Linux
Page 19 of 100 — Linux CVEs from a corpus of 24866, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-89457 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Guard sysfs discipline callbacks against unallocated private data Several sysf… | |
CVE-2026-89456 | High | 7.0 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Propagate partial completion length across ERP recovery dasd_default_erp_posta… |
CVE-2026-89455 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Fix use-after-free of event IRQs during teardown plda_pcie_irq_domain_deinit()… | |
CVE-2026-89454 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts() plda_init_in… | |
CVE-2026-89453 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Put PCI device after handling PPR faults iommu_call_iopf_notifier() looks up t… | |
CVE-2026-89452 | High | 8.4 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: iommu/msm: Unwind probe state on registration failure msm_iommu_probe() adds its devm-man… |
CVE-2026-89451 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: iommu/sva: Set handle->dev before the SVA handle is visible iommu_attach_device_pasid() i… | |
CVE-2026-89450 | High | 8.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field tegra241_vintf_init_vs… |
CVE-2026-89449 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_device_add iommu_moc… | |
CVE-2026-89448 | Critical | 9.3 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of reques… |
CVE-2026-89447 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Avoid locking internal accesses during unmap iommufd_access_notify_unmap() skips… | |
CVE-2026-89446 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Release current IOAS on xa_store() failure iommufd_take_all_iova_rwsem() takes a… | |
CVE-2026-89445 | High | 8.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix UAF in selftest IOPF reporting IOMMUFD selftest TRIGGER_IOPF borrows an atta… |
CVE-2026-89444 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer set_attribute() p… | |
CVE-2026-89443 | High | 7.1 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate level in perf mask ioctls isst_if_get_perf_level_mask() and… |
CVE-2026-89442 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate socket ID in clos_assoc ioctl isst_if_clos_assoc() validates… |
CVE-2026-89441 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: cancel card-detect work on remove Disabling the device interrupt and free… |
CVE-2026-89440 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: stop card-detect handling on probe failure request_irq() registers the SD… |
CVE-2026-89439 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Add a NULL check for sst_inst[] To be consistent with other places, a… | |
CVE-2026-89438 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate logical CPU id and clos id Validate max CLOS ID and logical… | |
CVE-2026-89437 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: int1092: Fix potential memory leak in sar_probe() The memory allocated for… | |
CVE-2026-89436 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf[] acpi_pcc_retrieve_bio… |
CVE-2026-81018 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate support als… | |
CVE-2026-81017 | High | 8.4 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: platform/chrome: sensorhub: Bound the EC-reported sensor number Each EC FIFO event carrie… |
CVE-2026-81016 | High | 7.7 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Propagate SMU errors and validate S2D address amd_stb_s2d_init() di… |
CVE-2026-81015 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails amd_pmc_probe() regi… |
CVE-2026-81014 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store() sk_store() and… | |
CVE-2026-81013 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read on empty password write validate_password_inp… | |
CVE-2026-81012 | High | 8.4 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer() hp_get_stri… |
CVE-2026-81011 | High | 7.1 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: pass validated element count to package parsers The per-type pa… |
CVE-2026-81010 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: honor task_work cancellation io_waitid_cb() may run through the fallback… |
CVE-2026-81009 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: io_uring/query: cap user size passed to copy_struct_to_user io_handle_query_entry() clamp… | |
CVE-2026-81008 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: interconnect: Fix use after free in icc_get() and of_icc_get_by_index() In of_icc_get_by_… |
CVE-2026-81007 | High | 7.1 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: validate write message length ipmb_write() read message fields before validat… |
CVE-2026-81006 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on registration failure ipmi_add_smi() creates the nr_users… |
CVE-2026-81005 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration try_smi_init() allocates… | |
CVE-2026-81004 | High | 8.4 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Cancel work cleanly on an error If an error occurs during startup of an… |
CVE-2026-81003 | High | 8.1 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net/iucv: filter frames in afiucv_hs_rcv() by ingress device afiucv_hs_rcv() selects a so… |
CVE-2026-81002 | Critical | 9.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout xdp_convert_zc_to_xdp_frame() clones an XSK packet into a… |
CVE-2026-81001 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: slip: fix use-after-free in sl_sync() slip_devs[] stores bare net_device pointers and tak… |
CVE-2026-81000 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb headroom and… |
CVE-2026-80999 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO rtl83xx_reset_assert() and… | |
CVE-2026-80998 | High | 7.5 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net: bnxt: ring the doorbell when SW USO exits early When a burst of packets is handed do… |
CVE-2026-80997 | High | 7.5 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix stalled modem TX queue after runtime resume ipa_start_xmit() unconditionall… |
CVE-2026-80996 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net: l2tp: do not propagate multicast notification errors The tunnel create, tunnel modif… | |
CVE-2026-80995 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net: mctp: hold a reference to the route device in mctp_route_lookup() mctp_route_lookup(… |
CVE-2026-80994 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow mask use-after-free on flow deletion The commit in the Fixes t… |
CVE-2026-80993 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net: phylink: correctly validate returned PCS in phylink_inband_caps In phylink_inband_ca… | |
CVE-2026-80992 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before t… |
CVE-2026-80991 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net: ravb: serialize PTP clock teardown ravb_ptp_interrupt() can race with ravb_ptp_stop(… |
