Skip to contentLinux vulnerabilities
Newest
- linuxmailbox: qcom-cpucp: handle NULL data in send_data callbackCVE-2026-90192Fix availableNo score
- linuxmailbox: riscv-sbi-mpxy: validate RPMI notification lengthsCVE-2026-90191Fix available8.4 High
- linuxnull_blk: use DEFINE_MUTEX for the file-scope mutexCVE-2026-90190Fix availableNo score
- linuxnull_blk: register configfs subsystem after creating default devicesCVE-2026-90189Fix availableNo score
- linuxnull_blk: free global tag_set on init error pathCVE-2026-90188Fix availableNo score
- linuxnull_blk: free zones array on device power-offCVE-2026-90187Fix availableNo score
- linuxnull_blk: reject per-device queue resize for shared tag setCVE-2026-90186Fix availableNo score
- linuxnull_blk: serialize configfs attribute stores with the lockCVE-2026-90185Fix availableNo score
- linuxnull_blk: serialize configfs attribute updates with device setupCVE-2026-90184Fix availableNo score
- linuxblk-iolatency: clear delay state when freeing policy dataCVE-2026-90183Fix available6.8 Medium
- linuxblk-iocost: clear delay state when freeing policy dataCVE-2026-90182Fix available2.0 Low
- linuxublk: avoid teardown retry loop on xarray allocation failureCVE-2026-90181Fix available5.7 Medium
- linuxblock: mtip32xx: synchronize ioctls with device removalCVE-2026-90180Fix availableNo score
- linuxapparmor: fix deadlock in complain-mode change_hatCVE-2026-90179Fix available6.8 Medium
- linuxhwmon: (coretemp) Fix core_data leak on CPUs without PTSCVE-2026-90178Fix availableNo score
- linuxbpf: Check pointer type for all atomic RMW pathsCVE-2026-90177Fix available7.8 High
- linuxksmbd: Do not skip lock checks for single-byte rangesCVE-2026-90176Fix available8.1 High
- linuxsmb: server: fix leak of ksmbd_ipc_login_request_ext() returned bufferCVE-2026-90175Fix available8.2 High
- linuxksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user()CVE-2026-90174Fix available7.1 High
- linuxsmb: smbdirect: free completion queues with ib_free_cq()CVE-2026-90173Fix available9.8 Critical
- linuxsmb: smbdirect: destroy QP before mem pools on accept failureCVE-2026-90172Fix available7.5 High
- linuxsmb: smbdirect: release pending child sockets outside the handler lockCVE-2026-90171Fix availableNo score
- linuxksmbd: validate ipc response length before dereferencing its fieldsCVE-2026-90170Fix availableNo score
- linuxksmbd: free preauth sessions on connection teardownCVE-2026-90169Fix available7.1 High
- linuxksmbd: serialize oplock close with pending break ownershipCVE-2026-90167Fix available7.7 High
- linuxsmb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()CVE-2026-90166Fix available6.0 Medium
- linuxsmb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()CVE-2026-90165Fix availableNo score
- linuxsmb/server: abort initialization when proc setup failsCVE-2026-90164Fix availableNo score
- linuxsmb/server: call ksmbd_proc_cleanup() on module init failureCVE-2026-90163Fix availableNo score
- linuxksmbd: defer publishing granted locks to prevent UAF/double-free raceCVE-2026-90162Fix available8.8 High
- linuxerofs: fix interlaced ztailpacking pclustersCVE-2026-90161Fix available7.1 High
- linuxlwt_bpf: Restore reserved headroom after xmit programCVE-2026-90160Fix availableNo score
- linuxbpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooksCVE-2026-90159Fix available1.8 Low
- linuxm68k: nfcon: Do not call console_is_registered() in nfcon_device()CVE-2026-90158Fix available6.8 Medium
- linuxbpf: Reject negative optlen in cgroup getsockopt hookCVE-2026-90157Fix available6.7 Medium
- linuxksmbd: safely discard unregistered deferred locksCVE-2026-90156Fix available6.0 Medium
- linuxksmbd: detach blocked lock requests before freeingCVE-2026-90155Fix available7.1 High
- linuxksmbd: scope session state changes to bound connectionsCVE-2026-90154Fix available6.0 Medium
- linuxksmbd: bound smb_check_perm_dacl() ACE walks by DACL sizeCVE-2026-90153Fix available8.1 High
- linuxsmb/server: fix session leak in ksmbd_session_register()CVE-2026-90152Fix available8.2 High
- linuxNFSv4: remove callback IDR entry on client allocation failureCVE-2026-90151Fix available9.8 Critical
- linuxpnfs/blocklayout: Fix device leaks on parse failureCVE-2026-90150Fix available7.7 High
- linuxNFSv4/flexfiles: fix NULL dereference for NFSv4.0 data serversCVE-2026-90149Fix available7.5 High
- linuxNFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease()CVE-2026-90148Fix available8.2 High
- linuxclk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate()CVE-2026-90147Fix availableNo score
- linuxbpf, xdp: move offload check into dev_xdp_install()CVE-2026-90146Fix available7.8 High
- linuxhinic3: Fix skb linearization mismatch and drop skb when skb_checksum_help() failedCVE-2026-90145Fix available7.1 High
- linuxdpll: fix NULL deref in dpll_device_ops() during teardown raceCVE-2026-90144Fix availableNo score
- linuxnet: kcm: Hold RCU read lock while running BPF parserCVE-2026-90143Fix available7.8 High
- linuxvirtio_net: Fix resize of the RX ringCVE-2026-90142Fix available7.8 High
- Show moreLoading…