Skip to contentLinux vulnerabilities
Newest
- linuxBluetooth: RFCOMM: take rfcomm_mutex for the deferred setup acceptCVE-2026-80819Fix available6.0 Medium
- linuxiommu/tegra241-cmdqv: Fix CMD_SYNC use-after-free on teardownCVE-2026-80818Fix availableNo score
- linuxiommu/iommufd: Fix NULL pointer deref in iommufd_ioas_change_process when racing with iopt_map_file_pagesCVE-2026-80817Fix available5.7 Medium
- linuxALSA: FCP: Use a private URB for the notification endpointCVE-2026-80816Fix availableNo score
- linuxALSA: scarlett2: Use a private URB for the notification endpointCVE-2026-80815Fix available5.1 Medium
- linuxrndis_host: add overflow check in rndis_rx_fixup()CVE-2026-80814Fix available5.2 Medium
- linuxnvmet: fix NULL pointer dereference in nvmet_execute_identify_nslist()CVE-2026-80813Fix available8.7 High
- linuxALSA: dummy: Check card index validity at probeCVE-2026-80812Fix availableNo score
- linuxio_uring/rsrc: fix folio size overflow in io_vec_fill_bvec()CVE-2026-80810Fix available7.3 High
- linuxocfs2: fix missing metadata reservation for large xattrsCVE-2026-80809Fix available5.7 Medium
- linuxext4: stop retrying saturated xattr cache entriesCVE-2026-80808Fix available7.1 High
- linuxnilfs2: reject invalid block index in GC ioctlCVE-2026-80807Fix availableNo score
- linuxext4: don't enable DAX on new encrypted filesCVE-2026-80806Fix available4.8 Medium
- linuxxfs: validate attr entry pointer before field accessCVE-2026-80805Fix available5.3 Medium
- linuxxfs: restore nofs context unconditionally in xfs_trans_rollCVE-2026-80804Fix availableNo score
- linuxnfc: digital: clamp SENSF_RES length to the destination bufferCVE-2026-80803Fix available7.7 High
- linuxnfc: fdp: bound the device-reported read length and fix an skb leakCVE-2026-80802Fix available5.4 Medium
- linuxnfc: microread: validate target discovery payload lengthsCVE-2026-80801Fix available6.9 Medium
- linuxnfc: llcp: bound the connect_sn TLV walk to the skbCVE-2026-80800Fix available7.1 High
- linuxnfc: llcp: fix OOB read and u8 offset wrap in TLV parsersCVE-2026-80799Fix available7.1 High
- linuxnfc: llcp: reject PDUs shorter than the LLCP headerCVE-2026-80798Fix available7.1 High
- linuxnfc: pn533: purge fragmented skbs during cleanupCVE-2026-80797Fix available1.0 Low
- linuxnfc: nci: add data_len bound checks to activation parameter extractorsCVE-2026-80796Fix available6.0 Medium
- linuxnfc: nci: fix out-of-bounds write in nci_target_auto_activated()CVE-2026-80795Fix available7.0 High
- linuxnfc: nci: fix uninit-value in the RF discover/activated NTF handlersCVE-2026-80794Fix availableNo score
- linuxipv4: reject undersized MTUs in ip_do_fragment()CVE-2026-80793Fix available6.8 Medium
- linuxipv6: fix use-after-free in ip6_finish_output2()CVE-2026-80792Fix available8.4 High
- linuxnvmet-auth: zero the AUTH_RECEIVE response bufferCVE-2026-80791Fix available6.9 Medium
- linuxnvmet-fc: fix invalid free in LS IOD error pathCVE-2026-80790Fix availableNo score
- linuxnvmet-tcp: bound SGL data length before allocating command buffersCVE-2026-80789Fix available8.7 High
- linuxnvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocationsCVE-2026-80788Fix available8.7 High
- linuxnvmet: pci-epf: fix use-after-free in nvmet_pci_epf_exec_iod_work()CVE-2026-80787Fix available4.1 Medium
- linuxfbdev: Wrap user-invoked calls to fb_set_var() in helperCVE-2026-80786Fix available9.8 Critical
- linuxfbdev: serialize mode sysfs access with lock_fb_info()CVE-2026-80785Fix availableNo score
- linuxmptcp: pm: fix memory leak from alloc-during-teardown raceCVE-2026-80784Fix available5.7 Medium
- linuxHID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()CVE-2026-80783Fix available5.1 Medium
- linuxHID: magicmouse: do not keep a stale msc->input if no input is claimedCVE-2026-80782Fix available5.4 Medium
- linuxHID: core: fix OOB read of field->usage in hid_set_field()CVE-2026-80781Fix available2.4 Low
- linuxHID: pidff: fix OOB write when hid->inputs is emptyCVE-2026-80780Fix available7.0 High
- linuxnet/ionic: avoid OOB TX partner lookup for hwstamp RXQCVE-2026-80779Fix available8.4 High
- linuxfutex/pi: Reject cross-mm private futex ownersCVE-2026-80778Fix available7.3 High
- linuxfutex/pi: Plug private futex exec() raceCVE-2026-80777Fix available7.3 High
- linuxfutex: Fix race in futex_pivot_pending() during private hash resizeCVE-2026-80776Fix available5.7 Medium
- linuxfutex: Fix race on the initial mm->futex.phash.ref allocationCVE-2026-80775Public exploitFix available7.3 High
- linuxHID: asus: fix missing hid_is_usb() checkCVE-2026-80774Fix availableNo score
- linuxHID: huawei: fix missing hid_is_usb() checkCVE-2026-80773Fix available6.8 Medium
- linuxHID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()CVE-2026-80772Fix available5.3 Medium
- linuxHID: nintendo: register input device after capabilities are setCVE-2026-80771Fix available5.7 Medium
- linuxHID: nintendo: stop device IO before hid_hw_stop on probe failureCVE-2026-80770Fix available5.4 Medium
- linuxHID: rapoo: fix missing hid_is_usb() checkCVE-2026-80769Fix availableNo score
- Show moreLoading…