Skip to contentLinux vulnerabilities
Newest
- linuxs390/uv: Prevent potential out-of-bounds readCVE-2026-98648Fix available5.8 Medium
- linuxbpf: Fix divide-by-zero in btf_struct_walk()CVE-2026-98647Fix availableNo score
- linuxtcp: Skip cond_resched() in inet_csk_listen_stop() under BPF contextCVE-2026-98646Fix available4.6 Medium
- linuxHID: winwing: fix use-after-free in force feedback teardownCVE-2026-98645Fix available5.4 Medium
- linuxbpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()CVE-2026-98644Fix available6.8 Medium
- linuxbpf: Fix out-of-bounds read of rtt_min in sock_opsCVE-2026-98643Fix available4.6 Medium
- linuxbpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulkCVE-2026-98642Fix available7.3 High
- linuxbpf, arm64: set up the frame pointer for the exception callbackCVE-2026-98641Fix available7.1 High
- linuxHID: amd_sfh: Validate PCI BAR size before mappingCVE-2026-98640Fix available5.1 Medium
- linuxKVM: riscv: Fix NACL hfence entry update orderCVE-2026-98639Fix available2.1 Low
- linuxKVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()CVE-2026-98638Fix availableNo score
- linuxKVM: arm64: Do not clear VM-wide SVE feature on vCPU init failureCVE-2026-98637Fix available5.6 Medium
- linuxsquashfs: Add dictionary size range check to prevent shift-out-of-boundsCVE-2026-98636Fix available0.0 None
- linuxscsi: block: Fix zones_cond out-of-bounds write on zone reportCVE-2026-98635Fix available7.0 High
- linuxscsi: sd_zbc: Reject disks with too many zonesCVE-2026-98634Fix available7.0 High
- linuxBluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()CVE-2026-98633Fix availableNo score
- linuxBluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancelCVE-2026-98632Fix available7.1 High
- linuxxsk: Use a 32-bit compare in xsk_map_gen_lookupCVE-2026-98631Fix available6.8 Medium
- linuxeth: fbnic: Fix payload page pool error cleanupCVE-2026-98630Fix available5.6 Medium
- linuxnet/sched: cls_u32: fix manual hash table handle IDR aliasingCVE-2026-98629Fix available4.8 Medium
- linuxbpf: Make post-verification instruction rewrites killableCVE-2026-98628Fix available6.7 Medium
- linuxbpf: Preserve packet pointer class displacement in regsafe()CVE-2026-98627Fix available8.4 High
- linuxbpf: Restrict CO-RE poisoning to relocatable instructionsCVE-2026-98626Fix available8.4 High
- linuxnetfilter: flowtable: publish HW_DEAD after worker is doneCVE-2026-98625Fix available7.3 High
- linuxnetfilter: nfnetlink_queue: hold nfnl mutex in event notifierCVE-2026-98624Fix available7.3 High
- linuxdrm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_updateCVE-2026-98623Fix availableNo score
- linuxnet/sched: act_ct: don't WARN on benign flow_offload_alloc() failureCVE-2026-98622Fix available5.7 Medium
- linuxnet: gue: reject invalid REMCSUM offsetsCVE-2026-98621Fix available9.2 Critical
- linuxnet: ethernet: mtk_eth_soc: unregister net_devices in case of probe failureCVE-2026-98620Fix availableNo score
- linuxnet: ethtool: keep rtnl_lock for the ioctl self testCVE-2026-98619Fix available7.1 High
- linuxeth: fbnic: Handle maximum standalone channelsCVE-2026-98618Fix availableNo score
- linuxeth: fbnic: use the Rx queue napi pointer to find the napi vectorCVE-2026-98617Fix availableNo score
- linuxeth: fbnic: reset num_napi when the napi vectors are freedCVE-2026-98616Fix availableNo score
- linuxeth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailboxCVE-2026-98615Fix availableNo score
- linuxsctp: avoid livelock while updating retransmit pathCVE-2026-98614Fix available6.8 Medium
- linuxbpf: Bound ownership depth through local kptrs and graph rootsCVE-2026-98613Fix available6.8 Medium
- linuxnet: usb: catc: bound the RX packet length in catc_rx_done()CVE-2026-98612Fix available5.1 Medium
- linuxbpf: Check params size before reading reserved fieldsCVE-2026-98611Fix availableNo score
- linuxnet/sched: sch_hfsc: bound the classify inner-filter walk with a drift budgetCVE-2026-98610Fix available6.8 Medium
- linuxdrm/virtio: fix object leak when drm_gem_handle_create() failsCVE-2026-98609Fix available5.7 Medium
- linuxdrm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()CVE-2026-98608Fix available5.7 Medium
- linuxdrm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()CVE-2026-98607Fix available5.7 Medium
- linuxdrm/virtio: release the GEM object on virtio_gpu_vram_create() errorsCVE-2026-98606Fix available7.3 High
- linuxdrm/bridge: samsung-dsim: fix TE GPIO lifetime for host attachCVE-2026-98605Fix availableNo score
- linuxovpn: replace bind when learning local endpointCVE-2026-98604Fix available2.3 Low
- linuxovpn: replace bind when clearing stale local sourceCVE-2026-98603Fix availableNo score
- linuxBluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthroughCVE-2026-98602Fix available2.3 Low
- linuxBluetooth: btintel_pcie: validate device-supplied DMA indicesCVE-2026-98601Fix available7.0 High
- linuxBluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()CVE-2026-98600Fix available5.3 Medium
- linuxbpf: Reject non-negative offsets in stack_slot_obj_get_spi()CVE-2026-98599Fix available8.4 High
- Show moreLoading…