Linux
Page 25 of 100 — Linux CVEs from a corpus of 24866, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-74675 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get kbd_keycode() reads vc->… |
CVE-2026-74674 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: mm: fix incorrect flush address in direct page table reclaim When zap_pte_range reclaims… |
CVE-2026-74673 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: Input: evdev - fix information leak in evdev_pass_values() In evdev_pass_values(), the in… | |
CVE-2026-74672 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF Patch series "mm: fix U… | |
CVE-2026-74671 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ima: fix out-of-bounds read in xattr_verify() The digest-length check in xattr_verify() m… | |
CVE-2026-74670 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ipvs: stop estimator after disabled calc phase IPVS estimator kthread 0 starts with zeroe… |
CVE-2026-74669 | Critical | 9.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ip_vs_in_icmp() rebases an skb… |
CVE-2026-74668 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hard_header_len in TX_RING send path tpacket_snd() reads dev->hard… |
CVE-2026-74667 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/packet: reset the MAC header on the packet-socket transmit path packet_parse_headers(… |
CVE-2026-74666 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: packet: synchronize pressure clearing with ring reconfiguration packet_set_ring() updates… |
CVE-2026-74665 | Critical | 9.1 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: fix skb length accounting after generic XDP frag adjustment Generic XDP exposes non-… |
CVE-2026-74664 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reallocate update replies for mismatched IDs ovs_flow_cmd_new() preallo… | |
CVE-2026-74663 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excess… |
CVE-2026-74662 | Critical | 9.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues before arming timer inet_frag_create() arms the fragment queu… |
CVE-2026-74661 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: mac802154: fix netdev use-after-free in beacon worker mac802154_beacon_worker() reads loc… |
CVE-2026-74660 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ebt_nflog: pin the NFLOG backend nf_log_unregister() runs after the per-net te… |
CVE-2026-74659 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: mrp: fix uninitialised bytes on the wire br_mrp_alloc_test_skb() builds MRP… | |
CVE-2026-74658 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: futex: Prevent robust futex exit race some more A robust futex unlock stores 0 over the w… | |
CVE-2026-74657 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops fib_nlmsg_size() still estimates nexthop… | |
CVE-2026-74656 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ipv4: fix use-after-free in fib_nhc_update_mtu() fib_nhc_update_mtu() walks the nexthop e… |
CVE-2026-74655 | High | 8.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: fix TX DMA buffer flush When transmit flushing a qcom-geni UART during… |
CVE-2026-74654 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dma: Clear stale RX state on shutdown serial8250_release_dma() terminates RX… | |
CVE-2026-74653 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART (PORT_… | |
CVE-2026-74652 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ The RS485 trigger hrtimers ar… |
CVE-2026-74651 | High | 8.1 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() rtw_get_wpa_ie() reads bytes at fixe… |
CVE-2026-74650 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in WMM_param_handler() WMM_param_handler() copies a fixe… | |
CVE-2026-74649 | High | 8.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key… |
CVE-2026-74648 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: validate monitor transmit frame lengths rtw_cfg80211_monitor_if_xmit_… |
CVE-2026-74647 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Remove buffer from list prior to unmap operation fastrpc_req_munmap_impl()… |
CVE-2026-74646 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke When an invoke is in… |
CVE-2026-74645 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru_sort: error out for >10000 active_mem_bp damos_quota_score() can trigger div… | |
CVE-2026-74644 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damon_pa_migrate() and damos_v… | |
CVE-2026-74643 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: error out for zero quota goal target values Patch series "mm/damon… | |
CVE-2026-74642 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: Fix UAF at delayed release of MIDI2 EPs The recent fix for UAF in ump_to_endpo… | |
CVE-2026-74641 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset snd_us428ctls_vm_fault() turns the faultin… |
CVE-2026-74640 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: fix OOB write in fcp_meter_ctl_get() fcp_ioctl_set_meter_map() bounds the user… |
CVE-2026-74639 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: re-anchor capture URBs on resubmission capture_urb_complete() resubmits… | |
CVE-2026-74638 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardwar… | |
CVE-2026-74637 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix group leader use-after-free after sibling detach perf_group_detach() handl… |
CVE-2026-74636 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race between update_event_fields and, event_define_fields The following sequ… | |
CVE-2026-74635 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check glyph index in bit_cursor() bit_cursor() fetches the glyph un… |
CVE-2026-74634 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf order change when resizing is disabled Because ring_buffer_su… |
CVE-2026-74633 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix NULL pointer dereference in module event cache removal A module-only event f… | |
CVE-2026-74632 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix huge_zero_pfn race Patch series "mm/huge_memory: fix huge_zero_pfn ra… |
CVE-2026-74631 | High | 8.4 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: smc: fix splice entry lifetime imbalance in smc_rx_splice smc_rx_splice() passes pag… |
CVE-2026-74630 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent in6_dev_get() from resurrecting inet6_dev in6_dev_get() reads dev->ip6_ptr… |
CVE-2026-74629 | High | 8.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/dibs: Correct freeing of dmb_clientid_arr A dibs device interrupt handler can be acti… |
CVE-2026-74628 | Critical | 9.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with mod… |
CVE-2026-74627 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: devmem: prevent net-iov / page mixing We should either have net_iov or page backed f… |
CVE-2026-74626 | High | 7.5 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_netdev: Preserve RX queue depth on allocation failure ntb_netdev_rx_handler() ha… |
CVE-2026-74625 | High | 7.5 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: release template ct on non-IP path A bridge nftables ct zone set rule… |
