Linux
Page 21 of 100 — Linux CVEs from a corpus of 24866, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-80840 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: ipv6: seg6: clear IPv4 control block on IPIP decapsulation End.DX4 and End.DT4 decapsulat… | |
CVE-2026-80839 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject unrepresentable multicast TVLV offsets The network and transport heade… | |
CVE-2026-80838 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: vxlan: keep the last remote linked during FDB flush A non-nexthop FDB entry is expected t… | |
CVE-2026-80837 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't queue packet path object notifications All file:line referenc… | |
CVE-2026-80836 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - bound the akcipher result length virtio_crypto_dataq_akcipher_callback()… | |
CVE-2026-80835 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Remove crypto_rng interface qcom-rng.c exposes the same hardware throu… | |
CVE-2026-80834 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce - Remove crypto_rng interface Since the crypto_rng interface for hardwar… | |
CVE-2026-80833 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Remove crypto_rng interface Since the crypto_rng interface for hardwar… | |
CVE-2026-80832 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qce_aead_ccm… | |
CVE-2026-80831 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - fix source scatterlist length access mxs_dcp_aes_block_crypt() uses sg_… | |
CVE-2026-80830 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: usb: core: Add lock to usb_wakeup_notification() Add a spin lock to usb_wakeup notificati… | |
CVE-2026-80829 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() snd_usbmidi_novation_outp… | |
CVE-2026-80828 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resume errors A failed system resume can l… | |
CVE-2026-80827 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: option: fix slab OOB read in interrupt URB callback The interrupt URB buffer… | |
CVE-2026-80826 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: USB: c67x00: fix use-after-free in c67x00_add_iso_urb() When TD creation fails for the la… | |
CVE-2026-80825 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb mt7925_usb_sdio_tx_prep… | |
CVE-2026-80824 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: usb: usbfs: fix use-after-free of usb_device in usbdev_release() usbdev_release() drops i… | |
CVE-2026-80823 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ATR_REQ length against the received frame st21nfca_tm_recv_atr_re… | |
CVE-2026-80822 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf() Add a check to see if devm_kas… | |
CVE-2026-80821 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: put CQ ref on create_cq mapping failure nvmet_pci_epf_create_cq() calls n… | |
CVE-2026-80820 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: xfs: don't livelock in scrub on a circular unlinked list LOLLM points out that online fsc… | |
CVE-2026-80819 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept rfcomm_sock_recvmsg()… | |
CVE-2026-80818 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Fix CMD_SYNC use-after-free on teardown arm_smmu_impl_remove() is r… | |
CVE-2026-80817 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix NULL pointer deref in iommufd_ioas_change_process when racing with iopt… | |
CVE-2026-80816 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Use a private URB for the notification endpoint fcp_init_notify() used mixer->… | |
CVE-2026-80815 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Use a private URB for the notification endpoint scarlett2_init_notify()… | |
CVE-2026-80814 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: rndis_host: add overflow check in rndis_rx_fixup() Add an overflow check to ensure that d… | |
CVE-2026-80813 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix NULL pointer dereference in nvmet_execute_identify_nslist() When a host issues… | |
CVE-2026-80812 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: ALSA: dummy: Check card index validity at probe snd_dummy_probe() blindly trusts that the… | |
CVE-2026-80811 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd: fix iovec leak when the async cmd is not recycled An io_async_cmd carries a… | |
CVE-2026-80810 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: fix folio size overflow in io_vec_fill_bvec() io_vec_fill_bvec() computes… | |
CVE-2026-80809 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix missing metadata reservation for large xattrs [BUG] lsetxattr() panics the ker… | |
CVE-2026-80808 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: ext4: stop retrying saturated xattr cache entries ext4_xattr_block_set() retries when a c… | |
CVE-2026-80807 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject invalid block index in GC ioctl Syzbot reported list corruption caused by… | |
