Skip to contentLinux vulnerabilities
Newest
- linuxcifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNCCVE-2026-89639Fix available7.1 High
- linuxsmb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensionsCVE-2026-89638Fix available7.8 High
- linuxsmb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2CVE-2026-89637Fix available9.8 Critical
- linuxsmb: client: clear ce->tgthint in free_tgts()CVE-2026-89636Fix available9.8 Critical
- linuxksmbd: only rebind the reopened file's own oplock on durable reconnectCVE-2026-89635Fix available9.8 Critical
- linuxsmb: client: fix ALIGN() overflow in symlink_data() error context loopCVE-2026-89634Fix available9.1 Critical
- linuxsmb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()CVE-2026-89633Public exploitFix available9.8 Critical
- linuxsmb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr()CVE-2026-89632Fix available8.2 High
- linuxsmb: client: reject a tree connect response whose byte count is too smallCVE-2026-89631Fix available9.1 Critical
- linuxsmb: client: restore the data_offset bound in is_valid_oplock_break()CVE-2026-89630Fix available9.1 Critical
- linuxHID: corsair-void: Check size of status and firmware events before reading themCVE-2026-89629Fix available5.2 Medium
- linuxHID: picolcd: clamp eeprom debugfs read to bytes actually receivedCVE-2026-89628Fix availableNo score
- linuxHID: roccat: free buffered reports when destroying deviceCVE-2026-89627Fix available2.4 Low
- linuxHID: sensor: custom: Fix field sysfs group cleanup on failureCVE-2026-89626Fix available8.8 High
- linuxHID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbindCVE-2026-89625Fix available5.4 Medium
- linuxHID: universal-pidff: stop the device when force-feedback init failsCVE-2026-89624Fix available7.8 High
- linuxHID: mcp2221: stop device IO before hid_hw_stopCVE-2026-89623Fix available5.4 Medium
- linuxHID: mcp2221: clear rxbuf after I2C/SMBus transfer completesCVE-2026-89622Fix available7.8 High
- linuxHID: mcp2221: validate report size in mcp2221_raw_event()CVE-2026-89621Fix available2.4 Low
- linuxHID: intel-thc-hid: intel-quickspi: validate report size before copyCVE-2026-89620Fix available7.8 High
- linuxHID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller bufferCVE-2026-89619Fix available7.8 High
- linuxeventfs: Initialize ei->children and ei->list in init_ei()CVE-2026-89618Fix available9.8 Critical
- linuxfs/ntfs3: validate dirty page table on log replayCVE-2026-89617Fix available7.8 High
- linuxfs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame()CVE-2026-89616Fix available7.5 High
- linuxfs/ntfs3: bound page_lcns[] index by the log recordCVE-2026-89615Fix available8.4 High
- linuxntfs: bound the free-cluster bitmap scan to the volumeCVE-2026-89614Fix available9.8 Critical
- linuxntfs: reject invalid empty mapping pairsCVE-2026-89613Fix available9.8 Critical
- linuxntfs: reject invalid MFT LCNs from boot sectorCVE-2026-89612Fix available9.8 Critical
- linuxntfs: validate non-resident attribute offsetsCVE-2026-89611Fix available9.8 Critical
- linuxntfs: verify run length exceeding volume boundaryCVE-2026-89610Fix available9.8 Critical
- linuxecryptfs: hold msg ctx list lock when cleaning daemon queueCVE-2026-89609Fix available7.8 High
- linuxecryptfs: pass packet set buffer size to parserCVE-2026-89608Fix available7.1 High
- linuxecryptfs: reject oversized encrypted_key_size in parse_tag_3_packetCVE-2026-89607Fix available7.8 High
- linuxecryptfs: reject too-small tag 70 packetsCVE-2026-89606Fix available7.8 High
- linuxecryptfs: release message context on send failureCVE-2026-89605Fix available7.8 High
- linuxefivarfs: Rate limit statfs() handlerCVE-2026-89604Fix available6.8 Medium
- linuxerofs: skip sufficiently large global buffers when resizingCVE-2026-89602Fix available7.8 High
- linuxext2: Fix lost inode updates for IS_SYNC inodesCVE-2026-89601Fix available8.8 High
- linuxfanotify: fix use-after-free of file range infoCVE-2026-89600Fix available7.8 High
- linuxfbdev: omapfb: panel-dsi-cm: initialize lock before registering displayCVE-2026-89599Fix available8.4 High
- linuxfbdev: ssd1307fb: defer I2C transfers from damage callbacksCVE-2026-89598Fix available6.8 Medium
- linuxfbdev: uvesafb: unregister connector callback on init failureCVE-2026-89597Fix available7.8 High
- linuxforcedeth: fix off-by-one when saving/restoring non-PCI config spaceCVE-2026-89596Fix available7.1 High
- linuxfsnotify: Fix stale object mask after concurrent mark updatesCVE-2026-89595Fix available2.0 Low
- linuxhsi: omap_ssi_core: fix missing DMA mask setup for SSI controller deviceCVE-2026-89594Fix available7.8 High
- linuxhugetlb: only adjust reservation during unmapping if mapcount is 0CVE-2026-89593Fix available7.1 High
- linuxaccel/rocket: fix NULL dereference and integer overflow in rocket_job_push()CVE-2026-89592Fix available5.7 Medium
- linuxaccel/rocket: initialize job domain before cleanup pathsCVE-2026-89591Fix available6.8 Medium
- linuxaccel/rocket: Fix error path handling in rocket_job_run()CVE-2026-89590Fix available5.7 Medium
- linuxacpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locksCVE-2026-89589Fix availableNo score
- Show moreLoading…