Skip to contentLinux vulnerabilities
Newest
- linux, linux kernel +1 morebpf: Mark syscall helpers as sleepableCVE-2026-98058Fix available5.5 Medium
- linuxring-buffer: Add checking nr_subbufs to persistent ring buffer validationCVE-2026-98057Fix availableNo score
- linuxnvme: remove stale namespaces by NSID range during scanCVE-2026-98056Fix available7.5 High
- linuxASoC: Intel: avs: Clean up the bus when fetching ML caps failsCVE-2026-98055Fix availableNo score
- linux, linux kernel +1 moreASoC: Intel: avs: Fix unbalanced module reference countCVE-2026-98054Fix available5.5 Medium
- linux, linux kernel +1 moreASoC: Intel: avs: Refactor and fix init_config accessCVE-2026-98053Fix available5.5 Medium
- linux, linux kernel +1 morenet: bcmasp: clear txcb->last before writing each descriptorCVE-2026-98052Fix available7.8 High
- linux, linux kernel +1 morenet: bcmasp: fix tx_spb_ring_full() checking same slot cnt timesCVE-2026-98051Fix available5.5 Medium
- linux, linux kernel +1 moremlxsw: spectrum_ptp: Fix napi_gro_receive() call from GC workqueue contextCVE-2026-98050Fix available7.5 High
- linux, linux kernel +1 morebpf: zero extend the result of an arena 32-bit cmpxchgCVE-2026-98049Fix available5.5 Medium
- linuxbpf: don't rewrite bpf_fastcall patterns entered by a jumpCVE-2026-98048Fix availableNo score
- linuxbpf: Check ancestor frames for rbtree callbacksCVE-2026-98047Fix availableNo score
- linuxbpf: Mark bpf_btf_find_by_name_kind() as sleepableCVE-2026-98046Fix availableNo score
- linuxbpf: Mark faultable stack helpers as sleepableCVE-2026-98045Fix availableNo score
- linuxbpf: Reject legacy packet loads from callbacksCVE-2026-98044Fix available4.6 Medium
- linuxbpf: Don't infer non-NULL from a pointer with an unbounded offsetCVE-2026-98043Fix available6.8 Medium
- linuxbpf: Don't resurrect a scalar id dropped by collect_linked_regs()CVE-2026-98042Fix availableNo score
- linuxbpf: Don't predict JMP32 pointer vs zero comparisonsCVE-2026-98041Fix available7.0 High
- linuxbpf: Mark the zero register precise for a register-form NULL checkCVE-2026-98040Fix availableNo score
- linuxbpf: Require MEM_PERCPU for percpu kptr storesCVE-2026-98039Fix availableNo score
- linuxbpf: Keep refcount_acquire nullable for borrowed RCU kptrsCVE-2026-98038Fix available6.7 Medium
- linuxbpf: Reject untrusted allocated-object pointersCVE-2026-98037Fix availableNo score
- linuxbpf: Preserve special fields in recycled rhtab elementsCVE-2026-98036Fix availableNo score
- linuxbpf: Cancel special fields when recycling rhtab elementsCVE-2026-98035Fix availableNo score
- linuxbpf: Mark NULL kptr stores preciseCVE-2026-98034Fix available8.5 High
- linuxbpf: Preserve inner map identity in callback framesCVE-2026-98033Fix available7.1 High
- linuxtracing: Fix subbuf resize races with trace_pipe_raw readersCVE-2026-98032Fix availableNo score
- linuxnexthop: Initialize extack in remove_nh_grp_entry()CVE-2026-98031Fix availableNo score
- linuxnet: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer sizeCVE-2026-98030Fix available7.0 High
- linuxeth: nfp: bound the ntuple rule dump by the caller's buffer sizeCVE-2026-98029Fix available7.0 High
- linuxeth: nfp: drop the replaced rule from the list when reprogramming failsCVE-2026-98028Fix availableNo score
- linuxnet: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer sizeCVE-2026-98027Fix available7.0 High
- linuxnet: bridge: mcast: properly convert mglist to rcuCVE-2026-98026Fix available5.8 Medium
- linuxnet: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflowCVE-2026-98025Fix availableNo score
- linuxs390/ism: folio_put() after errorCVE-2026-98024Fix availableNo score
- linuxvxlan: reject dynamic fdb entries that reference a nexthop idCVE-2026-98023Fix available7.8 High
- linuxnet: cap tx_queue_len at S16_MAX to prevent oversized ring allocationsCVE-2026-98022Fix availableNo score
- linuxnet: reject oversized tx_queue_len at netlink parse timeCVE-2026-98021Fix available6.8 Medium
- linuxpds_core: fix cmd_regs access racing BAR unmap on resetCVE-2026-98020Fix availableNo score
- linuxbpf: mark a NULL call argument preciseCVE-2026-98019Fix available8.4 High
- linuxnet: mctp: i3c: serialize probe with bus removalCVE-2026-98018Fix availableNo score
- linuxnet/sched: defer qdisc freeing after failed creationCVE-2026-98017Fix available7.8 High
- linuxnet/mlx5e: Fix use-after-free race in sample_restore_put()CVE-2026-98016Fix availableNo score
- linuxnet/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_putCVE-2026-98015Fix availableNo score
- linuxnet/mlx5: E-Switch, prevent mc_list repopulation during vport disableCVE-2026-98014Fix availableNo score
- linuxnet/sched: fq_pie: clamp quantum in change pathCVE-2026-98013Fix availableNo score
- linuxnet/sched: sfq: clamp quantum in change pathCVE-2026-98012Fix availableNo score
- linuxnet/sched: hhf: clamp quantum in change and init pathsCVE-2026-98011Fix availableNo score
- linuxnet/sched: drr: clamp quantum in change classCVE-2026-98010Fix availableNo score
- linuxnet/sched: ets: clamp quantum in parse and fallback pathsCVE-2026-98009Fix availableNo score
- Show moreLoading…