Skip to contentLinux vulnerabilities
Newest
- linuxliveupdate: Remember FLB retrieve() statusCVE-2026-92483Fix availableNo score
- linuxpinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chipCVE-2026-92482Fix availableNo score
- linuxpinctrl: mediatek: free EINT resources on unbindCVE-2026-92481Fix availableNo score
- linuxscsi: ufs: core: Validate string descriptorsCVE-2026-92480Fix available4.8 Medium
- linuxscsi: ufs: Avoid NULL CQE dereference when reporting invalid tagsCVE-2026-92479Fix availableNo score
- linuxscsi: ufs: core: Validate connected lane countsCVE-2026-92478Fix available7.0 High
- linuxscsi: ufs: debugfs: Reserve space for a string terminatorCVE-2026-92477Fix availableNo score
- linuxcrypto: keembay - Initialize completion before requesting IRQCVE-2026-92476Fix availableNo score
- linuxRDMA/mlx5: Fix integer overflow of user QP buffer sizeCVE-2026-90435Fix available7.8 High
- linuxisofs: release zisofs block pointer buffer headCVE-2026-90434Fix availableNo score
- linuxspi: oc-tiny: switch to managed controller allocationCVE-2026-90433Fix availableNo score
- linuxsched_ext: Abort directly from the hardlockup handlerCVE-2026-90432Fix available6.7 Medium
- linuxremoteproc: Prevent crash handling to race with rproc_del()CVE-2026-90431Fix availableNo score
- linuxiommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initializedCVE-2026-90430Fix availableNo score
- linuxiommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)initCVE-2026-90429Fix available7.8 High
- linuxiommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfsCVE-2026-90428Fix availableNo score
- linuxiommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc()CVE-2026-90427Fix available7.4 High
- linuxiommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFsCVE-2026-90426Fix availableNo score
- linuxiommu/tegra241-cmdqv: Require exactly one Stream ID for a vSIDCVE-2026-90425Fix available8.8 High
- linuxiommu/tegra241-cmdqv: Fix VINTF0 leak on the init-failure pathCVE-2026-90424Fix availableNo score
- linuxRDMA/rxe: Fix UAF in ODP init error-handling pathCVE-2026-90423Fix available7.8 High
- linuxclk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error pathCVE-2026-90422Fix availableNo score
- linuxPCI: Fix UAF when probe runs concurrent to dyn ID removalCVE-2026-90421Fix availableNo score
- linuxnilfs2: fix infinite loop in nilfs_clean_segments()CVE-2026-90420Fix availableNo score
- linuxnilfs2: prevent out-of-bounds read in super root block parsingCVE-2026-90419Fix available7.1 High
- linuxnilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatchCVE-2026-90418Fix availableNo score
- linuxRDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry()CVE-2026-90417Fix available7.3 High
- linuxRDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfsCVE-2026-90416Fix availableNo score
- linuxRDMA/cxgb4: free STAG index when TPT entry write failsCVE-2026-90415Fix available2.0 Low
- linuxIB/isert: reject PDUs declaring more data than was receivedCVE-2026-90414Fix available9.1 Critical
- linuxIB/isert: reject login PDUs declaring more data than was receivedCVE-2026-90413Fix available9.1 Critical
- linuxnvmet: fix return status of RMI log page on allocation failureCVE-2026-90412Fix available6.3 Medium
- linuxnvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_requestCVE-2026-90411Fix availableNo score
- linuxspi: davinci: switch to managed controller allocationCVE-2026-90410Fix availableNo score
- linuxdrm/panthor: Add vm_bind region with kbo range overlap checkCVE-2026-90409Fix available4.8 Medium
- linuxwifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event()CVE-2026-90408Fix available7.7 High
- linuxwifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event()CVE-2026-90407Fix available7.7 High
- linuxmedia: qcom: iris: handle runtime PM resume failure in core deinitCVE-2026-90406Fix availableNo score
- linuxmedia: stm32: dcmi: fix some error handling bugs in probe()CVE-2026-90405Fix availableNo score
- linuxplatform/chrome: cros_ec_debugfs: Unregister panic notifierCVE-2026-90404Fix availableNo score
- linuxwifi: rtlwifi: pci: fix error path in rtl_pci_probe()CVE-2026-90403Fix available7.0 High
- linuxbus: mhi: host: Fix controller cleanup on EDL sysfs failureCVE-2026-90402Fix available7.0 High
- linuxmd: remove REQ_NOWAIT support from raid1/10/456CVE-2026-90401Fix available7.1 High
- linuxmd: recheck spare changes before starting syncCVE-2026-90400Fix availableNo score
- linuxwifi: ath12k: fix stride mismatch in mac_phy_caps_parse()CVE-2026-90399Fix available8.4 High
- linuxwifi: ath11k: fix stride mismatch in mac_phy_caps_parse()CVE-2026-90398Fix available8.4 High
- linuxfirmware: qcom: scm: Fix NULL dereference in IRQ handler before __scm is publishedCVE-2026-90397Fix availableNo score
- linuxblock: fix dio leak on metadata mapping errorCVE-2026-90396Fix available6.7 Medium
- linuxpower: supply: isp1704_charger: cancel work on removeCVE-2026-90395Fix availableNo score
- linuxpower: supply: sc2731_charger: cancel work on removeCVE-2026-90394Fix availableNo score
- Show moreLoading…