Linux
Page 32 of 100 — Linux CVEs from a corpus of 24865, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-72220 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: harden rq_procinfo lifecycle to prevent double-free The svc_release_rqst() functi… |
CVE-2026-72219 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file leak when nlm_do_fopen() fails A client can repeatedly drive nlm_do_… | |
CVE-2026-72218 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure The cached-file path… | |
CVE-2026-72217 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing xdr_buf_to_bvec() writes a bi… |
CVE-2026-72216 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: Fix leak when custom dump_segments addition fails Free allocated minidu… | |
CVE-2026-72215 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf() In 64-bit configurations ca… | |
CVE-2026-72214 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak In cp… | |
CVE-2026-72213 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch In alloc_hugetlb_folio(), a… |
CVE-2026-72212 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix incorrect altmap passing in error path In create_altmaps_and_memor… | |
CVE-2026-72211 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: grow index root value before reparent header update ntfs_ir_reparent() moves the re… |
CVE-2026-72210 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix off-by-one in mapping pairs decoding bounds checks In ntfs_mapping_pairs_decomp… |
CVE-2026-72209 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: validate attribute values on lookup ntfs_attr_find() and ntfs_external_attr_find()… |
CVE-2026-72208 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: add bounds check before accessing EA entries in ntfs_ea_lookup and ntfs_listxattr… |
CVE-2026-72207 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: not change 0-byte $DATA attribute to non-resident When ntfs_resident_attr_resize()… |
CVE-2026-72206 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index block header more strictly Modify ntfs_index_block_inconsisent() to… |
CVE-2026-72205 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: free volume-wide resources on fill_super failure ntfs_fill_super()'s err_out_now pa… | |
CVE-2026-72204 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: centalize $INDEX_ROOT header validation Add a dedicated helper to perform stricter… |
CVE-2026-72203 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: skip extent mft records in writeback to prevent deadlock This patch fixes the ABBA… |
CVE-2026-72202 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid heap allocation for free-cluster readahead state get_nr_free_clusters() alloc… |
CVE-2026-72201 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index entries on reading Validate index entries immediately after reading… |
CVE-2026-72200 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: detect mapping-pairs LCN accumulator overflow The NTFS mapping-pairs parser accumul… |
CVE-2026-72199 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident index root values on lookup Resident $INDEX_ROOT values carry ind… |
CVE-2026-72198 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: reject non-resident records for resident-only attributes The shared lookup-time att… |
CVE-2026-72197 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound DeleteIndexEntryAllocation memmove length In do_action()'s DeleteIndexEnt… |
CVE-2026-72196 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass In log_replay()'s analys… |
CVE-2026-72195 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound attr_off in UpdateResidentValue against data_off In do_action()'s UpdateR… |
CVE-2026-72194 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow indx_find_buffer(… |
CVE-2026-72193 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: cap RESTART_TABLE free-chain walker at rt->used A crafted NTFS3 disk image trigger… | |
CVE-2026-72192 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head indx_insert_into_roo… |
CVE-2026-72191 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: validate split-point offset in indx_insert_into_buffer indx_insert_into_buffer() c… |
CVE-2026-72190 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix mrec_lock ABBA deadlock in rename ntfs_file_fsync(), ntfs_dir_fsync() and __ntf… | |
CVE-2026-72189 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fail attrlist updates when the superblock is inactive generic_shutdown_super() clea… | |
CVE-2026-72188 | Critical | 9.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name() ntfs_lookup_inode… |
CVE-2026-72187 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid self-deadlock during inode eviction An attribute-list update performed while… | |
CVE-2026-72186 | Critical | 9.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: make system files immutable to prevent corruption When a system file such as $Bitma… |
CVE-2026-72185 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock() When ntfs_map_runli… |
CVE-2026-72184 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix hole runlist memory leak in insert range error path ntfs_non_resident_attr_inse… | |
CVE-2026-72183 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path LANDLOCK_SCOPE_SIGNAL must p… |
CVE-2026-72182 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: fix refcount leak in is_full_charged() In is_full_charged… | |
CVE-2026-72181 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mips: sched: Fix CPUMASK_OFFSTACK memory corruption This patch addresses a critical memor… |
CVE-2026-72180 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: preserve pmd_swp_uffd_wp on device-private PMD downgrade change_non_prese… | |
CVE-2026-72179 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: riscv: cacheinfo: Fix node reference leak in populate_cache_leaves Currently, the while l… | |
CVE-2026-72178 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: always put unsuccessfully committed target pids damon_commit_target() puts… | |
CVE-2026-72177 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs() Patch series "mm/… | |
CVE-2026-72176 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error damon_sysfs_scheme… | |
CVE-2026-72175 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: fix make_uffd_wp_huge_pte() prot-update race Patch series "userfaultfd/… |
CVE-2026-72174 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() A PAGEMAP_SCAN ioc… | |
CVE-2026-72173 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: do not warn on seeing non-migration pmd entry Patch series "mm/hmm: A f… | |
CVE-2026-72172 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE If DAX memory is hotplugged in… |
