CVE-2026-62426 | High | 8.8 | 2026-07-28 | [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
To manage the system, sysctl… |
CVE-2026-64238 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved:
gpio: shared: fix deadlock on shared proxy's parent removal
Commit 710abda58055 ("gpio: s… |
CVE-2026-64171 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
i2c: tegra: fix pm_runtime leak on mutex_lock failure
If tegra_i2c_mutex_lock() fails, th… |
CVE-2026-64100 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
drm/msm: Fix shrinker deadlock
With PROVE_LOCKING on an Snapdragon X1 and VM reclaim pres… |
CVE-2026-64098 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
drm/virtio: use uninterruptible resv lock for plane updates
virtio_gpu_cursor_plane_updat… |
CVE-2026-53358 | High | 8.8 | 2026-07-02 | In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen()
l2cap_chan_close()… |
CVE-2026-53326 | Medium | 5.5 | 2026-07-01 | In the Linux kernel, the following vulnerability has been resolved:
debugobjects: Don't call fill_pool() in early boot hardirq context
When booting a debug P… |
CVE-2026-10647 | Medium | 5.3 | 2026-06-29 | The USB CDC-NCM device class (subsys/usb/device_next/class/usbd_cdc_ncm.c) ignores the return value of usbd_ep_enqueue() in its ethernet transmit callback cdc_… |
CVE-2026-53323 | Medium | 5.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved:
net: dsa: remove redundant netdev_lock_ops() from conduit ethtool ops
DSA replaces the co… |
CVE-2026-53304 | Medium | 5.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved:
scsi: sg: Resolve soft lockup issue when opening /dev/sgX
The parameter def_reserved_size… |
CVE-2026-53293 | Medium | 5.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG
There were multiple issues in that code.
First… |
CVE-2026-53231 | Medium | 5.5 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved:
net: phy: don't try to setup PHY-driven SFP cages when using genphy
We don't have support… |
CVE-2026-53207 | Medium | 5.5 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved:
mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison
Two concurr… |
CVE-2026-53197 | Medium | 5.5 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved:
xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state()
iptfs_destroy_state() calls hrtim… |
CVE-2026-53180 | High | 7.5 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved:
timers/migration: Fix livelock in tmigr_handle_remote_up()
tmigr_handle_remote_cpu() skip… |
CVE-2026-54906 | Critical | 9.8 | 2026-06-24 | concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread ac… |
CVE-2026-53125 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved:
md: fix array_state=clear sysfs deadlock
When "clear" is written to array_state, md_attr_… |
CVE-2026-53122 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix deadlock between reflink and transaction commit when using flushoncommit
When… |
CVE-2026-53103 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7925: fix potential deadlock in mt7925_roc_abort_sync
roc_abort_sync() can… |
CVE-2026-53101 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7921: fix potential deadlock in mt7921_roc_abort_sync
roc_abort_sync() can… |
CVE-2026-53100 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: fix deadlock in remain-on-channel
mt76_remain_on_channel() and mt76_roc_compl… |
CVE-2026-53072 | High | 8.8 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER
When protocol sets… |
CVE-2026-53071 | High | 8.8 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp
l2cap_ecred_reconf_rsp(… |
CVE-2026-53062 | High | 7.8 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved:
dm cache policy smq: fix missing locks in invalidating cache blocks
In passthrough mode… |
CVE-2026-53054 | High | 7.8 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved:
drm/msm: Fix VM_BIND UNMAP locking
Wrong argument meant that the objs involved in UNMAP o… |
CVE-2026-53049 | Critical | 9.8 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved:
gfs2: add some missing log locking
Function gfs2_logd() calls the log flushing functions… |
CVE-2026-53037 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved:
HID: usbhid: fix deadlock in hid_post_reset()
You can build a USB device that includes a… |
CVE-2026-53035 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved:
bpf, sockmap: Fix af_unix iter deadlock
bpf_iter_unix_seq_show() may deadlock when lock_s… |
CVE-2026-52979 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved:
net: psp: check for device unregister when creating assoc
psp_assoc_device_get_locked() o… |
CVE-2026-52946 | High | 7.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved:
fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
A SOFTIRQ-safe to SOFTIRQ-uns… |
CVE-2026-42490 | Medium | 6.5 | 2026-06-18 | [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
To create and manage guests… |
CVE-2026-42489 | Medium | 5.3 | 2026-06-18 | [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
To create and manage guests… |
CVE-2026-46299 | High | 7.0 | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved:
hfsplus: fix held lock freed on hfsplus_fill_super()
hfsplus_fill_super() calls hfs_find_… |
CVE-2026-46262 | Medium | 5.5 | 2026-06-03 | In the Linux kernel, the following vulnerability has been resolved:
ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()
This reverts commit f51424… |
