Linux
Page 26 of 100 — Linux CVEs from a corpus of 24866, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-74575 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Prevent XDomain delayed work use-after-free on disconnect tb_xdp_handle_requ… |
CVE-2026-74574 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() The failed_dev_add an… |
CVE-2026-74573 | Critical | 9.3 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE arm_vsmmu_vsid_to_… |
CVE-2026-74572 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix deadlock between metadata writeback and transaction commit When writing… |
CVE-2026-74571 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: btrfs: skip global block reserve accounting for rescue mounts [BUG] Mounting with rescue=… | |
CVE-2026-74570 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc size calculations Add a shared helper to safely convert runl… |
CVE-2026-74569 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() sip_help_tc… |
CVE-2026-74568 | Critical | 9.3 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Fix race between LPI release and re-registration Fix a potential race b… |
CVE-2026-74567 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: keys: fix out-of-bounds read in keyring_get_key_chunk() For description-level chunks keyr… |
CVE-2026-74566 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with keyring_diff_objects() keyring_get_key… | |
CVE-2026-74565 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: make nft_object rhltable per table The nft_object rhltable is globa… |
CVE-2026-74564 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH The XT_HASHL… |
CVE-2026-74563 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() rds_tcp_laddr… |
CVE-2026-74562 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: nexthop: take nh->lock for f6i_list walks in replace check and notify fib6_check_nh_list(… |
CVE-2026-74561 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: nexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush nh_rt_cache_flush() walks nh->… |
CVE-2026-74560 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: xsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx This patch is inspired… | |
CVE-2026-74559 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: xsk: drain continuation descs after overflow in xsk_build_skb() Fix generic xmit path mul… | |
CVE-2026-74558 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: xsk: reclaim invalid Tx descriptors in ZC batch path The zero-copy Tx batch parser stops… | |
CVE-2026-74557 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer iscsi_scsi_cmd_rsp() copie… |
CVE-2026-74556 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer iscsi_tcp_h… |
CVE-2026-74555 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race Commit fbefe22811c3 ("sc… | |
CVE-2026-74554 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix out-of-bounds clear_bit in ath12k_mac_dp_peer_cleanup() ath12k_mac_dp_p… |
CVE-2026-74553 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 Unlike NCT6106, NCT… | |
CVE-2026-74552 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Only report alarms if driver is ready Userspace can read sysfs attributes b… | |
CVE-2026-74551 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (nzxt-smart2) DMA-align output buffer Sashiko reports: When send_output_report()… |
CVE-2026-74550 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: do not send ICMP/NDISC Redirects when peer allocation fails When inet_getpeer_v4() o… |
CVE-2026-74549 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775-core) Prevent access to unsupported weight registers Sashiko reports: Du… |
CVE-2026-74548 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix UAF of txrx_stats in nv_remove nv_remove() frees the per-CPU txrx_stats be… |
CVE-2026-74547 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread When userspace configure… | |
CVE-2026-74546 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read If the fan data become… | |
CVE-2026-74545 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: rtase: fix double free of multi-frag skb on DMA map failure In rtase_start_xmit(), when t… |
CVE-2026-74544 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds u32_change() copies… |
CVE-2026-74543 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister() syzbot reported a memory… | |
CVE-2026-74542 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio_queue ENOMEM in writeback by adding a mempool Fix the handling of folio_… | |
CVE-2026-74541 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: clear iso_data always when detaching conn from hcon When setting conn->hc… |
CVE-2026-74540 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp l2cap_le_connect_rsp() obtains a channe… |
CVE-2026-74539 | High | 8.0 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in iso_sock_getname Accessing iso_pi(sk)->conn requires lock_sock… |
CVE-2026-74538 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in iso_connect_ind Accessing iso_pi(sk)->conn requires lock_sock… |
CVE-2026-74537 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: hold sk properly in iso_conn_ready sk deref in iso_conn_ready must be don… |
CVE-2026-74536 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix leaking sk after socket release iso_sock_kill() tests !sock_flag(sk… | |
CVE-2026-74535 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: avoid deadlocks in iso_sock_timeout iso_sock_timeout() takes lock_sock, s… |
CVE-2026-74534 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix refcounting of iso_conn iso_conn_del() and iso_chan_del() have a race… |
CVE-2026-74533 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix race of kfree vs kref_get_unless_zero hci_conn::iso_data is accessed… |
CVE-2026-74532 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Validate length before parsing diagnostics TLV btintel_diagnostics()… | |
CVE-2026-74531 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: hold conn reference in abort_conn_sync() There is theoretical UAF if… |
CVE-2026-74530 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback There is theoretical UA… |
CVE-2026-74529 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback There is theoretical UAF… |
CVE-2026-74528 | High | 8.0 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_past_sync() callback Avoids giving freed pointers t… |
CVE-2026-74527 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Block VFs from clobbering special CGX PKIND state PF and VF NIX LFs that sh… |
CVE-2026-74526 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit mpi3mr_fault_uevent_emit… | |
CVE-2026-74525 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allocation fai… | |
