Linux
Page 24 of 100 — Linux CVEs from a corpus of 24866, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-80540 | High | 7.8 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD decode image min size calculation This needs to use pitch instead of… |
CVE-2026-80539 | | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: disallow multiple FENCE chunks in one submit amdgpu_cs_pass1() dispatches on… | |
CVE-2026-80538 | High | 7.1 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: xfs: propagate errors from xfs_rtginode_load xfs_rtginode_ensure() treats every xfs_rtgin… |
CVE-2026-80537 | High | 7.8 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix off-by-one in rtrefcount btree root level validation xfs_rtrefcountbt_compute_ma… |
CVE-2026-80536 | High | 8.4 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: xfs: bounds-check buffer log item's dirty bitmap xlog_recover_do_reg_buffer() replays eac… |
CVE-2026-80535 | | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the… | |
CVE-2026-80534 | | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix ilock leak on error in xfs_dq_get_next_id xfs_dq_get_next_id() takes the quota i… | |
CVE-2026-80533 | | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair LOLLM noticed a longsta… | |
CVE-2026-80532 | | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix another iunlink infinite loop bug in online fsck xrep_iunlink_resolve_bucket is… | |
CVE-2026-80531 | High | 7.8 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: xfs: avoid UAF on sc->tempip in xrep_tempfile_create LOLLM noticed a potential UAF if the… |
CVE-2026-80530 | High | 7.1 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN When exchanging two… |
CVE-2026-80529 | | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: xfs: don't swallow dquot recovery verification errors xlog_recover_dquot_commit_pass2() v… | |
CVE-2026-80528 | Critical | 9.8 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: ceph: avoid fs reclaim while using current->journal_info handle_reply() stores a `ceph_md… |
CVE-2026-80527 | High | 7.5 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix hanging __ceph_get_caps() with stale mds_wanted A reader can hang forever in __… |
CVE-2026-80526 | High | 7.8 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2562: Validate values for volume writes tas2562_volume_control_put() does not do… |
CVE-2026-80525 | | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup The ipc_config_d… | |
CVE-2026-80524 | | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: optee: ffa: Add NULL check in optee_ffa_lend_protmem Sashiko (locally) reports a possible… | |
CVE-2026-80523 | High | 7.1 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: clk: spacemit: k3: set hdma clock as critical HDMA clock is responsible for the internal… |
CVE-2026-80522 | High | 7.8 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() Perform rctx->cr… |
CVE-2026-80521 | High | 7.8 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Unlink scc_entry in unix_del_edge(). Kyle Zeng reported that GC could free a dea… |
CVE-2026-80520 | High | 7.5 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpn_crypto_kill_key assumes both cry… |
CVE-2026-80519 | Critical | 9.8 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: ovpn: finish crypto callback cleanup before peer release Crypto completion callbacks hold… |
CVE-2026-74754 | | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost->eh_noresume is currently consulted twic… | |
CVE-2026-74753 | High | 7.8 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: perf: Reject exited events as group leaders perf_event_remove_on_exec() sets remove-on-ex… |
CVE-2026-74752 | Critical | 9.8 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKI… |
CVE-2026-74751 | Critical | 9.4 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: riscv: lib: Fix ZBB strnlen reading past count boundary The ZBB-optimized strnlen loop lo… |
CVE-2026-74750 | High | 7.5 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: ovpn: defer key slot crypto freeing to workqueue Key slots are released through a kref an… |
CVE-2026-74749 | | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: rseq: Prevent hard lockup on granted time slice extension __exit_to_user_mode_loop() invo… | |
CVE-2026-74748 | High | 7.8 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix refcount race between list:set GC and swap __ip_set_put_byindex() r… |
CVE-2026-74747 | High | 7.8 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: ipvs: revalidate ihl to prevent out-of-bounds access While the outer IP header is already… |
CVE-2026-74746 | Critical | 9.8 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nf_flow_table_iterate() only treats o… |
CVE-2026-74745 | High | 7.5 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: avoid deadlock when canceling IRQ affinity notifier Unregistering IRQ affinity… |
CVE-2026-74744 | Critical | 9.8 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev ipvlan devices inherit h… |
CVE-2026-74743 | Critical | 9.8 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: macvlan: inherit needed_headroom and needed_tailroom from lowerdev macvlan devices inheri… |
CVE-2026-74742 | High | 7.5 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in veth_poll veth_poll() derives the inde… |
CVE-2026-74741 | High | 7.5 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling In non-MSI-X mode… |
CVE-2026-74740 | | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain tcf_action_exec() handles TC_A… | |
CVE-2026-74739 | High | 7.8 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: skip hash tables in u32_bind_class() u32_walk() enumerates both struc… |
CVE-2026-74738 | | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: regmap: sdw-mbq: don't call an unset readable_reg callback regmap_sdw_mbq_poll_busy() dec… | |
CVE-2026-74737 | Critical | 9.8 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG On the packet rece… |
CVE-2026-74736 | High | 7.8 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_bpf: reject dev-bound programs bound to a different device cls_bpf_prog_fr… |
CVE-2026-74735 | | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: l2tp: fix tunnel and session refcount leak on seq_file release In pppol2tp_proc_open() an… | |
CVE-2026-74734 | | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in ar_context_release During the error handl… | |
CVE-2026-74733 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock Locking is disabled in the reg… |
CVE-2026-74731 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Skip sub-disable teardown for never-linked sub-schedulers A sub-scheduler enab… |
CVE-2026-74730 | Critical | 9.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfs_server' during a FREE_STATEID call Dan Aloni reports that he was… |
CVE-2026-74729 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read put_fifo_with_discard()… | |
CVE-2026-74728 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: xfs: handle NULL b_addr in xfs_buf_free When xfs_buf_alloc_backing_mem() fails, xfs_buf_f… | |