CVE-2026-80806 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular fil… | |
CVE-2026-80805 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: xfs: validate attr entry pointer before field access xfs_attr3_leaf_verify_entry() access… | |
CVE-2026-80804 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: xfs: restore nofs context unconditionally in xfs_trans_roll When __xfs_trans_commit() fai… | |
CVE-2026-80803 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSF_RES length to the destination buffer digital_in_recv_sensf_res(… | |
CVE-2026-80802 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: bound the device-reported read length and fix an skb leak fdp_nci_i2c_read() ta… | |
CVE-2026-80801 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: nfc: microread: validate target discovery payload lengths microread_target_discovered() p… | |
CVE-2026-80800 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: bound the connect_sn TLV walk to the skb Commit 27256cdb290e ("nfc: llcp: boun… | |
CVE-2026-80799 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers nfc_llcp_parse_gb_tlv() and nfc… | |
CVE-2026-80798 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: reject PDUs shorter than the LLCP header Every LLCP PDU begins with a two-byte… | |
CVE-2026-80797 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: purge fragmented skbs during cleanup pn53x_common_clean() purges resp_q befor… | |
CVE-2026-80796 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: add data_len bound checks to activation parameter extractors nci_extract_activa… | |
CVE-2026-80795 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix out-of-bounds write in nci_target_auto_activated() nci_target_auto_activate… | |
CVE-2026-80794 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix uninit-value in the RF discover/activated NTF handlers nci_rf_discover_ntf_… | |
CVE-2026-80793 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: ipv4: reject undersized MTUs in ip_do_fragment() ip_do_fragment() subtracts the IPv4 head… | |
CVE-2026-80792 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix use-after-free in ip6_finish_output2() ip6_finish_output2() caches a pointer to… | |
CVE-2026-80791 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: zero the AUTH_RECEIVE response buffer nvmet_execute_auth_receive() allocates… | |
CVE-2026-80790 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: fix invalid free in LS IOD error path nvmet_fc_alloc_ls_iodlist() advances iod… | |
CVE-2026-80789 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: bound SGL data length before allocating command buffers nvmet_tcp_map_data() r… | |
CVE-2026-80788 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations When fuzzing the… | |
CVE-2026-80787 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: fix use-after-free in nvmet_pci_epf_exec_iod_work() nvmet_pci_epf_exec_io… | |
CVE-2026-80786 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fb_set_var() in helper Handle fbcon during display upda… | |
CVE-2026-80785 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: fbdev: serialize mode sysfs access with lock_fb_info() show_mode(), show_modes(), and sto… | |
CVE-2026-80784 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix memory leak from alloc-during-teardown race mptcp_pm_destroy() empties msk… | |
CVE-2026-80783 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() magicmouse_raw_eve… | |
CVE-2026-80782 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: do not keep a stale msc->input if no input is claimed magicmouse_input_m… | |
CVE-2026-80781 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: HID: core: fix OOB read of field->usage in hid_set_field() hid_set_field() hands field->u… | |
CVE-2026-80780 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: HID: pidff: fix OOB write when hid->inputs is empty hid_pidff_init_with_quirks() derives… | |
CVE-2026-80779 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ The dedicated hardware timestamp R… | |
CVE-2026-80778 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: futex/pi: Reject cross-mm private futex owners A private futex key borrows the waiter's m… | |
CVE-2026-80777 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: futex/pi: Plug private futex exec() race The check for private futexes whether the waiter… | |
CVE-2026-80776 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: futex: Fix race in futex_pivot_pending() during private hash resize A task performing a c… | |
CVE-2026-80775 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: futex: Fix race on the initial mm->futex.phash.ref allocation futex_hash_allocate() alloc… | |
CVE-2026-80774 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix missing hid_is_usb() check to_usb_interface() can only be used on a hid_de… | |
CVE-2026-80773 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: HID: huawei: fix missing hid_is_usb() check to_usb_interface() can only be used on a hid_… | |
