Skip to contentLinux vulnerabilities
Newest
- linuxnet: airoha: fix foe_check_time allocation sizeCVE-2026-80617Fix available9.8 Critical
- linuxieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns()CVE-2026-80616Fix available1.8 Low
- linuxnet: dst_metadata: fix false-positive memcpy overflow in tun_dst_uncloneCVE-2026-80615Fix available8.2 High
- linuxnet: emac: Fix NULL pointer dereference in emac_probeCVE-2026-80614Fix available7.5 High
- linuxveth: fix NAPI leak in XDP enable error pathCVE-2026-80613Fix available7.8 High
- linuxnet: lwtunnel: Drop skb metadata before LWT encapsulationCVE-2026-80612Fix available9.8 Critical
- linuxACPI: processor_idle: Mark LPI enter functions as __cpuidleCVE-2026-80611Fix available10.0 Critical
- linuxnet: enetc: fix potential divide-by-zero when num_vsi is zeroCVE-2026-80610Fix availableNo score
- linuxqede: fix out-of-bounds check for cqe->len_list[]CVE-2026-80609Fix available9.8 Critical
- linuxaccel/amdxdna: Fix iommu domain lifetime race during device removalCVE-2026-80608Fix available8.8 High
- linuxtracing/probes: Remove WARN_ON_ONCE from parse_btf_argCVE-2026-80607Fix available10.0 Critical
- linuxdrm/xe/userptr: Hold notifier_lock for write on inject test pathCVE-2026-80606Fix available7.8 High
- linuxHID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()CVE-2026-80605Fix available4.1 Medium
- linuxHID: core: Fix OOB read in hid_get_report for numbered reportsCVE-2026-80604Fix available8.8 High
- linuxnetfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB readCVE-2026-80603Fix available9.1 Critical
- linuxperf/x86/amd/lbr: Fix kernel address leakageCVE-2026-80602Fix available4.8 Medium
- linuxbatman-adv: gw: acquire ethernet header only after skb reallocCVE-2026-80601Fix available8.8 High
- linuxbatman-adv: dat: acquire ARP hw source only after skb reallocCVE-2026-80600Fix available9.8 Critical
- linuxbatman-adv: dat: ensure accessible eth_hdr proto fieldCVE-2026-80599Fix available8.1 High
- linuxntfs3: fix out-of-bounds read in decompress_lzntCVE-2026-80598Fix available7.8 High
- linuxmtd: maps: vmu-flash: fix NULL pointer dereference in initializationCVE-2026-80597Fix available5.1 Medium
- linuxInput: ims-pcu - only expose sysfs attributes on control interfaceCVE-2026-80596Fix available8.4 High
- linuxInput: ims-pcu - add response length checksCVE-2026-80595Fix available5.2 Medium
- linuxInput: ims-pcu - fix potential infinite loop in CDC union descriptor parsingCVE-2026-80594Fix available5.1 Medium
- linuxhwmon: (asus_atk0110) Check package count before accessing elementCVE-2026-80593Fix available8.4 High
- linuxsamples/damon/mtier: fail early if address range parameters are invalidCVE-2026-80592Fix availableNo score
- linuxf2fs: fix listxattr handling of corrupted xattr entriesCVE-2026-80591Fix available7.8 High
- linuxinet: frags: strip GSO state from fragments before reassemblyCVE-2026-80590Fix available8.6 High
- linuxblock: stop the timeout timer when releasing a never added diskCVE-2026-80589Fix available9.8 Critical
- linuxmptcp: reclaim forward-allocated memory on RX path errorsCVE-2026-80588Fix available7.5 High
- linuxmptcp: avoid combining some incoming suboptionsCVE-2026-80587Public exploitFix available9.8 Critical
- linuxmptcp: options: reset DSS fields in case of unexpected sizeCVE-2026-80586Fix available9.8 Critical
- linuxmptcp: fastopen: only mark MPTFO subflows with SYN dataCVE-2026-80585Fix available9.4 Critical
- linuxs390/qeth: validate user buffer length in SNMP and ARP query ioctlsCVE-2026-80584Fix available8.4 High
- linuxASoC: codecs: lpass-tx-macro: Fix enum kcontrol accessesCVE-2026-80583Fix available7.8 High
- linuxdrm/shmem_helper: Check VMA boundaries for PMD mappingsCVE-2026-80582Fix available7.8 High
- linuxASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeoutCVE-2026-80581Fix availableNo score
- linuxfbdev: bound mode sysfs output to the sysfs bufferCVE-2026-80580Fix available7.8 High
- linuxfbdev: clear fb_info->mode before deleting a videomodeCVE-2026-80579Fix available7.8 High
- linuxfbdev: core: Fix pointer desynchronization in fb_io_read()CVE-2026-80578Fix available7.3 High
- linuxdrm/panthor: skip zero-sized firmware sectionsCVE-2026-80577Fix availableNo score
- linuxdrm/amdgpu: reject oversized IBs with per-ring packet limitsCVE-2026-80576Fix available8.8 High
- linuxInput: cs40l50-vibra - validate custom data from user spaceCVE-2026-80575Fix available7.8 High
- linuxInput: focaltech - fix array out-of-bounds in focaltech_process_rel_packetCVE-2026-80574Fix available8.4 High
- linuxInput: iforce - validate input packet lengthsCVE-2026-80573Fix available5.2 Medium
- linuxInput: byd - synchronize timer deletion before freeing private dataCVE-2026-80572Fix available7.8 High
- linuxpowerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leakCVE-2026-80571Fix available8.8 High
- linuxInput: synaptics-rmi4 - zero report size on F54 work errorCVE-2026-80570Fix available7.8 High
- linuxInput: synaptics-rmi4 - bound the F54 report size to the allocated bufferCVE-2026-80569Fix available7.8 High
- linuxInput: synaptics-rmi4 - block s_input when F54 queue is busyCVE-2026-80568Fix available7.8 High
- Show moreLoading…