Linux
Page 34 of 100 — Linux CVEs from a corpus of 24865, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-72019 | High | 7.3 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: macsec: don't read an unset MAC header in macsec_encrypt() macsec_encrypt() reads the Eth… |
CVE-2026-72018 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: dibs: loopback: validate offset and size in move_data() The loopback move_data() performs… |
CVE-2026-72017 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: macb: drop in-flight Tx SKBs on close The MACB driver has since forever leaked the o… | |
CVE-2026-72016 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: cpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable() On arm64, when booting with `… | |
CVE-2026-72015 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list A pseudo-locked gr… | |
CVE-2026-72014 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range payload size recv_dless_read() receives a… |
CVE-2026-72013 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: riscv: Prevent NULL pointer dereference in machine_kexec_prepare() A NULL pointer derefer… | |
CVE-2026-72012 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronize_rcu() when unregistering This ensures that any RCU read… |
CVE-2026-72011 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: s390/diag: Add missing array_index_nospec() call to memtop_get_page_count() 'level' is us… | |
CVE-2026-72010 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed Creating a child c… | |
CVE-2026-72009 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI The MIPI DSI and CSI d… |
CVE-2026-72008 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check Should probe fail for… | |
CVE-2026-72007 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Per errata[1]: ERR050531: VPU_NOC po… | |
CVE-2026-72006 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: free mlx5_st_idx_data on final dealloc Workloads that repeatedly allocate and r… | |
CVE-2026-72005 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work setup in probe rt2x00lib_probe_dev() uses t… |
CVE-2026-72004 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix memory leak in ieee80211_register_hw() If kmemdup() fails while copyi… | |
CVE-2026-72003 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame brcmf_notify_auth_frame_rx()… |
CVE-2026-68479 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch bounds rtlbt_parse_firmware() copies patch_leng… |
CVE-2026-68478 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: memstick: ms_block: reject a card that reports too many blocks msb_ftl_initialize() compu… | |
CVE-2026-68477 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport offsets Sashiko reports for more incorrec… |
CVE-2026-68476 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation __ip_vs_get_out_rt() calls skb_ensure_writ… |
CVE-2026-68475 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: reset: sunxi: fix memory region leak on ioremap failure In sunxi_reset_init(), when iorem… | |
CVE-2026-68474 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() spufs_mem_mmap_access(… |
CVE-2026-68473 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address() mask_user_addre… |
CVE-2026-68472 | High | 8.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate EHT MLE before MLD ID read cfg80211_gen_new_ie() copies ML probe… |
CVE-2026-68471 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: ieee80211: validate MLE common info length ieee80211_mle_common_size() uses the fir… |
CVE-2026-68470 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate extension-frame layout before RX Extension frames only have the… |
CVE-2026-68469 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix permanently busy scans after multiple roam iterations In order for the… | |
CVE-2026-68468 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mtd: virt-concat: free duplicate generated name Every MTD registration runs mtd_virt_conc… | |
CVE-2026-68467 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mtd: mchp23k256: use SPI match data for chip caps The driver stores chip capacity informa… |
CVE-2026-68466 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout lpc32xx_xmit_dma() wai… |
CVE-2026-68465 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore esdhc_ch… | |
CVE-2026-68464 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt When using WI… | |
CVE-2026-68463 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend Replace pm_runtime_get_s… | |
CVE-2026-68462 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative const offsets for buffer pointers The verifier rejects variable offs… |
CVE-2026-68461 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields of fwnode_handle in fwnode_init() If a f… |
CVE-2026-68460 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadlock in f2fs_balance_fs() When the f2fs filesystem space is nearl… | |
CVE-2026-68459 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() When we mount device w… | |
CVE-2026-68458 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: binder: cache secctx size before release zeroes it binder_transaction() bounds the scatte… |
CVE-2026-68457 | Critical | 9.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for FSCTL mutations SET_SPARSE, SET_ZERO_DATA and SET_COMPR… |
CVE-2026-68456 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() ueagle-atm uses the asy… | |
CVE-2026-68455 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operation The sessions ioctls are not… | |
CVE-2026-14525 | Critical | 9.4 | 2026-08-13 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when th… |
CVE-2026-13460 | High | 7.5 | 2026-08-13 | IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-node cluster… |
CVE-2026-10571 | Medium | 5.7 | 2026-08-13 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by insecure deserialization. A low-privileged, a… |
CVE-2026-68454 | High | 8.8 | 2026-08-13 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without AISB When a guest seeks to register IR… |
CVE-2026-68453 | High | 7.1 | 2026-08-13 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix buffer over-read in cca_cipher2protkey Add validation of both the actual… |
