Skip to contentLinux vulnerabilities
Newest
- linuxACPI: APEI: GHES: fix ARM section length accounting after headerCVE-2026-89588Fix available8.4 High
- linuxACPI: pfr_update: fix stack buffer overflow in query_capability()CVE-2026-89587Fix available7.8 High
- linuxata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytesCVE-2026-89586Fix available8.2 High
- linuxauxdisplay: charlcd: cancel backlight work on registration failureCVE-2026-89585Fix available7.8 High
- linuxblock: validate user space vectors during extractionCVE-2026-89584Fix available7.8 High
- linuxBluetooth: eir: Fix OOB read in eir_get_service_data()CVE-2026-89583Fix available8.1 High
- linuxbnx2x: fix double free in bnx2x_init_firmware() error pathCVE-2026-89582Fix available7.1 High
- linuxbpf, x86: Fix per-CPU address resolution into an extended registerCVE-2026-89581Fix available7.8 High
- linuxbpf: Disable preemption in __bpf_get_stackCVE-2026-89580Fix available7.8 High
- linuxbpf: Harden bloom filter sizing and indexing on 32-bit kernelsCVE-2026-89579Fix available7.8 High
- linuxdm-io: clone the source bio instead of copying its biovecCVE-2026-89578Fix available6.8 Medium
- linuxdm-io: report non-retryable errors separatedlyCVE-2026-89577Fix available5.8 Medium
- linuxdm-era: fix shadowed superblock leak on take-snap failureCVE-2026-89576Fix availableNo score
- linuxdm raid1: reserve space for NUL-terminator in build_constructor_string()CVE-2026-89575Fix availableNo score
- linuxdm array: validate array block headers on readCVE-2026-89574Fix available7.8 High
- linuxdm array: reject an array block whose value size is not the caller'sCVE-2026-89573Fix available7.8 High
- linuxcpufreq: apple-soc: Fix OPP table cleanupCVE-2026-89572Fix availableNo score
- linuxcxl/features: bound fwctl command payload to the input bufferCVE-2026-89571Fix available7.1 High
- linuxcxl/mce: Make the MCE notifier per-regionCVE-2026-89570Fix available7.8 High
- linuxBluetooth: RFCOMM: serialize security confirmation handlingCVE-2026-89569Fix available8.8 High
- linuxkho: fix size calculation in kho_preserved_memory_reserve()CVE-2026-89568Fix availableNo score
- linuxjbd2: bound shrinker scans by examined checkpoint buffersCVE-2026-89567Fix available5.7 Medium
- linuxjbd2: check need_resched() when skipping busy checkpoint buffersCVE-2026-89566Fix available5.7 Medium
- linuxipip: fix skb leak in collect_md mode when metadata_dst allocation failsCVE-2026-89565Fix available8.2 High
- linuxip: orphan prefetched skbs before multicast forwardingCVE-2026-89564Fix available7.8 High
- linuxip6_tunnel: use skb_cow_head() in ip6_tnl_xmit()CVE-2026-89563Fix available7.8 High
- linuxip6_gre: fix hardware header length for NBMA tunnelsCVE-2026-89562Fix available7.8 High
- linuxipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv()CVE-2026-89561Fix available7.5 High
- linuxlandlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creationCVE-2026-89560Fix available8.4 High
- linuxlibnvdimm/labels: Prevent integer overflow in __nd_label_validate()CVE-2026-89559Fix available7.8 High
- linuxmd/raid10: fix still_degraded being inverted in raid10_sync_request()CVE-2026-89558Fix available9.8 Critical
- linuxmd: do overflow check for sb->bblog_shift in super_1_load()CVE-2026-89557Fix available7.8 High
- linuxmodule: validate string table section typesCVE-2026-89556Fix availableNo score
- linuxmpls: reload header after pskb_may_pull()CVE-2026-89555Fix available9.8 Critical
- linuxmptcp: fix uninitialized local_id in syncookie MP_JOIN reconstructionCVE-2026-89554Fix available8.2 High
- linuxnouveau/gem: reserve the bo in the info ioctl around the vma lookupCVE-2026-89553Fix available7.8 High
- linuxparams: fix charp corruption on allocation failureCVE-2026-89552Fix availableNo score
- linuxSUNRPC: xdr_buf_trim: clamp buf->len to avoid underflowCVE-2026-89551Fix available9.8 Critical
- linuxSUNRPC: svcauth_gss: enforce krb5 token minimum lengthCVE-2026-89550Fix available9.8 Critical
- linuxsunrpc: route to a populated pool in svc_pool_for_cpu()CVE-2026-89549Fix available7.5 High
- linuxSUNRPC: always drain cache_cleaner before destroying a cache_detailCVE-2026-89548Fix available7.8 High
- linuxSUNRPC: Check svc pool percpu counter allocationCVE-2026-89547Fix available8.1 High
- linuxSUNRPC: close backchannel before destroying callback serviceCVE-2026-89546Fix available9.8 Critical
- linuxsunrpc: defer rq_argp and rq_resp free until after RCU grace periodCVE-2026-89545Fix available7.8 High
- linuxSUNRPC: fix gssx_dec_option_array error path bugsCVE-2026-89544Fix available7.5 High
- linuxsunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedirCVE-2026-89543Fix availableNo score
- linuxSUNRPC: harden gss_krb5_unwrap_v2 against short tokensCVE-2026-89542Fix available9.8 Critical
- linuxSUNRPC: harden gss_unwrap_resp_priv length checksCVE-2026-89541Fix available9.8 Critical
- linuxsunrpc: init gssp_lock before publishing proc entryCVE-2026-89540Fix available7.8 High
- linuxSUNRPC: reject duplicate CREDS_VALUE optionsCVE-2026-89539Fix availableNo score
- Show moreLoading…