Skip to contentLinux vulnerabilities
Newest
- linuxNFSD: Guard admin state-revocation walks with NFSD_NET_UPCVE-2026-90039Fix available6.7 Medium
- linuxNFSD: Prevent client use-after-free during export state revocationCVE-2026-90038Fix available9.8 Critical
- linuxNFSD: Prevent client use-after-free during close_lru reapingCVE-2026-90037Fix available9.8 Critical
- linuxNFSD: Prevent client use-after-free during blocked-lock reapingCVE-2026-90036Fix available9.8 Critical
- linuxdrm/amd/display: fix division by zero in get_estimated_bw()CVE-2026-90035Fix available5.1 Medium
- linuxusb: image: mdc800: change kmalloc() to kzalloc()CVE-2026-90034Fix available2.4 Low
- linuxALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()CVE-2026-90033Fix available7.0 High
- linuxmedia: usbtv: keep device alive while ALSA card existsCVE-2026-90032Fix available7.8 High
- linuxusb-storage: ene_ub6250: fix race between scan work and probeCVE-2026-90031Fix available4.3 Medium
- linuxusb: dwc3: clear forceRM when issuing EndTransferCVE-2026-90030Fix available7.8 High
- linuxusb: storage: realtek_cr: fix use-after-free on disconnectCVE-2026-90029Fix available5.4 Medium
- linuxusb: typec: hd3ss3220: track VBUS enable state per consumerCVE-2026-90028Fix availableNo score
- linuxusb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stopCVE-2026-90027Fix available7.8 High
- linuxusb: typec: qcom-pmic: cancel reset_work on stopCVE-2026-90026Fix available7.8 High
- linuxusb: typec: ucsi: displayport: Fix OOB altmode array indexCVE-2026-90025Fix available7.7 High
- linuxusb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqsCVE-2026-90024Fix available5.1 Medium
- linuxusb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()CVE-2026-90023Fix availableNo score
- linuxusb: gadget: f_midi2: fix use-after-free in string attribute show pathCVE-2026-90022Fix available7.8 High
- linuxusb: gadget: f_midi: initialize work in f_midi_alloc()CVE-2026-90021Fix availableNo score
- linuxUSB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()CVE-2026-90020Fix availableNo score
- linuxusb: gadget: fix null pointer dereference in usb_put_function_instance()CVE-2026-90019Fix availableNo score
- linuxstaging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()CVE-2026-90018Fix available8.8 High
- linuxstaging: rtl8723bs: fix OOB read in rtw_action_frame_parse()CVE-2026-90017Fix available7.1 High
- linuxstaging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie()CVE-2026-90016Fix available7.1 High
- linuxxhci: fix lost bounce buffers on TDs spanning several ring segmentsCVE-2026-90015Fix available2.0 Low
- linuxtracing: Have show_event_filters/triggers files take trace array refCVE-2026-90014Fix available7.8 High
- linuxtracing: Take trace_array reference when opening options fileCVE-2026-90013Fix available7.8 High
- linuxspi: Fix DMA mapping ownership on partial map failureCVE-2026-90012Fix available9.8 Critical
- linuxscsi: target: iscsi: Reserve a terminator byte for the login payloadCVE-2026-90011Fix available9.1 Critical
- linuxscsi: bsg: Cap io_uring sense copy to max_response_lenCVE-2026-90010Fix available7.8 High
- linuxscsi: bsg: Fix TOCTOU in io_uring passthrough command setupCVE-2026-90009Fix available7.8 High
- linuxscsi: megaraid_sas: Limit NVMe request size to the PRP chain frameCVE-2026-90008Fix available7.8 High
- linuxscsi: pm8001: Use rollback index when freeing MSI-X vectorsCVE-2026-90007Fix available7.8 High
- linuxsamples/damon/mtier: handle damon_stop() failureCVE-2026-90006Fix availableNo score
- linuxsamples/damon/wsse: handle damon_start() failureCVE-2026-90005Fix availableNo score
- linuxmm/damon/core: handle region split failure in apply_min_nr_regions()CVE-2026-90004Fix available7.3 High
- linuxfutex: Prevent rcuwait use-after-free during requeue PICVE-2026-90003Fix available7.8 High
- linuxftrace: Take trace_array reference before accessing its ftrace_opsCVE-2026-90002Fix available7.8 High
- linuxHID: bpf: serialize device reference release in struct_ops destroy pathCVE-2026-90001Fix available7.8 High
- linuxHID: rmi: fix OOB access with undersized RMI reportsCVE-2026-90000Fix available8.8 High
- linuxHID: wacom: validate report length in wacom_intuos_pro2_bt_irqCVE-2026-89999Fix available8.1 High
- linuxdm: fix race when loading and unloading a tableCVE-2026-89998Fix available7.8 High
- linuxdm: fix resume-vs-remove raceCVE-2026-89997Fix available7.8 High
- linuxdma-buf: dma-heap: don't publish fd before copy_to_user() succeedsCVE-2026-89996Fix availableNo score
- linuxdma-direct: return struct page from dma_direct_alloc_from_pool()CVE-2026-89995Fix available8.8 High
- linuxdmaengine: fsl-edma: tracing: no ptr dereference during log outputCVE-2026-89994Fix available7.8 High
- linuxdmaengine: dw-edma: Initialize IRQ data before requesting IRQsCVE-2026-89993Fix availableNo score
- linuxcpuidle: dt_idle_genpd: kfree() the original name allocationCVE-2026-89992Fix available8.4 High
- linuxbpf: Fix infinite loop in pcpu_freelist push with one possible CPUCVE-2026-89991Fix available5.6 Medium
- linuxceph: lock mutex in ceph_mds_check_access()CVE-2026-89990Fix available9.8 Critical
- Show moreLoading…