Skip to contentLinux vulnerabilities
Newest
- linuxBluetooth: btrtl: Don't leak return code when parsing firmware format v2CVE-2026-97907Fix availableNo score
- linuxbootconfig: Fix integer overflow in initrd size checkCVE-2026-97906Fix available7.1 High
- linuxcpufreq: zero-initialize policy cpumask before sysfs publicationCVE-2026-97905Fix availableNo score
- linuxcpufreq: initialize policy rwsem before sysfs publicationCVE-2026-97904Fix availableNo score
- linuxexit: hold a reference to thread_pid across proc_flush_pidCVE-2026-97903Fix available7.8 High
- linuxfs: don't return -EINVAL for successful nested thawCVE-2026-97902Fix availableNo score
- linuxgenetlink: pin family module during policy dumpCVE-2026-97901Fix available9.8 Critical
- linuxdrm/drm_exec: fix up contended obj when num_objects is 0CVE-2026-97900Fix availableNo score
- linuxdrm/i915: Fix memory leak in query_perf_config_list()CVE-2026-97899Fix availableNo score
- linuxdrm/rockchip: analogix_dp: fix unchecked bound endpoint name lengthCVE-2026-97621Fix availableNo score
- linuxdrm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batchesCVE-2026-97620Fix availableNo score
- linuxio_uring/rw: end write accounting from ->ki_completeCVE-2026-97619Fix availableNo score
- linuxring-buffer: Check resize_disabled before publishing the new subbuf orderCVE-2026-97617Fix availableNo score
- linuxnet/sched: act_api: release all action references on NEWACTION failureCVE-2026-97616Fix availableNo score
- linuxnet: bridge: use option bits for CFM/MRP frame handlersCVE-2026-97615Fix available7.3 High
- linuxnet: dsa: tag_brcm: legacy FCS: request needed tailroomCVE-2026-97614Fix availableNo score
- linuxnet: mana: Reserve extra CQ slot for the fence completion CQECVE-2026-97613Fix availableNo score
- linuxnet: mpls: clear inner_protocol when the last label is poppedCVE-2026-97612Fix available7.8 High
- linuxnet: openvswitch: fix use-after-free of the flow table mask arrayCVE-2026-97611Fix available7.8 High
- linuxnetfs: Fix uninitialized return value in netfs_unbuffered_write()CVE-2026-97610Fix availableNo score
- linuxnetfilter: cttimeout: prevent UAF during module unloadCVE-2026-97609Fix available7.0 High
- linuxnetfilter: nf_log: unregister loggers before per-net teardownCVE-2026-97608Fix available7.0 High
- linuxvdpa: ifcvf: Put device on unsupported feature errorCVE-2026-97607Fix availableNo score
- linuxfs: autofs: fix memory leak in autofs_fill_super()CVE-2026-97606Fix availableNo score
- linuxerofs: preserve LZMA decoders on resize failureCVE-2026-97605Fix availableNo score
- linuxfbdev: vfb: defer cleanup until the last referenceCVE-2026-97604Fix availableNo score
- linuxidpf: disable DIM work before freeing q_vectorsCVE-2026-97603Fix available7.1 High
- linuxinet: frags: invalidate queues before flushing themCVE-2026-97602Fix available7.8 High
- linuxieee802154: 6lowpan: fix NULL dereference in lowpan_newlinkCVE-2026-97601Fix availableNo score
- linuxieee802154: cc2520: fix FIFOP work use-after-freeCVE-2026-97600Fix availableNo score
- linuxieee802154: hwsim: serialize pib updates to fix double-freeCVE-2026-97599Fix availableNo score
- linuxipv4: fib: bound automatic table ID allocationCVE-2026-97598Fix availableNo score
- linuxipv6: flowlabel: cap duplicate leases per socketCVE-2026-97597Fix available6.8 Medium
- linuxipvs: reject invalid states in connection template sync recordsCVE-2026-97596Fix availableNo score
- linuxmac802154: fix use-after-free of sdata via queued RX framesCVE-2026-97595Fix available7.5 High
- linuxlandlock: Fix use-after-free of the source's parent directoryCVE-2026-97594Fix available7.8 High
- linuxiommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFXCVE-2026-97593Fix availableNo score
- linuxs390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithmCVE-2026-97592Fix availableNo score
- linuxs390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engineCVE-2026-97591Fix availableNo score
- linuxs390/crypto: Fix missing scrub of temp buffers with PAES algorithmCVE-2026-97590Fix availableNo score
- linuxs390/crypto: Fix wrong return code to engine in asynch callbacksCVE-2026-97589Fix available7.0 High
- linuxs390/crypto: Map EBUSY to EIO when key conversion fails repeatedlyCVE-2026-97588Fix availableNo score
- linuxperf: RISC-V: store available counter mask as bitmapCVE-2026-97587Fix availableNo score
- linuxafs: Fix missing kunmap in afs_dir_search_bucket()CVE-2026-97586Fix availableNo score
- linuxafs: Fix double-unmap of directory blockCVE-2026-97585Fix availableNo score
- linuxafs: Fix incorrect free in candidate cleanup in afs_lookup_server()CVE-2026-97584Fix available7.8 High
- linuxafs: Clear stale peer app data after address list changesCVE-2026-97583Fix available7.5 High
- linuxhwmon: (gpio-fan) Fix use-after-free in alarm workCVE-2026-97582Fix availableNo score
- linuxmedia: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacityCVE-2026-97581Fix available7.1 High
- linuxmedia: rkvdec: bound HEVC tile loops and PPS id to the array capacityCVE-2026-97580Fix available7.8 High
- Show moreLoading…