CVE-2026-46256 | Medium | 5.5 | 2026-06-03 | In the Linux kernel, the following vulnerability has been resolved:
NFS/localio: prevent direct reclaim recursion into NFS via nfs_writepages
LOCALIO is an N… |
CVE-2026-46252 | Medium | 5.5 | 2026-06-03 | In the Linux kernel, the following vulnerability has been resolved:
regulator: core: fix locking in regulator_resolve_supply() error path
If late enabling of… |
CVE-2026-46223 | Medium | 5.5 | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved:
cgroup: Defer css percpu_ref kill on rmdir until cgroup is depopulated
A chain of commits… |
CVE-2026-46165 | Medium | 5.5 | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved:
openvswitch: vport: fix self-deadlock on release of tunnel ports
vports are used concurre… |
CVE-2026-46156 | Medium | 5.5 | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved:
LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()
The switch case in loongson… |
CVE-2026-46112 | High | 7.8 | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved:
RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
Sashiko points out that hns_roce_qp_r… |
CVE-2026-46063 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved:
x86/shstk: Prevent deadlock during shstk sigreturn
During sigreturn the shadow stack sign… |
CVE-2026-46061 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved:
jbd2: fix deadlock in jbd2_journal_cancel_revoke()
Commit f76d4c28a46a ("fs/jbd2: use sle… |
CVE-2026-46051 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved:
md/raid5: fix soft lockup in retry_aligned_read()
When retry_aligned_read() encounters an… |
CVE-2026-46050 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix deadlock with check operation and nowait requests
When an array check is r… |
CVE-2026-46031 | High | 7.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved:
net: ks8851: Reinstate disabling of BHs around IRQ handler
If the driver executes ks8851_… |
CVE-2026-46014 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved:
KVM: SVM: Add missing save/restore handling of LBR MSRs
MSR_IA32_DEBUGCTLMSR and LBR MSRs… |
CVE-2026-45924 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved:
ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths
There are two places w… |
CVE-2026-45907 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix deadlocks between devlink and netdev instance locks
In the mentioned "Fixe… |
CVE-2026-45849 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved:
net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj()
ocelot_port_xmit… |
CVE-2025-71309 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: fix deadlock in ni_read_folio_cmpr
Syzbot reported a task hung in ni_readpage_c… |
CVE-2026-24182 | Medium | 6.5 | 2026-05-26 | NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could leak held driver locks. A successful exploit of this vulnerability… |
CVE-2026-43468 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix deadlock between devlink lock and esw->wq
esw->work_queue executes esw_func… |
CVE-2026-43446 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Fix runtime suspend deadlock when there is pending job
The runtime suspend… |
CVE-2026-43404 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved:
mm: Fix a hmm_range_fault() livelock / starvation problem
If hmm_range_fault() fails a fo… |
CVE-2026-43382 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved:
batman-adv: Avoid double-rtnl_lock ELP metric worker
batadv_v_elp_get_throughput() might… |
CVE-2026-43327 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved:
USB: dummy-hcd: Fix locking/synchronization error
Syzbot testing was able to provoke an a… |
CVE-2026-43326 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved:
sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback
SCX_KICK_WAIT… |
CVE-2026-43319 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved:
spi: spidev: fix lock inversion between spi_lock and buf_lock
The spidev driver previousl… |
CVE-2026-43305 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path
[Why]
The evalu… |
CVE-2026-43296 | High | 7.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved:
octeontx2-af: Workaround SQM/PSE stalls by disabling sticky
NIX SQ manager sticky mode is… |
CVE-2026-43253 | High | 7.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: move wait_on_sem() out of spinlock
With iommu.strict=1, the existing completio… |
CVE-2026-43252 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved:
mptcp: pm: in-kernel: always set ID as avail when rm endp
Syzkaller managed to find a com… |
CVE-2026-43215 | High | 8.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix locking usage for tcon fields
We used to use the cifs_tcp_ses_lock to protect a… |
CVE-2026-43211 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved:
PCI: Fix pci_slot_trylock() error handling
Commit a4e772898f8b ("PCI: Add missing bridge… |
CVE-2026-43147 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved:
Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV"
This rever… |
CVE-2026-43127 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved:
ntfs3: fix circular locking dependency in run_unpack_ex
Syzbot reported a circular lockin… |
CVE-2026-43061 | Medium | 5.5 | 2026-05-05 | In the Linux kernel, the following vulnerability has been resolved:
serial: 8250: Fix TX deadlock when using DMA
`dmaengine_terminate_async` does not guarant… |
CVE-2026-43029 | High | 7.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved:
