in amdxdna_insert_pages()CVE-2026-74721Fix available7.8 High
- linuxbpf: Preserve pointer state for commuted arithmeticCVE-2026-74720Fix available7.8 High
- linuxnet/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()CVE-2026-74719Fix available8.2 High
- linuxdevlink: fix net namespace reference leak in reloadCVE-2026-74718Fix available6.7 Medium
- linuxnet/mlx5: fw_tracer, return NULL on create errorCVE-2026-74717Fix available7.5 High
- linuxaccel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages()CVE-2026-74716Fix available6.8 Medium
- linuxbpf: Fix netns reference imbalance in conntrack kfuncsCVE-2026-74715Fix available7.8 High
- linuxbpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()CVE-2026-74714Fix available7.8 High
- linuxvhost_iotlb: bound map allocation in add_rangeCVE-2026-74713Fix available7.1 High
- linuxvdpa/mlx5: Fix buffer length in create_direct_keys()CVE-2026-74712Fix available9.3 Critical
- linuxhwmon: (pmbus) Fix type confusion in notification logicCVE-2026-74711Fix available8.4 High
- linuxxsk: require at least 16 bytes of TX metadataCVE-2026-74710Fix available7.8 High
- linuxxsk: clear metadata pointer when no timestamp is requestedCVE-2026-74709Fix available2.0 Low
- linuxxsk: validate launch-time metadata sizeCVE-2026-74708Fix available7.8 High
- linuxxsk: validate metadata when processing requestsCVE-2026-74707Fix available7.8 High
- linuxbnge: Fix NULL pointer dereference in aux device releaseCVE-2026-74706Fix availableNo score
- linuxudp: fix potential use-after-free in tunnel segmentationCVE-2026-74705Fix available10.0 Critical
- linuxnet/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filterCVE-2026-74704Fix available8.2 High
- linuxvhost-scsi: Validate T10 PI scatterlist countsCVE-2026-74703Fix available7.1 High
- Show moreLoading…