CVE-2026-80772 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() joycon_ctlr_read_hand… | |
CVE-2026-80771 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: register input device after capabilities are set input_register_device() e… | |
CVE-2026-80770 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: stop device IO before hid_hw_stop on probe failure nintendo_hid_probe() ca… | |
CVE-2026-80769 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: HID: rapoo: fix missing hid_is_usb() check to_usb_interface() can only be used on a hid_d… | |
CVE-2026-80768 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: HID: ft260: fix stack-use-after-return write in I2C read race ft260_i2c_read() points dev… | |
CVE-2026-80767 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fix use-after-free in enable_sensor enable_sensor_store() can call s… | |
CVE-2026-80766 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: fix use-after-free of inrange_timer on remove uclogic_remove() cancels the… | |
CVE-2026-80765 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies… | |
CVE-2026-80764 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix LE list UAF on reset hci_cc_reset() clears the LE accept and re… | |
CVE-2026-80763 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: validate LE Set CIG Parameters response The Command Complete dispat… | |
CVE-2026-80762 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix accept list UAF during suspend hci_update_event_filter_sync() wa… | |
CVE-2026-80761 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: zero the sockaddr before returning it in getname iso_sock_getname() fills… | |
CVE-2026-80760 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255 mgmt_hci_cmd_sync() checks that… | |
CVE-2026-80759 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_aml: validate firmware segment lengths aml_download_firmware() reads two l… | |
CVE-2026-80758 | | 2026-09-04 | In the Linux kernel, the following vulnerability has been resolved: futex: Avoid private hash use-after-free on final put futex_private_hash_put() drops the… | |
CVE-2026-80757 | | 2026-09-03 | In the Linux kernel, the following vulnerability has been resolved: selinux: reject a class permission count below its inherited common security_get_permissi… | |
CVE-2026-80756 | | 2026-09-03 | In the Linux kernel, the following vulnerability has been resolved: selinux: do not cancel a policy conversion that never started sel_write_load() calls seli… | |
CVE-2026-80755 | | 2026-09-03 | In the Linux kernel, the following vulnerability has been resolved: selinux: reject a permission value exceeding the class permission count perm_read() bound… | |
CVE-2026-80754 | High | 7.8 | 2026-09-03 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detect… |
CVE-2026-80753 | High | 8.4 | 2026-09-03 | In the Linux kernel, the following vulnerability has been resolved: ovpn: run deferred work on a module-owned workqueue ovpn queues several work items whose… |
CVE-2026-80752 | High | 8.4 | 2026-09-03 | In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver data before use psxpad_spi_suspend() retrieves the control… |
CVE-2026-80751 | High | 7.8 | 2026-09-03 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev() mtk_mfg_attach_dev() r… |
CVE-2026-80750 | High | 8.4 | 2026-09-03 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix remaining %pOF after of_node_put() scpsys_get_bus_protection_lega… |
CVE-2026-80749 | High | 7.1 | 2026-09-03 | In the Linux kernel, the following vulnerability has been resolved: drm/connector/hdmi: Fix out of bounds memory read A helper function was copying a given a… |
CVE-2026-80748 | High | 7.8 | 2026-09-03 | In the Linux kernel, the following vulnerability has been resolved: mmc: loongson2: Fix sg iteration in data reorder functions In ls2k0500_mmc_reorder_cmd_da… |
CVE-2026-80747 | High | 8.0 | 2026-09-03 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add bounds check for CRAT subtype length The CRAT parser validates that the s… |
CVE-2026-80746 | | 2026-09-03 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: dispcc-eliza: Fix disp_cc_mdss_mdp_clk_src RCG stall on Eliza EVK Eliza EVK (e… | |
CVE-2026-80745 | High | 8.4 | 2026-09-03 | In the Linux kernel, the following vulnerability has been resolved: regulator: fp9931: Fix VPOS/VNEG voltage selector table The VPOSNEG_table[] mapping does… |
CVE-2026-80744 | | 2026-09-03 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path In nft_flow_… | |
CVE-2026-80743 | | 2026-09-03 | In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers The irq handlers take a st… | |
CVE-2026-80742 | | 2026-09-03 | In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't send zero-byte data in tpacket_snd(). syzbot reported a WARNING in __dev… | |
CVE-2026-80741 | High | 7.1 | 2026-09-03 | In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix out-of-bounds read on empty message length drm_log_draw_kmsg_record() access… |