Skip to contentLinux vulnerabilities
Newest
- linuxsctp: validate Adaptation Indication parameter lengthCVE-2026-80717Fix available7.5 High
- linuxALSA: pcm: wake linked drain waiters on unlinkCVE-2026-80716Fix available7.8 High
- linuxigc: remove napi_synchronize() in igc_down()CVE-2026-80715Fix available6.7 Medium
- linuxipvs: do not propagate one-packet flag to synced connsCVE-2026-80714Fix available9.8 Critical
- linuxio_uring: preserve task restrictions across execCVE-2026-80713Fix available8.4 High
- linuxspi: spi-qpic-snand: write the feature value before executing SET_FEATURECVE-2026-80712Fix available8.4 High
- linuxpower: supply: max17040: handle missing status supplierCVE-2026-80711Fix available2.0 Low
- linuxs390/dasd: Fix undersized format-check bufferCVE-2026-80710Fix available7.8 High
- linuxs390/zcrypt: Fix wrong domain value verification with EP11 CPRBsCVE-2026-80709Fix available7.8 High
- linuxs390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()CVE-2026-80708Fix available2.0 Low
- linuxcan: j1939: transport: j1939_session_fresh_new(): initialize receive bufferCVE-2026-80707Fix available7.5 High
- linuxcan: softing: fw_parse(): validate firmware record spansCVE-2026-80706Fix available7.8 High
- linuxdrm/amd/display: check if dml21_add_phantom_plane() is successfulCVE-2026-80705Fix available5.7 Medium
- linuxdrm/amd/display: use proper context for loggingCVE-2026-80704Fix availableNo score
- linuxdrm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLECVE-2026-80703Fix available4.8 Medium
- linuxdrm/vmwgfx: fix guest_memory_dirty bitfield clobbered as sizeCVE-2026-80702Fix available7.8 High
- linuxdrm/vmwgfx: enforce cursor size limits for MOB cursorsCVE-2026-80701Fix available6.8 Medium
- linuxdrm/vmwgfx: validate external BO copy bounds for both stride pathsCVE-2026-80700Fix available7.8 High
- linuxKVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested contextCVE-2026-80699Fix available5.6 Medium
- linuxdmaengine: idxd: fix double free of wq, engine, and group structsCVE-2026-80698Fix available7.0 High
- linuxerofs: ensure valid f_path for page cache sharingCVE-2026-80697Fix available5.7 Medium
- linuxhwmon: (ltc4282) Fix reading the minimum alarm voltageCVE-2026-80696Fix available7.8 High
- linuxhwmon: (sht3x) Fix unaligned accessesCVE-2026-80695Fix available5.7 Medium
- linuxnet: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controllerCVE-2026-80694Fix available9.8 Critical
- linuxidpf: bound interrupt-vector register fill to the allocated arrayCVE-2026-80693Fix available9.3 Critical
- linuxBluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacksCVE-2026-80692Fix available8.8 High
- linuxscsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASECVE-2026-80691Fix available7.5 High
- linuxscsi: ufs: core: Initialize hba->rpmbs list in ufshcdCVE-2026-80690Fix availableNo score
- linuxtracing/mmiotrace: Add NULL check for mmio_trace_array in logging functionsCVE-2026-80689Fix availableNo score
- linuxriscv: drop __init from vec_check_unaligned_access_speed_all_cpusCVE-2026-80688Fix availableNo score
- linuxiommufd/viommu: Release the igroup lock on the vdevice_size error pathCVE-2026-80687Fix availableNo score
- linuxmm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTECVE-2026-80686Fix available4.8 Medium
- linuxmm/util: don't read __page_2 for order-1 folios in snapshot_page()CVE-2026-80685Fix available7.1 High
- linuxKVM: s390: pci: Fix NULL dereference on AIBV allocation failureCVE-2026-80684Fix available9.3 Critical
- linuxBluetooth: SCO: give the socket its own sco_conn referenceCVE-2026-80683Fix available8.8 High
- linuxriscv/mm: use physical alignment for vmemmap_start_pfnCVE-2026-80682Fix available7.8 High
- linuxvxlan: re-fetch eth header after route_shortcircuit()CVE-2026-80681Fix available9.8 Critical
- linuxi2c: amd-mp2: Unregister callback on adapter add failureCVE-2026-80680Fix available7.8 High
- linuxs390/dasd: Fix potential NULL pointer dereferenceCVE-2026-80679Fix availableNo score
- linuxi2c: imx: Fix slave registration race and error handlingCVE-2026-80678Fix available8.4 High
- linuxdriver core: use READ_ONCE() for dev->driver in dev_has_sync_state()CVE-2026-80677Fix available7.8 High
- linuxDrivers: hv: vmbus: use generic driver_override infrastructureCVE-2026-80676Fix availableNo score
- linuxlibbpf: Reject non-exclusive metadata maps in the signed loaderCVE-2026-80675Fix available7.1 High
- linuxntfs: validate resident attribute lists and harden the validatorCVE-2026-80674Fix available9.8 Critical
- linuxntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find()CVE-2026-80673Fix available9.8 Critical
- linuxntfs: fix u16 truncation of restart-area length checkCVE-2026-80672Fix available8.8 High
- linuxperf sched: Fix register_pid() overflow, strcpy, and BUG_ONCVE-2026-80671Fix available9.3 Critical
- linuxperf tools: Use perf_env__get_cpu_topology() in machine__resolve()CVE-2026-80670Fix available9.1 Critical
- linuxbpf: Disable xfrm_decode_session hook attachmentCVE-2026-80669Fix available6.7 Medium
- linuxnetfilter: nf_conntrack_expect: use conntrack GC to reap expectationsCVE-2026-80668Fix available9.8 Critical
- Show moreLoading…