Skip to contentLinux vulnerabilities
Newest
- linuxSUNRPC: Reject krb5 v2 wrap tokens with oversized ec fieldCVE-2026-89538Fix available9.8 Critical
- linuxSUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2CVE-2026-89537Fix available9.1 Critical
- linuxSUNRPC: wait for in-flight client TLS handshake callbackCVE-2026-89536Fix available9.8 Critical
- linuxsvcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_idCVE-2026-89535Fix available8.1 High
- linuxsvcrdma: Clear sc_cm_id when ADDR_CHANGE replacement failsCVE-2026-89534Fix available8.8 High
- linuxsvcrdma: Fix offset arithmetic in read_chunk_rangeCVE-2026-89533Fix available9.8 Critical
- linuxsvcrdma: Fix pcl_for_each_segment for empty chunksCVE-2026-89532Fix available9.1 Critical
- linuxsvcrdma: Reject connection when transport allocation failsCVE-2026-89531Fix available8.2 High
- linuxsvcrdma: Reject inline replies that overflow the pull-up bufferCVE-2026-89530Fix available9.8 Critical
- linuxsvcrdma: Reject oversized Read segments at decode timeCVE-2026-89529Fix available8.7 High
- linuxsvcrdma: Reject Read lists that exceed the page budgetCVE-2026-89528Fix available7.5 High
- linuxsvcrdma: Use svc_xprt_put to free listener on create failureCVE-2026-89527Fix available4.6 Medium
- linuxsvcrdma: Validate Read chunk positions before reconstructionCVE-2026-89526Fix available9.8 Critical
- linuxudf: reject VAT indexes equal to the entry countCVE-2026-89525Fix available7.1 High
- linuxwifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsetsCVE-2026-89524Fix available8.1 High
- linuxwifi: mt76: mt7925: cancel pending mlo_pm_workCVE-2026-89523Fix available7.8 High
- linuxmedia: staging/ipu7: fix async notifier UAF on probe error pathCVE-2026-89522Fix available7.8 High
- linuxsched/core: Handle pick_task() releasing the rq lockCVE-2026-89521Fix available7.3 High
- linuxsched/core: Make core-sched flips wait for in-flight selectionsCVE-2026-89520Fix available7.8 High
- linuxsched_ext: Replace SCX_RQ_BAL_KEEP with a dispatch verdict returnCVE-2026-89519Fix available5.7 Medium
- linuxsched_ext: Fix this_rq() assumptions in dispatch kfuncsCVE-2026-89518Fix available5.7 Medium
- linuxsched_ext: Fix rq->core_pick corruption under core schedulingCVE-2026-89517Fix available5.7 Medium
- linuxsched_ext: Don't BUG_ON a destroyed DSQ in process_deferred_reenq_usersCVE-2026-89516Fix availableNo score
- linuxscsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables()CVE-2026-89515Fix available0.0 None
- linuxscsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlockCVE-2026-89514Fix available6.0 Medium
- linuxRISC-V: KVM: Fix PMU event info array size overflowCVE-2026-89513Fix available8.8 High
- linuxremoteproc: scp: Fix device reference leak on failed lookupCVE-2026-89512Fix availableNo score
- linuxqede: Fix NULL pointer dereference in TPA fragment processingCVE-2026-89511Fix available7.5 High
- linuxRDMA/cxgb4: Cancel reg_work before freeing device on removeCVE-2026-89510Fix available7.8 High
- linuxRDMA/ionic: Embed counter driver data in rdma_counter allocationCVE-2026-89509Fix available6.7 Medium
- linuxRDMA/ucma: Lock the handler in ucma_set_ib_path()CVE-2026-89508Fix available7.8 High
- linuxRDMA/ucma: Lock the handler in ucma_write_cm_event()CVE-2026-89507Fix available7.8 High
- linuxRDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MRCVE-2026-89506Fix available6.8 Medium
- linuxRDMA/uverbs: Guard legacy bundles without method_elmCVE-2026-89505Fix available5.7 Medium
- linuxregulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointerCVE-2026-89504Fix available8.4 High
- linuxring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page()CVE-2026-89503Fix available7.8 High
- linuxring-buffer: Free cpu_buffer::free_page with subbuf_orderCVE-2026-89502Fix availableNo score
- linuxring-buffer: Hold cpu_buffer::lock when resizing a subbufCVE-2026-89501Fix available7.8 High
- linuxring-buffer: Make cpu_buffer::free_page a buffer_data_read_pageCVE-2026-89500Fix available7.8 High
- linuxring-buffer: Stop remote reader update when page swap failsCVE-2026-89499Fix available7.8 High
- linuxorangefs: fix double-free of trailer_buf on readdir copy failureCVE-2026-89498Fix availableNo score
- linuxorangefs: skip leading spaces before parsing client debug masksCVE-2026-89497Fix available7.8 High
- linuxocfs2: always run deallocs on copy-on-write completionCVE-2026-89496Fix available6.8 Medium
- linuxocfs2: bound namelen in dlm_migrate_request_handlerCVE-2026-89495Fix available9.8 Critical
- linuxocfs2: validate lengths in dlm_mig_lockres_handlerCVE-2026-89494Fix available9.8 Critical
- linuxocfs2: validate rl_used against rl_count in refcount block validatorCVE-2026-89493Fix available8.8 High
- linuxocfs2: validate directory-index entry counts when reading metadataCVE-2026-89492Fix available9.8 Critical
- linuxocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin()CVE-2026-89491Fix availableNo score
- linuxocfs2: fix readdir position truncation on 32-bit kernelsCVE-2026-89490Fix available2.0 Low
- linuxopenrisc: fix arbitrary kernel memory access via or1k_atomic syscallCVE-2026-89489Fix available7.8 High
- Show moreLoading…