CVE-2026-74524 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix out-of-bounds page-table walk during memory hot-remove remove_pud_mapping(… | |
CVE-2026-74523 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: qede: sync udp_tunnel ports outside qede_lock in the recovery path A TX timeout on a qede… |
CVE-2026-74522 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __close_file_table_ids() A ksmbd_file can remain alive after… |
CVE-2026-74521 | Critical | 9.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: use memcmp() to compare ClientGUIDs ClientGUID is a fixed-size binary value and ca… |
CVE-2026-74520 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix IOPF group ownership UAF iopf_group_alloc() links each last-page IOPF… |
CVE-2026-74519 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized dev_name on error path dt_remember_or_free_… |
CVE-2026-74518 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix list corruption in allocate_file_region_entries() allocate_file_region_en… |
CVE-2026-74517 | Critical | 9.3 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs Cancel (and flush)… |
CVE-2026-74516 | High | 8.2 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always upd… |
CVE-2026-74515 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled The MPCIFC instruc… |
CVE-2026-74514 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix memory accounting for pinned/unpinned pages The account_mem() and una… | |
CVE-2026-74513 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister dibs_lo_attach_… |
CVE-2026-74512 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in audit_del_rule() `audit_del_rule()` destroys `e->r… |
CVE-2026-74510 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix UAF in pair command cancellation The pairing completion and authenti… |
CVE-2026-74509 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix advertising data UAFs hci_find_adv_instance() returns an adv_inf… |
CVE-2026-74508 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: reject frames without a transaction header hidp_recv_ctrl_frame() and hi… |
CVE-2026-74507 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: validate numbered report payloads When hidp_get_raw_report() waits for a… |
CVE-2026-74506 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix UAF when sending a message In afs_make_call(), there's a race with async call re… |
CVE-2026-74505 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error handling during probe Although 6fire driver had a few fixes… | |
CVE-2026-74504 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix division by zero in initialize_timer() A userspace-driven ALSA timer (SND_… | |
CVE-2026-74503 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes snd_timer_close_locked(… |
CVE-2026-74502 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: fix double free of out_cvts on rawmidi error snd_ump_attach_legacy_rawmidi() a… | |
CVE-2026-74501 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix use-after-free in ump_to_endpoint() create_midi2_ump() registers a c… | |
CVE-2026-74500 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix stack info leak in RME Digiface status snd_rme_digiface_read_status(… | |
CVE-2026-74499 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() snd_usbmidi_akai_output() com… | |
CVE-2026-74498 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set When a USB audio… | |
CVE-2026-74497 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp frame size in implicit-feedback mode snd_usb_handle_sync_urb() sca… |
CVE-2026-74496 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: fou: Fix use-after-free in fou_create() fou_create() publishes struct fou through sk_user… |
CVE-2026-74495 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffe… |
CVE-2026-74494 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject repeated SMB2 NEGOTIATE requests Unauthenticated client can send multiple s… | |
CVE-2026-74493 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket use-after-free during link group termination __smc_lgr_terminate() dr… |
CVE-2026-74492 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: do not update comments from kernel-side hash adds mtype_resize() copies… |
CVE-2026-74491 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: of/address: Fix NULL bus dereference in of_pci_range_parser_one() The bus matching rework… | |
CVE-2026-74490 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: tipc: avoid use-after-free in poll trace queue dumps TIPC socket tracepoints dump queue s… |
CVE-2026-74489 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix tid_tx use-after-free on BA session stop ieee80211_stop_tx_ba_cb() ha… |
CVE-2026-74488 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames mwifiex_11n_dispat… |
CVE-2026-74487 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: restore write access when removing an entry Registering an entry with the MI… | |
CVE-2026-74486 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: use exe_file_deny_write_access() for the interpreter clone For MISC_FMT_OPEN… | |
CVE-2026-74485 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: reject a flag character as the field delimiter The registration string start… |
CVE-2026-74484 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: don't let an 'F' entry pin its own instance An entry registered with 'F' ope… | |
CVE-2026-74483 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: don't leak the user namespace when the mount fails bm_get_tree() takes a ref… | |
CVE-2026-74482 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios __folio_split() k… |
CVE-2026-74481 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mm/page_reporting: use system_freezable_wq to fix UAF during suspend During PM freeze (e… |
CVE-2026-74480 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleting a port group br_multicast_leave_group() itera… |
CVE-2026-74479 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: pktgen: fix proc entry use-after-free pktgen_change_name() replaces pkt_dev->entry w… |
CVE-2026-74478 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vector_mmsg_rx() When vector_mmsg_rx() discards a packe… |
CVE-2026-74477 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: uprobes: Fix NULL pointer dereference in hprobe_expire() Forking a task that has a pendin… | |
CVE-2026-74476 | Critical | 9.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: veth: convert frag_list skbs before running XDP A frag_list skb can reach veth with data_… |
CVE-2026-74475 | Critical | 10.0 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: vxlan: use neigh_ha_snapshot() in route_shortcircuit() The neighbour hardware address n->… |