CVE-2026-80990 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Release the Rx HopID that was handed out on mismatch tb_xdomain_alloc_i… | |
CVE-2026-80989 | High | 8.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Mark the connection down when bringing it up fails Every failure path i… |
CVE-2026-80988 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 ("ntb: D… | |
CVE-2026-80987 | High | 7.5 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Reject oversized TX buffers ntb_process_tx() handles an oversized buf… |
CVE-2026-80986 | Critical | 9.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages On a link whose device has ma… |
CVE-2026-80985 | High | 8.2 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry smc_llc_rmt_delete_rkey(… |
CVE-2026-80984 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net/smc: do not dereference an unset send buffer on the SMC-D teardown path smc_close_str… | |
CVE-2026-80983 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket refcount leak in smc_switch_conns() smc_switch_conns() takes a refere… | |
CVE-2026-80982 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free in smc_rx_pipe_buf_release() smc_rx_splice() hands RMB pages… |
CVE-2026-80981 | Critical | 9.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() smc_llc_srv_add_l… |
CVE-2026-80980 | Critical | 9.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net/smc: stop killed, freed and out_of_sync sharing a byte The three connection state fla… |
CVE-2026-80979 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net/smc: unregister the connection before draining the rx tasklet smc_conn_free() calls s… |
CVE-2026-80978 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net: cap advertised IP tunnel headroom IP tunnel devices derive their advertised needed_h… |
CVE-2026-80977 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't touch shared zerocopy state in skb_tx_error() skb_tx_error() completes… |
CVE-2026-80976 | Critical | 9.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 decapsulation decap_and_validate() pulls the outer SRv6 head… |
CVE-2026-80975 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: mfd: qnap-mcu: keep the reply buffer alive past a command timeout qnap_mcu_exec() publish… |
CVE-2026-80974 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm50… | |
CVE-2026-80973 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: bound the MIDI event length from the device usb6fire_comm_receiver_handler()… | |
CVE-2026-80972 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Check card index validity at probe aloop driver blindly trusts that the give… | |
CVE-2026-80971 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: clear the URB pointers on disconnect bcd2000_free_usb_related_resources()… |
CVE-2026-80970 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: do not copy out an uninitialised init response fcp_ioctl_init() allocates its… | |
CVE-2026-80969 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ALSA: mpu401: Check card index validity at probe mpu401 driver blindly trusts that the gi… | |
CVE-2026-80968 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: Check card index validity at probe Although mts64 driver has a check of the… | |
CVE-2026-80967 | High | 8.4 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ pcxhr_probe() requests pcx… |
CVE-2026-80966 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ALSA: portman2x4: Check card index validity at probe Although portman2x4 driver has a che… | |
CVE-2026-80965 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ALSA: serial-u16550: Check card index validity at probe serial-u16550 driver blindly trus… | |
CVE-2026-80964 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ALSA: virmidi: Check card index validity at probe virmidi driver blindly trusts that the… | |
CVE-2026-80963 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if allocation of per-cpu data fails If "dm_kvzalloc(percpu_alloc_si… | |
CVE-2026-80962 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate geometry fields from on-disk cache_info cache_segs_init() iterates ca… |
CVE-2026-80961 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate kset key_num and intra-segment bounds Two more fields decoded from th… |
CVE-2026-80960 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate on-media seg_num against the cache device size seg_num is read from t… | |
CVE-2026-80959 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the persisted tail-position offset cache_pos_decode() takes the persiste… |
CVE-2026-80958 | High | 7.1 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: clamp the tail kset read to the segment data region The tail-kset read in cach… |
CVE-2026-80957 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: detect a cycle in the last-kset chain during replay cache_replay() follows the… | |
CVE-2026-80956 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initialized cache segments get_cache_segment() scans the segment… | |
CVE-2026-80955 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: fix use-after-free and invalid seg operations in kset_replay() In kset_replay… |
CVE-2026-80954 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode() i3c_de… |
CVE-2026-80953 | High | 8.4 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: adi: initialize the lock before enabling interrupts adi_i3c_master_probe() r… |
CVE-2026-80952 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix info leak and UAF in device unregister path i3c_master_unregister_i3c_de… |
CVE-2026-80951 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: bound IBI payload to the requested max_payload_len svc_i3c_master_handl… | |
CVE-2026-80950 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: i3c: renesas: Check that the transfer is valid before accessing it The Renesas I3C driver… |
CVE-2026-80949 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() The memory allocated for buf… | |
CVE-2026-80948 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() In iwl_op_mode_dvm_start()… | |
CVE-2026-80947 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop rtl8xxxu arms rx_urb_wq from th… |
CVE-2026-80946 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: fuse: copy request headers via a stack buffer for io-uring The fuse-io-uring transport co… | |
CVE-2026-80945 | Critical | 9.1 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - unmap dst before software fallback on decompress On a hardware analytics er… |
CVE-2026-80944 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Detach sync cmd buffer on interrupted wait mwifiex synchronous commands ke… |
CVE-2026-80943 | High | 7.6 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids rtl92du_tx_fill_desc() uses… |
CVE-2026-80942 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vars() The memory a… | |
CVE-2026-80941 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() The skb passed to the rtw_hc… |