Skip to contentLinux vulnerabilities
Newest
- linuxusb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race conditionCVE-2026-89739Fix availableNo score
- linuxusb: gadget: at91_udc: drain polled-VBUS timer/work before udc is freedCVE-2026-89738Fix available7.8 High
- linuxusb: typec: thunderbolt: Disable work before freeing tbt on removeCVE-2026-89737Fix available5.4 Medium
- linuxusb: gadget: u_audio: Fix use-after-free on sound card disconnectCVE-2026-89736Fix available7.8 High
- linuxusb: gadget: midi2: remove default configfs groups on teardownCVE-2026-89735Fix availableNo score
- linuxusb: gadget: uvc: Fix null pointer dereference in uvcg_video_init()CVE-2026-89734Fix availableNo score
- linuxusb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind()CVE-2026-89733Fix available7.8 High
- linuxusb: gadget: f_fs: Prevent deadlock during ep0 read loopCVE-2026-89732Fix availableNo score
- linuxcxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds AER register readCVE-2026-89731Fix available7.1 High
- linuxfpga: altera-cvp: Avoid out-of-bounds read in trailing byte writeCVE-2026-89730Fix availableNo score
- linuxHID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_featureCVE-2026-89729Fix available8.8 High
- linuxi3c: renesas: Fix out-of-bounds access for newdevs maskCVE-2026-89728Fix availableNo score
- linuxKVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTIDCVE-2026-89727Fix available6.9 Medium
- linuxlib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()CVE-2026-89726Fix availableNo score
- linuxmedia: cec: stm32: prevent out-of-bounds write on RX overflowCVE-2026-89725Fix available8.8 High
- linuxmedia: vicodec: fix out-of-bounds write in FWHT encoderCVE-2026-89724Fix available7.8 High
- linuxnilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncationCVE-2026-89723Fix available7.8 High
- linuxPCI/sysfs: Fix out-of-bounds read in pci_write_legacy_io()CVE-2026-89722Fix availableNo score
- linuxphy: rockchip-samsung-dcphy: fix out-of-range max_registerCVE-2026-89721Fix availableNo score
- linuxubifs: fix out-of-bounds read in signature length checkCVE-2026-89720Fix available7.7 High
- linuxzram: fix out-of-bounds access in read_block_state()CVE-2026-89719Fix availableNo score
- linuxzram: fix out-of-bounds access in writeback_store()CVE-2026-89718Fix availableNo score
- linuxzram: set default primary compressor in zram_destroy_comps()CVE-2026-89717Fix availableNo score
- linuxzram: validate deflate paramsCVE-2026-89716Fix availableNo score
- linuxNFS/localio: fix ref leak on nfs_uuid_add_file failureCVE-2026-89715Fix available5.7 Medium
- linuxNFS: fix delegation_hash_table leak when nfs4_server_common_setup() failsCVE-2026-89714Fix availableNo score
- linuxNFSD: check truncate permission under inode lockCVE-2026-89713Fix available9.1 Critical
- linuxNFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lockCVE-2026-89712Fix available9.8 Critical
- linuxNFSD: remove flawed WARN_ON_ONCE from nfsd_mode_checkCVE-2026-89711Fix available8.2 High
- linuxNFSv4.1: fix layout segment leak on the pnfs_layout_process() forget pathCVE-2026-89710Fix available8.2 High
- linuxlockd, nfsd: RCU-protect nlmsvc_ops dispatchCVE-2026-89709Fix available8.1 High
- linuxnfsd: RCU-protect cl_cb_session to fix use-after-free on session teardownCVE-2026-89708Fix available9.8 Critical
- linuxnfsd: release path refs on follow_down() errorCVE-2026-89707Fix available7.5 High
- linuxnfsd: Reset write verifier when async COPY writeback failsCVE-2026-89706Fix available7.5 High
- linuxnfsd: restore rq_status_counter to even on all nfsd_dispatch() exit pathsCVE-2026-89705Fix available7.1 High
- linuxnfsd: sample writeback error cursor before async COPY loopCVE-2026-89704Fix available7.5 High
- linuxnfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegationsCVE-2026-89703Fix available9.8 Critical
- linuxnfsd: size fh_verify server sockaddr slot by xpt_locallenCVE-2026-89702Fix available9.8 Critical
- linuxnfsd: validate nseconds in TIME_DELEG decode pathsCVE-2026-89701Fix available5.3 Medium
- linuxnfsd: validate sockaddr length per family in listener_setCVE-2026-89700Fix available4.6 Medium
- linuxnfsd: validate symlink target length in NFSv4 CREATECVE-2026-89699Fix available7.5 High
- linuxnfsd: widen nfsd_genl_rqstp address fields to sockaddr_storageCVE-2026-89698Fix available2.0 Low
- linuxnfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()CVE-2026-89697Fix available9.1 Critical
- linuxnfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL derefCVE-2026-89696Fix available7.5 High
- linuxnfsd: cap decoded POSIX ACL count to bound sort costCVE-2026-89695Fix available7.5 High
- linuxnfsd: check client ownership when cancelling a copy-notify stateidCVE-2026-89694Fix available7.1 High
- linuxnfsd: check nfsd4_acl_to_attr() return value in nfsd4_create()CVE-2026-89693Fix available5.3 Medium
- linuxnfsd: clear CALLBACK_RUNNING on failed delegation recall queueCVE-2026-89692Fix available7.5 High
- linuxnfsd: clear opcnt on compound arg release to prevent OOB readCVE-2026-89691Fix available7.1 High
- linuxnfsd: defer vfree of compound ops to fix rpc_status UAFCVE-2026-89690Fix available7.8 High
- Show moreLoading…