Skip to contentLinux vulnerabilities
Newest
- linuxRDMA/siw: Fix use-after-free in siw_accept()CVE-2026-90292Fix available7.8 High
- linuxmodule/dups: Fix use-after-free in kmod_dup_req lifetime handlingCVE-2026-90291Fix available7.8 High
- linuxarm64: hibernate: Restore DAIF state on errorCVE-2026-90290Fix availableNo score
- linuxdrm/amd/display: Resize MST HDCP per-connector arrays to 32CVE-2026-90289Fix available7.8 High
- linuxphy: renesas: rcar-gen2: Fix double of_node_put on phy creation failureCVE-2026-90288Fix available7.4 High
- linuxphy: sunplus: fix error handling in sp_uphy_init()CVE-2026-90287Fix availableNo score
- linuxdrm/amdgpu/gfx6: Use PFP on the compute queues tooCVE-2026-90286Fix available8.8 High
- linuxscsi: qla2xxx: Remove redundant VPD flash read in sysfs read pathCVE-2026-90285Fix availableNo score
- linuxfirmware_loader: do not queue completed sysfs fallback requestsCVE-2026-90284Fix availableNo score
- linuxhugetlbfs: release subpool on fill_super failureCVE-2026-90283Fix availableNo score
- linuxphy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspendCVE-2026-90282Fix availableNo score
- linuxphy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspendCVE-2026-90281Fix availableNo score
- linuxphy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspendCVE-2026-90280Fix availableNo score
- linuxmd/raid5: round bitmap stripes with sector divisionCVE-2026-90279Fix available2.0 Low
- linuxmd: wait for behind writes before destroying bitmapCVE-2026-90278Fix availableNo score
- linuxmd/md-llbitmap: prevent create failure bitmap UAFCVE-2026-90277Fix availableNo score
- linuxmd/md-llbitmap: stop daemon timer rearm on destroyCVE-2026-90276Fix availableNo score
- linuxmd/raid1: don't set array_frozen in raid1_takeover()CVE-2026-90275Fix availableNo score
- linuxcoresight: etm4x: fix underflow for usage of (nrseqstate - 1)CVE-2026-90274Fix availableNo score
- linuxcoresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enableCVE-2026-90273Fix available4.8 Medium
- linuxperf: arm_pmuv3: Zero initialize hw_id branch stack fieldCVE-2026-90272Fix available4.8 Medium
- linuxarm_mpam: Fix a NULL pointer dereference on unbinding after an error interruptCVE-2026-90271Fix availableNo score
- linuxarm_mpam: Disable driver unbind to avoid UAFCVE-2026-90270Fix availableNo score
- linuxbpf: Reject load-acquire from pointers requiring fault protectionCVE-2026-90269Fix available6.7 Medium
- linuxscsi: sd: Fix error handling in sd_probe() after large pool creation failureCVE-2026-90268Fix available8.1 High
- linuxscsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() failsCVE-2026-90267Fix availableNo score
- linuxbtrfs: zoned: don't force read-only on transient -EAGAIN from reloc mergeCVE-2026-90266Fix available5.7 Medium
- linuxbtrfs: defrag: fix deadlock between defrag and delalloc space reservationCVE-2026-90265Fix available5.7 Medium
- linuxbtrfs: always wait for ordered extents to avoid OE racesCVE-2026-90264Fix available5.7 Medium
- linuxbtrfs: check if root is readonly when setting posix aclCVE-2026-90263Fix available4.8 Medium
- linuxbtrfs: retry verity reads for not-uptodate Merkle foliosCVE-2026-90262Fix available5.7 Medium
- linuxbtrfs: zoned: flush active metadata block group at btree_writepages() startCVE-2026-90261Fix available5.7 Medium
- linuxbtrfs: zoned: don't clobber the extent buffer when zeroing it outCVE-2026-90260Fix available7.1 High
- linuxbtrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data()CVE-2026-90259Fix available2.0 Low
- linuxpinctrl: airoha: add missed IRQ resource helpersCVE-2026-90258Fix availableNo score
- linuxBluetooth: virtio_bt: avoid OOB read of build info stringCVE-2026-90257Fix availableNo score
- linuxBluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_indCVE-2026-90256Fix available8.8 High
- linuxBluetooth: hci_conn: fix the SCO setup context lifetimeCVE-2026-90255Fix available8.8 High
- linuxBluetooth: hci_sync: free the advertising instance on the failure and cancel pathsCVE-2026-90254Fix availableNo score
- linuxBluetooth: MGMT: free the mesh send cancel command when it is cancelledCVE-2026-90253Fix availableNo score
- linuxBluetooth: MGMT: free the HCI command when it is cancelledCVE-2026-90252Fix available6.7 Medium
- linuxBluetooth: MSFT: validate evt_prefix_len against the response lengthCVE-2026-90251Fix available2.4 Low
- linuxbpf, cgroup: Fix storage null-ptr-deref after replacing progCVE-2026-90250Fix available6.8 Medium
- linuxiio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writesCVE-2026-90249Fix availableNo score
- linuxnet/sched: cls_api: fix teardown of an adopted proto on insert-race lossCVE-2026-90248Fix available7.3 High
- linuxbpf: Fix mmap_lock leak in irq_work pathCVE-2026-90247Fix availableNo score
- linuxapparmor: fix integer overflow in verify_tags() bounds checkCVE-2026-90246Fix available7.1 High
- linuxfbdev: kyro: Validate overlay viewport coordinatesCVE-2026-90245Fix available4.6 Medium
- linuxiommu/dma: Restore locking around msi_page_listCVE-2026-90244Fix available7.8 High
- linuxiommu/vt-d: Clear Present bit before tearing down copied context entryCVE-2026-90243Fix available8.1 High
- Show moreLoading…