mptcp: fix soft lockup in mptcp_recvmsg()
syzbot reported a soft lockup in mptcp_recvmsg(… |
CVE-2026-31756 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved:
usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()
dwc2_gadget_exi… |
CVE-2026-31687 | Medium | 5.5 | 2026-04-27 | In the Linux kernel, the following vulnerability has been resolved:
gpio: omap: do not register driver in probe()
Commit 11a78b794496 ("ARM: OMAP: MPUIO wake… |
CVE-2026-31667 | High | 7.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved:
Input: uinput - fix circular locking dependency with ff-core
A lockdep circular locking d… |
CVE-2026-31629 | High | 8.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved:
nfc: llcp: add missing return after LLCP_CLOSED checks
In nfc_llcp_recv_hdlc() and nfc_ll… |
CVE-2026-31598 | High | 7.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix possible deadlock between unlink and dio_end_io_write
ocfs2_unlink takes orpha… |
CVE-2026-31565 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Fix deadlock during netdev reset with active connections
Resolve deadlock tha… |
CVE-2026-31526 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix exception exit lock checking for subprogs
process_bpf_exit_full() passes check_l… |
CVE-2026-31509 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved:
nfc: nci: fix circular locking dependency in nci_close_device
nci_close_device() flushes… |
CVE-2026-31499 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()
l2cap_conn_del() calls cancel_delayed_… |
CVE-2026-31487 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved:
spi: use generic driver_override infrastructure
When a driver is probed through __driver_… |
CVE-2026-31486 | High | 7.1 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved:
hwmon: (pmbus/core) Protect regulator operations with mutex
The regulator operations pmbu… |
CVE-2026-31480 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved:
tracing: Fix potential deadlock in cpu hotplug with osnoise
The following sequence may le… |
CVE-2026-31467 | High | 7.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved:
erofs: add GFP_NOIO in the bio completion if needed
The bio completion path in the proces… |
CVE-2026-31420 | Medium | 5.5 | 2026-04-13 | In the Linux kernel, the following vulnerability has been resolved:
bridge: mrp: reject zero test interval to avoid OOM panic
br_mrp_start_test() and br_mrp_… |
CVE-2026-23470 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved:
drm/imagination: Fix deadlock in soft reset sequence
The soft reset sequence is currently… |
CVE-2026-23420 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved:
wifi: wlcore: Fix a locking bug
Make sure that wl->mutex is locked before it is unlocked… |
CVE-2026-23419 | High | 7.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved:
net/rds: Fix circular locking dependency in rds_tcp_tune
syzbot reported a circular locki… |
CVE-2026-23400 | Medium | 5.5 | 2026-03-29 | In the Linux kernel, the following vulnerability has been resolved:
rust_binder: call set_notification_done() without proc lock
Consider the following sequen… |
CVE-2026-23368 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved:
net: phy: register phy led_triggers during probe to avoid AB-BA deadlock
There is an AB-B… |
CVE-2026-23362 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved:
can: bcm: fix locking for bcm_op runtime updates
Commit c2aba69d0c36 ("can: bcm: add lock… |
CVE-2026-23357 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved:
can: mcp251x: fix deadlock in error path of mcp251x_open
The mcp251x_open() function call… |
CVE-2026-23311 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved:
perf/core: Fix invalid wait context in ctx_sched_in()
Lockdep found a bug in the event sc… |
CVE-2026-23295 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Fix dead lock for suspend and resume
When an application issues a query IO… |
CVE-2026-22735 | Low | 2.6 | 2026-03-20 | Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE). This issue affects Spring Foundation: from 7.0.0 t… |
CVE-2026-20065 | Medium | 5.8 | 2026-03-04 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort… |
CVE-2026-23232 | Medium | 5.5 | 2026-03-04 | In the Linux kernel, the following vulnerability has been resolved:
Revert "f2fs: block cache/dio write during f2fs_enable_checkpoint()"
This reverts commit… |
CVE-2026-20757 | Low | 2.5 | 2026-03-03 | Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged operator to cause a limited denial-of-service in the Command Centr… |
CVE-2026-23217 | Medium | 5.5 | 2026-02-18 | In the Linux kernel, the following vulnerability has been resolved:
riscv: trace: fix snapshot deadlock with sbi ecall
If sbi_ecall.c's functions are traceab… |
CVE-2026-23199 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved:
procfs: avoid fetching build ID while holding VMA lock
Fix PROCMAP_QUERY to fetch optiona… |
CVE-2026-23188 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved:
net: usb: r8152: fix resume reset deadlock
rtl8152 can trigger device reset during reset… |
CVE-2026-23186 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved:
hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify()
The acpi_pow… |
CVE-2026-23165 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved:
sfc: fix deadlock in RSS config read
Since cited commit, core locks the net_device's rss_… |