Skip to contentLinux vulnerabilities
Newest
- linuxiommu/vt-d: Fix iopf_refcount leak on RID domain replacementCVE-2026-90242Fix availableNo score
- linuxiommu/vt-d: Tear down scalable-mode context on probe failureCVE-2026-90241Fix available8.2 High
- linuxiommu/vt-d: Flush context cache with correct SID when tearing down aliasesCVE-2026-90240Fix available8.8 High
- linuxmedia: amd: isp4: release partial allocations in isp4if_alloc_fw_gpumem()CVE-2026-90239Fix available5.7 Medium
- linuxmedia: amd: isp4: fix self-deadlock in isp4sd_pwron_and_init() error pathCVE-2026-90238Fix available5.7 Medium
- linuxnetfilter: nft_ct: move custom expectation support to helperCVE-2026-90237Fix available7.8 High
- linuxNFSD: Release the export reference when reaping open stateidsCVE-2026-90236Fix available7.1 High
- linuxsunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCECVE-2026-90235Fix available9.8 Critical
- linuxNFS: Return a delegation the client fails to recordCVE-2026-90234Fix available7.5 High
- linuxnvme-pci: release descriptor pools on probe failureCVE-2026-90233Fix availableNo score
- linuxamt: Don't support cross-netns setup.CVE-2026-90232Fix available6.8 Medium
- linuxapparmor: fix unconfined user namespace restriction forced stackCVE-2026-90231Fix available8.4 High
- linuxnvmet: fix heap out-of-bounds read in nvmet_auth_negotiate()CVE-2026-90230Fix available9.1 Critical
- linuxnvme-apple: Destroy the admin queue on removalCVE-2026-90229Fix available7.4 High
- linuxnvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns()CVE-2026-90228Fix available7.5 High
- linuxnvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()CVE-2026-90227Fix available7.8 High
- linuxnfc: llcp: avoid userspace overflow on invalid optlenCVE-2026-90226Fix available0.0 None
- linuxnfc: llcp: read llcp_sock->local under the socket lock in getsockoptCVE-2026-90225Fix available7.8 High
- linuxnfc: nci: fix double completion race in nci_data_exchange_completeCVE-2026-90224Fix available7.5 High
- linuxnfc: llcp: bound SNL TLV parsing to the skb and add length checksCVE-2026-90223Fix available7.1 High
- linuxnfc: pn533: hold a reference to the request skb during send_frameCVE-2026-90222Fix available7.1 High
- linuxnfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsingCVE-2026-90221Fix availableNo score
- linuxALSA: seq: Don't leak the extension cell pointer in the bounce payloadCVE-2026-90220Fix available4.8 Medium
- linuxRDMA/cxgb4: Free debugfs on registration failureCVE-2026-90219Fix availableNo score
- linuxRDMA/cma: Fix WARNING in res_to_rtCVE-2026-90218Fix available4.8 Medium
- linuxbpf: Compare iterator types during state pruningCVE-2026-90217Fix available7.8 High
- linuxubi: Fix rollback for explicit UBI device numbersCVE-2026-90216Fix availableNo score
- linuxmtd: ubi: Release device reference on busy detachCVE-2026-90215Fix available4.6 Medium
- linuxASoC: xilinx: formatter_pcm: fix stream_data leak on open errorCVE-2026-90214Fix available9.8 Critical
- linuxfirewire: core: fix memory leak in error path of build_tree()CVE-2026-90213Fix available5.1 Medium
- linuxarm64/efi: Avoid voluntary preemption with efi_mm installedCVE-2026-90212Fix available5.7 Medium
- linuxbpf, s390: Clear fetch destination on faulting arena atomicCVE-2026-90211Fix available4.6 Medium
- linuxbpf: Fix UAF in bpf_trampoline_multi_attach_free on update failureCVE-2026-90210Fix available7.8 High
- linuxs390/debug: Fix deadlock during unregisterCVE-2026-90209Fix availableNo score
- linuxclocksource/drivers/samsung_pwm: Switch to raw_spinlock_t typeCVE-2026-90208Fix availableNo score
- linuxALSA: seq: midi: Serialize input teardown with event_inputCVE-2026-90207Fix available7.8 High
- linuxnvmet: fix max_qid race between configfs and controller allocationCVE-2026-90206Fix availableNo score
- linuxocfs2: validate orphan slot during inode readCVE-2026-90205Fix available7.8 High
- linuxocfs2: validate DIO orphan slot during inode readCVE-2026-90204Fix available7.8 High
- linuxSquashfs: check block offset is not negativeCVE-2026-90203Fix available7.1 High
- linuxscsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffersCVE-2026-90202Fix availableNo score
- linuxnet: page_pool: fix UAF in __page_pool_release_netmem_dma on xa_cmpxchg raceCVE-2026-90201Fix available7.1 High
- linuxfs/ntfs3: fix integer overflow in MFT cluster validationCVE-2026-90200Fix available7.1 High
- linuxfs/ntfs3: reject out-of-range evcn in mi_enum_attr()CVE-2026-90199Fix available7.8 High
- linuxALSA: core: Fix use-after-free in snd_card_do_free()CVE-2026-90198Fix availableNo score
- linuxHID: haptic: don't write an uninitialized value to unhandled usagesCVE-2026-90197Fix available4.8 Medium
- linuxASoC: SOF: validate topology volume range before allocationCVE-2026-90196Fix availableNo score
- linuxriscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc argsCVE-2026-90195Fix availableNo score
- linuxACPI: scan: fix bus ID cleanup on device_add() failuresCVE-2026-90194Fix availableNo score
- linuxmailbox: qcom-cpucp: fix PREEMPT_RT self-deadlock in IRQ handlerCVE-2026-90193Fix available5.7 Medium
- Show moreLoading…