CVE-2026-72171 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mtd: slram: remove failed entries from the device list register_device() links a new slra… |
CVE-2026-72170 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: 9p: skip nlink update in cacheless mode to fix WARN_ON v9fs_dec_count() unconditionally c… |
CVE-2026-72169 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES When using scrat… | |
CVE-2026-72168 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzalloc_obj() / kzalloc_objs() to… | |
CVE-2026-72167 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: pl353: fix probe resource allocation During probe(), the devm_ioremap() is… | |
CVE-2026-72166 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/9p: fix infinite loop in p9_client_rpc on fatal signal When p9_client_rpc() is called… | |
CVE-2026-72165 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix condition in 'nand_select_target()' 'cs' here must be in range [0:nandd… |
CVE-2026-72164 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: avoid moving extents to occupied clusters For non-auto OCFS2_IOC_MOVE_EXT operatio… |
CVE-2026-72163 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits [BUG] A direct write ov… | |
CVE-2026-72162 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_rec [BUG] On-disk corru… |
CVE-2026-72161 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() During unmount, ocfs2_journal_s… | |
CVE-2026-72160 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject dinodes with non-canonical i_mode type Patch series "ocfs2: harden inode va… |
CVE-2026-72159 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject non-inline dinodes with i_size and zero i_clusters On a volume mounted with… | |
CVE-2026-72158 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: fpga: dfl: add bounds check in dfh_get_param_size() dfh_get_param_size() can return a par… | |
CVE-2026-72157 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Fix frags[] overflow by bounding frame_count tbnet_poll() assembles a m… |
CVE-2026-72156 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header() mpf_ops_pars… | |
CVE-2026-72155 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: swp: Improve locking user experience In the case of the first block being l… | |
CVE-2026-72154 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: openrisc: Fix jump_label smp syncing The original commit 8c30b0018f9d ("openrisc: Add jum… |
CVE-2026-72153 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: irqchip/crossbar: Use correct index in crossbar_domain_free() crossbar_domain_free() rese… | |
CVE-2026-72152 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat() wait_event_interruptible_timeou… | |
CVE-2026-72151 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_salt tpm_buf_append_s… |
CVE-2026-72150 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix uninitialized xprt_create_args structure The xprt_create_args structure is al… | |
CVE-2026-72149 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra: Fix burst size calculation Currently, the Tegra GPC DMA hardware requir… |
CVE-2026-72148 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK The DONE_INT… |
CVE-2026-72147 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without driver data dw_edma_pcie_probe() treats t… | |
CVE-2026-72146 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Once the interr… |
CVE-2026-72145 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/tpmi: use cleanup helpers in mem_write() In mem_write(), the temporary… | |
CVE-2026-72144 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-laptop: fix missing cleanups in init error path dell_init() initialize… |
CVE-2026-72143 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Restore SST-PP control to all domains The SST-PP control offset is on… |
CVE-2026-72142 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) SMBus 3.1 6.5.7 allows a Block… | |
CVE-2026-72141 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) SMBus 3.1 6.5.7 allows a Block Re… |
CVE-2026-72140 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() If devm_platform_get_and_iore… | |
CVE-2026-72139 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: tcp: defer md5sig_info kfree past RCU grace period in tcp_connect The md5+ao reconciliati… |
CVE-2026-72138 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: fix error handling in ioctl When gntdev_ioctl_map_grant_ref() fails to copy t… | |
CVE-2026-72137 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: xfrm: nat_keepalive: avoid double free on send error nat_keepalive_send() frees the keepa… |
CVE-2026-72136 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink xfrmi_chan… |
CVE-2026-72135 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: tpm: Make the TPM character devices non-seekable The TPM character devices expose a seque… |
CVE-2026-72134 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: spi: imx: reconfigure for PIO when DMA cannot be started When spi_imx_can_dma() selects D… |
CVE-2026-72133 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: Fix completion initialization order before devm_request_irq() The driver c… |
CVE-2026-72132 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: NFS: Charge unstable writes by request size, not folio size nfs_folio_mark_unstable() and… | |
CVE-2026-72131 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Prevent shared tags across queues on Apple A11 On Apple A11, tags of pending… | |
CVE-2026-72130 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTH_RECEIVE buffers nvmet_execute_auth_receive() trusts the AUT… |
CVE-2026-72129 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: handle inline data with a nonzero offset nvmet_rdma_use_inline_sg() maps the… |
CVE-2026-72128 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix refcount leak in nvmet_sq_create() In nvmet_sq_create(), a reference on the ct… | |
CVE-2026-72127 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netdev-genl: report NAPI thread PID in the caller's pid namespace netdev_nl_napi_fill_one… | |
CVE-2026-72126 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: can: isotp: use unconditional synchronize_rcu() in isotp_release() isotp_notify() unregis… |
CVE-2026-72125 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER isotp_release() loo… |
CVE-2026-72124 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: can: isotp: serialize TX state transitions under so->rx_lock The TX state machine (so->tx… |
CVE-2026-72123 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF Commit f1b4e32aca08 (… |
CVE-2026-72122 | High | 7.3 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure bcm_sendmsg() reads… |
CVE-2026-72121 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking when updating filter and timer values KCSAN detected a simultaneous… |