Skip to contentLinux vulnerabilities
Newest
- linuxipvs: fix integer overflow in ftp helper port/address parsingCVE-2026-90141Fix available7.3 High
- linuxcuse: wait for pending RCU callbacks on module exitCVE-2026-90140Fix availableNo score
- linuxfuse: check for NULL root inode in fuse_fill_super_submountCVE-2026-90139Fix available5.7 Medium
- linuxvsock: don't check the listener's sk_err in vsock_accept()CVE-2026-90138Fix available6.8 Medium
- linuxplatform/x86: hp-bioscfg: fix password encoding bounds checkCVE-2026-90137Fix available7.7 High
- linuxplatform/x86/amd/hsmp: Reject negative power cap writes in hwmonCVE-2026-90136Fix availableNo score
- linuxnet: add missing ref_tracker_dir_exit() to alloc_netdev_mqs()CVE-2026-90135Fix availableNo score
- linuxntfs: fix kmap_local_page() usage in compressCVE-2026-90134Fix availableNo score
- linuxntfs: Fix index_root heap OOB write in ntfs_ir_to_ib()CVE-2026-90133Fix available7.8 High
- linuxntfs: reject unprivileged writes to reserved $LX* xattrsCVE-2026-90132Fix available7.1 High
- linuxntfs: serialize resident iomap reads with mrec_lockCVE-2026-90131Fix available7.1 High
- linuxvdpa_sim: fix cleanup after worker creation failureCVE-2026-90130Fix availableNo score
- linuxvirtio_balloon: quiesce balloon work before device shutdownCVE-2026-90129Fix availableNo score
- linuxvdpa/mlx5: fix wrong list iterated in add_direct_chain error pathCVE-2026-90128Fix availableNo score
- linuxvirtio: rtc: time out alarm requestsCVE-2026-90127Fix availableNo score
- linuxrtc: pcf8563: fix clock provider leak on unbindCVE-2026-90126Fix availableNo score
- linuxsmb: client: fix request buffer leak in smb2_new_read_req()CVE-2026-90125Fix available5.7 Medium
- linuxirqchip/renesas-rzg2l: Fix loss of interruptCVE-2026-90124Fix available2.0 Low
- linuxirqchip/ast2700-intc: Avoid allocating in the irq_domain activate() callbackCVE-2026-90123Fix availableNo score
- linuxclk: visconti: Make sure clk_init_data is fully initializedCVE-2026-90122Fix availableNo score
- linuxirqchip/gic-v5: Clear per-CPU IRS data on teardownCVE-2026-90121Fix availableNo score
- linuxirqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsingCVE-2026-90120Fix available8.4 High
- linuxALSA: ice1712: Fix the card leak at probe error with the auto-cleanupCVE-2026-90119Fix available5.1 Medium
- linuxntfs: fix off-by-one page overflow in ntfs_decompress()CVE-2026-90118Fix available7.8 High
- linuxntfs: validate usa_ofs before preserving the update sequence numberCVE-2026-90117Fix available7.1 High
- linuxALSA: mtpav: shut down output timer before card teardownCVE-2026-90116Fix available9.8 Critical
- linuxxsk: fix NULL pointer dereference in __xsk_rcv()CVE-2026-90115Fix available6.7 Medium
- linuxnet: bridge: Reject descending VLAN tunnel rangesCVE-2026-90114Fix available4.8 Medium
- linuxnetdevsim: update queue NAPI association on queue resetCVE-2026-90113Fix availableNo score
- linuxnet: qlcnic: validate unified ROM sections before loadingCVE-2026-90112Fix availableNo score
- linuxip6mr: do not clone dst in ip6mr_cache_report()CVE-2026-90111Fix available7.8 High
- linuxinetpeer: randomize RB-tree node comparison using SipHashCVE-2026-90110Fix available9.4 Critical
- linuxnet: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueueCVE-2026-90109Fix available6.8 Medium
- linuxnet/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transitionCVE-2026-90108Fix available8.2 High
- linuxnet/smc: free pending qentry in smc_llc_flow_stop() before memsetCVE-2026-90107Fix available8.2 High
- linuxnet: bridge: arp/nd proxy: fix reading neigh haCVE-2026-90106Fix available2.3 Low
- linuxvxlan: fix reading neigh haCVE-2026-90105Fix available2.0 Low
- linuxNFSv4.1: zero referring call lists before decodingCVE-2026-90104Fix available9.8 Critical
- linuxNFSv4.2: fix LAYOUTSTATS send buffer exhaustionCVE-2026-90103Fix available7.5 High
- linuxNFSv4/pnfs: key the data server cache on the NFS versionCVE-2026-90102Fix available7.5 High
- linuxbnxt_en: Fix call to hardware monitoring event handlerCVE-2026-90101Fix availableNo score
- linuxptp: netc: fix period truncation and potential divide-by-zero in PEROUTCVE-2026-90100Fix availableNo score
- linuxnet/sched: account classifier filter allocations to memcgCVE-2026-90099Fix available6.8 Medium
- linuxnet: sparx5: fix sleep in atomic context in MAC table accessCVE-2026-90098Fix available6.8 Medium
- linuxDrivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partitionCVE-2026-90097Fix availableNo score
- linuxfuse: invalidate the correct range after O_APPEND direct writeCVE-2026-90096Fix available4.8 Medium
- linuxfuse: Fix the condition to enable over-io-uringCVE-2026-90095Fix available5.7 Medium
- linuxarm64: process: Fix context switching MTE store-only tag checkCVE-2026-90094Fix available2.0 Low
- linuxBluetooth: L2CAP: access chan->conn safely in get/setsockoptCVE-2026-90093Fix available7.8 High
- linuxBluetooth: L2CAP: reject accept queue add unless BT_LISTENCVE-2026-90092Fix available8.0 High
- Show moreLoading…