CVE-2026-74624 | High | 7.5 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: defer invalid log until after unlock TCP and SCTP conntrack path… |
CVE-2026-74623 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free stranded TX buffers on ring deinit aq_vec_deinit() drains the TX ring… | |
CVE-2026-74622 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free RX pages of consumed but not refilled buffers aq_ring_rx_deinit() onl… | |
CVE-2026-74621 | High | 7.5 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix sk_buff leak when the header checks reject a packet tcf_ct_handle_… |
CVE-2026-74620 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_gact, act_police: range check the fallback control action tcf_action_check… | |
CVE-2026-74619 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ovl: don't warn when the mount is completed from another user namespace fsopen() records… | |
CVE-2026-74618 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: don't warn when the mount is completed from another user namespace fsopen()… | |
CVE-2026-74617 | Critical | 9.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs->lock in dibs_dev_alloc() dibs->lock is initialised by dibs_dev_add… |
CVE-2026-74616 | Critical | 9.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: xdp: reject clones that overrun skb_shared_info tailroom xdpf_clone() clones broadcast co… |
CVE-2026-74615 | High | 8.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: vxlan: do not arm the ageing timer on a device that is down vxlan_changelink() arms vxlan… |
CVE-2026-74614 | High | 8.4 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: read virtqueues under worker locks Commit bd50c5dc182b ("vsock/virtio: add… |
CVE-2026-74613 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 ("vsock/vir… |
CVE-2026-74612 | Critical | 10.0 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: veth: fix skb length accounting after XDP frag adjustment veth exposes non-linear skb fra… |
CVE-2026-74611 | Critical | 9.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: tls: rx: restore msg_iter before TLS 1.3 optimistic retry tls_decrypt_sg() advances msg->… |
CVE-2026-74610 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext sk_msg ring unpushed When the copy path in tls_sw_sendm… |
CVE-2026-74609 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: tipc: read le->link under the node lock in tipc_node_link_down() tipc_node_link_down() ca… |
CVE-2026-74608 | Critical | 9.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifs_try_adding_channels() cifs_try_adding_channels()… |
CVE-2026-74607 | High | 8.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Serialize accesses to the owner and mirror list with separate lock Interaction… |
CVE-2026-74606 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix use-after-free in eventfs_remove_rec() eventfs_remove_rec() recursively remo… |
CVE-2026-74605 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for rcu head and add memory barriers When an eventfs inode is… |
CVE-2026-74604 | High | 8.4 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Revert commit 030a48b0f6ce ("t… |
CVE-2026-74603 | High | 7.1 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-byte field and is not… |
CVE-2026-74602 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() In rb_allocate_cpu_… | |
CVE-2026-74601 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Use current_context for safe per-CPU buffer swap The ring_buffer_swap_cpu()… |
CVE-2026-74600 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: mm/page_table_check: skip special zero mappings page_table_check_set() and page_table_che… | |
CVE-2026-74599 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: mm/ptdump: always stabilise against page table freeing using init_mm Previous commits hav… | |
CVE-2026-74598 | High | 7.5 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6_route_rcv() validates the Route… |
CVE-2026-74597 | Critical | 9.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip6ip6_err() ip6ip6_err() clones an outer IPv6 ICMP error… |
CVE-2026-74596 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattr_prepare() The check that… | |
CVE-2026-74595 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() fscrypt_io… |
CVE-2026-74594 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() psi_schedule_rtpoll_work() is call… |
CVE-2026-74593 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Take cgroup_lock() first in scx_cgroup_lock() scx_cgroup_lock() write-locks sc… | |
CVE-2026-74592 | High | 8.1 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate file_truncate and path_truncate hooks Instantiate the file_truncate and… |
CVE-2026-74591 | Critical | 9.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: mm/filemap: __filemap_add_folio() restore index before retrying In __filemap_add_folio()'… |
CVE-2026-74590 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions The BPF verifier and the dynpt… |
CVE-2026-74589 | High | 8.4 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix sk_redir use-after-free in send verdict sk_psock_msg_verdict() takes a… |
CVE-2026-74588 | Critical | 9.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk->transport in step with the list it is queued on __sctp_outq_flush_rtx()… |
CVE-2026-74587 | Critical | 9.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addip_last_asconf caches the outstanding… |
CVE-2026-74586 | Critical | 9.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: sctp: clear new_transport when removing a peer sctp_process_asconf_param() stores a newly… |
CVE-2026-74585 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound the DROM dual link port number before indexing sw->ports tb_drom_parse… | |
CVE-2026-74584 | High | 7.1 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: zero shared page before exposing to userspace bnxt_re_alloc_ucontext() allo… |
CVE-2026-74583 | High | 7.8 | 2026-08-21 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_route: fix fastmap use-after-free on filter The route4 classifier maintain… |
CVE-2026-74582 | High | 7.8 | 2026-08-21 | In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hard_header_len in non-ring send paths packet_snd() reads dev->har… |
CVE-2026-74581 | Critical | 9.8 | 2026-08-21 | In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6_rule_suppress() drops a suppressed rout… |
CVE-2026-74580 | High | 8.8 | 2026-08-21 | In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq->meta_iotlb[] caches th… |
CVE-2026-74579 | High | 7.1 | 2026-08-17 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_payload: fix mask build for partial field offload nft_payload_offload_mask… |
CVE-2026-74578 | High | 7.1 | 2026-08-16 | In the Linux kernel, the following vulnerability has been resolved: crypto: algif_skcipher - force synchronous processing on trees without ctx->state The AIO… |
CVE-2026-74577 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: mpls: initialize rtm_tos in mpls_getroute() mpls_getroute() builds the RTM_NEWROUTE… | |
CVE-2026-74576 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mm/slab: prevent unbounded recursion in free path with new kmalloc type Commit 280ea9c315… |