Skip to contentLinux vulnerabilities
Newest
- linuxBluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chanCVE-2026-90091Fix available8.0 High
- linuxBluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX pathCVE-2026-90090Fix available4.8 Medium
- linuxBluetooth: btnxpuart: Validate the FW dump header lengthCVE-2026-90089Fix available7.1 High
- linuxBluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loopCVE-2026-90088Fix available7.1 High
- linuxBluetooth: do not leak an hci_conn when a second LE connect is rejectedCVE-2026-90087Fix available6.8 Medium
- linuxxsk: honor XDP_TX_METADATA in zero-copy pathCVE-2026-90086Fix available4.6 Medium
- linuxocteontx2-af: fix NULL deref in NIX TM tree debugfs read pathCVE-2026-90085Fix availableNo score
- linuxocteontx2-vf: fix workqueue and netdev race in probe/removeCVE-2026-90084Fix availableNo score
- linuxnet/sched: act_ife: Only operate on Ethernet framesCVE-2026-90083Fix available6.8 Medium
- linuxnet: mana: Cap MSI-X vectors to the device MSI-X table sizeCVE-2026-90082Fix availableNo score
- linuxnet/rds: use wq_has_sleeper() in rds_cong_map_updated()CVE-2026-90081Fix available2.0 Low
- linuxocteontx2-pf: fix NULL deref of af_xdp_zc_qidx on rep setupCVE-2026-90080Fix availableNo score
- linuxocteontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init()CVE-2026-90079Fix availableNo score
- linuxnet/sched: act_skbmod: fix length calculations and avoid invalid header warningsCVE-2026-90078Fix available4.8 Medium
- linuxnet: fix a resource leak in copy_net_ns() error handling pathCVE-2026-90077Fix available5.7 Medium
- linuxnet/sched: fq: add overflow bounds to quantum and initial quantumCVE-2026-90076Fix available6.8 Medium
- linuxnet/sched: fq_codel: clamp default quantum and mtuCVE-2026-90075Fix available6.8 Medium
- linuxnet/sched: fq_pie: clamp default quantum to avoid signed overflowCVE-2026-90074Fix available6.8 Medium
- linuxnet/sched: hhf: clamp quantum before hhf_change() to avoid overflowCVE-2026-90073Fix available6.8 Medium
- linuxnet/sched: sfq: clamp quantum to avoid signed overflow soft lockupCVE-2026-90072Fix available6.8 Medium
- linuxnet/sched: sch_teql: restore skb->dev on the slave failure pathCVE-2026-90071Fix available7.8 High
- linuxtpm: st33zp24: Return zero on status read failureCVE-2026-90070Fix availableNo score
- linuxcrypto: acomp - allocate async request context when cloningCVE-2026-90069Fix available7.8 High
- linuxASoC: dapm: Fix off-by-one check on the second enum channelCVE-2026-90068Fix available0.0 None
- linuxlibceph: validate banner payload lengthCVE-2026-90067Fix available7.5 High
- linuxsamples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modifyCVE-2026-90066Fix availableNo score
- linuxnet/smc: release the internal TCP sock on IPPROTO_SMC socket creation failureCVE-2026-90065Fix available6.7 Medium
- linuxdrm/xe: Reject page faults from non-fault-mode scratch VMsCVE-2026-90064Fix available6.8 Medium
- linuxvirtio-net: Ensure that TCP packets don't overflow gso_segsCVE-2026-90063Fix available6.9 Medium
- linuxnetfilter: nf_tables: move hardware offload step after building the chain blobCVE-2026-90062Fix available7.1 High
- linuxnetfilter: nf_tables: skip double clone set expressions on element insertCVE-2026-90061Fix available6.8 Medium
- linuxALSA: control: Don't add invalid kcontrols to LED layerCVE-2026-90060Fix availableNo score
- linuxnet: stmmac: restore NET_IP_ALIGN in the RX DMA offsetCVE-2026-90059Fix available7.5 High
- linuxnet/sched: bound qdisc_pkt_len to prevent qdisc soft lockupCVE-2026-90058Fix available6.8 Medium
- linuxslip: remove slip_hangup() to fix use-after-free in slip_receive_buf()CVE-2026-90057Fix available7.8 High
- linuxnet: fec: only stop PTP if it was initializedCVE-2026-90056Fix availableNo score
- linuxusb: atm: usbatm: fix invalid ci_range initializationCVE-2026-90055Fix available0.0 None
- linuxtcp: fix corruption of urgent data on multi-segment retransmitCVE-2026-90054Fix available6.3 Medium
- linuxnet/sched: sch_htb: limit htb_classify inner-class filter hopsCVE-2026-90053Fix available6.8 Medium
- linuxtcp: reject non zerocopy devmem txCVE-2026-90051Fix available7.8 High
- linuxnet: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()CVE-2026-90049Fix available9.3 Critical
- linuxfs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()CVE-2026-90048Fix available9.8 Critical
- linuxdrm/xe: Don't hand out the flat CCS storage as usable VRAMCVE-2026-90047Fix available7.8 High
- linuxmm/page_alloc: don't spin_trylock() in NMI on UPCVE-2026-90046Fix available7.8 High
- linuxUSB: gadget: ffs: fix mm lifetime handlingCVE-2026-90045Fix available7.8 High
- linuxusb: gadget: f_fs: Fix Use-After-Free in AIO error pathCVE-2026-90044Fix available7.8 High
- linuxzram: fix slot lock bit position on big-endian 64-bitCVE-2026-90043Fix available7.8 High
- linuxceph: properly decrypt filenames in vmalloc() buffersCVE-2026-90042Fix available9.8 Critical
- linuxHID: sony: clean up device list on probe failureCVE-2026-90041Fix available8.8 High
- linuxKVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zappedCVE-2026-90040Fix available6.7 Medium
- Show moreLoading…