CVE-2026-74727 | Critical | 9.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ovpn: skip rehash for peers already removed from by_id ovpn_nl_peer_set_doit() resolves t… |
CVE-2026-74726 | High | 7.3 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor bond_alb_monitor… |
CVE-2026-74725 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: enic: fix tx_hang_reset use-after-free on device removal enic_remove() cancels the reset… |
CVE-2026-74724 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ipvs: avoid out-of-bounds write in ip_vs_nat_icmp Sashiko warns that local attacker can m… |
CVE-2026-74723 | Critical | 9.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline extents without valid headers [BUG] For a crafted btrfs image… |
CVE-2026-74722 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak in btrfs_do_encoded_write() Local fuzzing of 6.12.94 has found the… | |
CVE-2026-74721 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages() Two error paths in amdx… |
CVE-2026-74720 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in… |
CVE-2026-74719 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler(… | |
CVE-2026-74718 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: devlink: fix net namespace reference leak in reload devlink_nl_reload_doit() calls devlin… | |
CVE-2026-74717 | High | 7.5 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fw_tracer, return NULL on create error Tracer creation can fail by returning ei… |
CVE-2026-74716 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages() In amdxdna_insert… | |
CVE-2026-74715 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix netns reference imbalance in conntrack kfuncs The opts argument of the BPF connt… |
CVE-2026-74714 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() reqsk_queue_hash_req() p… |
CVE-2026-74713 | High | 7.1 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: vhost_iotlb: bound map allocation in add_range vhost_iotlb_add_range_ctx() only retires a… |
CVE-2026-74712 | Critical | 9.3 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix buffer length in create_direct_keys() We have seen in our CI the following… |
CVE-2026-74711 | High | 8.4 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus) Fix type confusion in notification logic Sashiko reports: At the start of… |
CVE-2026-74710 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AF_XDP accepts a TX metadata length as smal… |
CVE-2026-74709 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: xsk: clear metadata pointer when no timestamp is requested User space can change metadata… | |
CVE-2026-74708 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: xsk: validate launch-time metadata size Launch-time metadata extends beyond the first 16… |
CVE-2026-74707 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: xsk: validate metadata when processing requests The zero-copy path validates TX metadata… |
CVE-2026-74706 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: bnge: Fix NULL pointer dereference in aux device release If allocation of auxr_dev fails… | |
CVE-2026-74705 | Critical | 10.0 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation __skb_udp_tunnel_segment() gets… |
CVE-2026-74704 | High | 8.2 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter The sch_cake ACK… |
CVE-2026-74703 | High | 7.1 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Validate T10 PI scatterlist counts When T10 PI is negotiated, vhost-scsi spli… |
CVE-2026-74702 | High | 8.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhost_scsi_setup_vq_cmds() runs from VH… |
CVE-2026-74701 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/openvswitch: check Ethernet header length in key_extract() When a packet arrives on a… |
CVE-2026-74700 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers Another c… |
CVE-2026-74699 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in exec_queue_set_hang_replay_state() The q->replay_state is blin… | |
CVE-2026-74698 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix BQL reset on SQ re-activation mlx5e_queue_start() deactivates and re-activ… | |
CVE-2026-74697 | High | 8.2 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Disable EOP for TPA on all chips to prevent data corruption EOP (End of frame pa… |
CVE-2026-74696 | High | 7.5 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix TFO max_qlen accounting across reuseport migration A listener's TCP_FASTOPEN max… |
CVE-2026-74695 | High | 7.5 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() Incoming skbs… |
CVE-2026-74694 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length ncsi_send_cmd_nl() takes… | |
CVE-2026-74693 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmware header length prestera_fw_hdr_parse() reads the firmware… | |
CVE-2026-74692 | High | 7.5 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix TOCTOU race between smc_listen_out() and listener close smc_listen_out() rea… |
CVE-2026-74691 | High | 8.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnet_tear_down() stops b… |
CVE-2026-74690 | High | 8.4 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ism_dev_exit() A ism interrupt handler can be act… |
CVE-2026-74689 | High | 7.1 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() vcc_setsockopt() contained an in… |
CVE-2026-74688 | Critical | 9.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: sctp: clear control chunk transport if it is being removed sctp_make_heartbeat_ack() cach… |
CVE-2026-74687 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: watchdog: at91sam9_wdt: prevent timer rearm during teardown at91_ping() rearms the watchd… |
CVE-2026-74686 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: rqspinlock: Reset tail when preserving queue on deadlock Currently, the destruction of th… | |
CVE-2026-74685 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc4282) Clamp negative current limits When a negative value is passed to ltc4282… | |
CVE-2026-74684 | High | 7.1 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() The commit… |
CVE-2026-74683 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: Input: evdev - sanitize event type index when fetching event masks The user-supplied even… | |
CVE-2026-74682 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write on Type II inbound URBs data_ep_set_params() sizes each UR… | |
CVE-2026-74681 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg ibuf_len is the bulk IN (r… | |
CVE-2026-74680 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() If cxacru_cm() encounters… | |
CVE-2026-74679 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: Use unsigned int for ndp_index The variable ndp_index is declared as… | |
CVE-2026-74678 | High | 7.5 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() When the interface has NETIF_F… |
CVE-2026-74677 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: usb: ipheth: fix carrier_work UAF on disconnect ipheth_sndbulk_callback() re-arms th… | |
CVE-2026-74676 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but la… |