CVE-2026-68452 | High | 7.8 | 2026-08-13 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key requests cca_cipher2protkey() derives… |
CVE-2026-68451 | High | 7.8 | 2026-08-13 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests cca_ecc2protkey() derives t… |
CVE-2026-68450 | | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: btrfs: free mapping node on duplicate reloc root insert __add_reloc_root() allocates a ma… | |
CVE-2026-68449 | | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning The hand-rolled… | |
CVE-2026-68448 | | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copy_file_range source with src mounter creds Commit 5dae222a5ff0c (… | |
CVE-2026-68447 | High | 7.1 | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size CRIU checkpoint copies… |
CVE-2026-68446 | High | 7.8 | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw_surface_metadata::array_size This field comes from userspace and… |
CVE-2026-68445 | High | 7.8 | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Prevent shader BO mappings from becoming writable vc4_gem_object_mmap() rejects… |
CVE-2026-68444 | | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() ffa_partition_info_ge… | |
CVE-2026-68443 | | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop Calling hid_hw_sto… | |
CVE-2026-68442 | High | 7.8 | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps When btrfs_drop_extent_ma… |
CVE-2026-68441 | | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains When a TC filter attached to a… | |
CVE-2026-68440 | High | 7.8 | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbe_read_eeprom_hostif() alway… |
CVE-2026-68439 | | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv() mt76_conna… | |
CVE-2026-68438 | | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d ("smp: Improve s… | |
CVE-2026-68437 | | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fit paired fragment job in the correct CCCB For geometry jobs with a pai… | |
CVE-2026-68436 | | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate struct dc struct dc has grown large over time (… | |
CVE-2026-68435 | | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix address space mismatch in kexec command line lookup When searching the loa… | |
CVE-2026-68434 | | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms Commit… | |
CVE-2026-68433 | High | 8.6 | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: libceph: bound get_version reply decode to front len handle_get_version_reply() uses msg-… |
CVE-2026-68432 | High | 8.8 | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAP_NET_ADMIN in the device netns for changelink A tunnel changelink() ope… |
CVE-2026-68431 | Critical | 9.1 | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate minimum PDU size for transform requests The receive path applies the mini… |
CVE-2026-68430 | | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx8: drop unecessary BUG_ON() There's no need to crash the kernel for this ca… | |
CVE-2026-68429 | | 2026-08-12 | In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() A h… | |
CVE-2026-62909 | High | 7.8 | 2026-08-11 | Uncaught exception in .NET allows an authorized attacker to elevate privileges locally. |
CVE-2026-62901 | High | 7.5 | 2026-08-11 | Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network. |
CVE-2026-62900 | Medium | 5.9 | 2026-08-11 | Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network. |
CVE-2026-62899 | Medium | 5.9 | 2026-08-11 | Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a ne… |
CVE-2026-62871 | High | 7.8 | 2026-08-11 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. |
CVE-2026-58641 | High | 7.8 | 2026-08-11 | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-68428 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Fix use-after-free on vendor module reload mmu_destroy_caches() destroys pt… | |
CVE-2026-68427 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings __host1x_bo_unpin() dr… |
CVE-2026-68426 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: xfrm: fix stale skb->prev after async crypto steals a GSO segment skb_gso_segment() leave… |
CVE-2026-68425 | High | 7.1 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: IB/mad: Drop unmatched RMPP responses before reassembly Kernel-handled RMPP receive proce… |
CVE-2026-68424 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy_joins() mtd_concat_destro… | |
CVE-2026-68423 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy() mtd_concat_destroy() fr… | |
CVE-2026-68422 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() If we have an… | |
CVE-2026-68421 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() put_prev_task_scx(… | |
CVE-2026-68420 | High | 7.1 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: xfrm: reject optional IPTFS templates in outbound policies syzbot reported a stack-out-of… |
CVE-2026-68419 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent rereg_mr for non-mem regions When a QP/CQ/SRQ is created, a two step… |
CVE-2026-68418 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent user-triggered null deref on QP create Previously, the user QP creati… | |
CVE-2026-68417 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: publish QP after initialization siw_create_qp() currently calls siw_qp_add() be… |
CVE-2026-68416 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: mtd: fix double free and WARN_ON in add_mtd_device() error paths When device_register() o… | |
CVE-2026-68415 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: xfrm: clear mode callbacks after failed mode setup xfrm_state_gc_task can run long after… |
CVE-2026-68414 | High | 7.5 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel sched scan results work on unregister cfg80211_sched_scan_results(… |
CVE-2026-68413 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() The memory allocated i… | |
CVE-2026-68412 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan() If the test against… | |
CVE-2026-68411 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: clamp virtio RX length before skb_put hwsim_virtio_rx_work() passes… | |
CVE-2026-68410 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix memory leak in helper_firmware_cb() helper_firmware_cb() neglects to… | |
CVE-2026-68409 | High | 8.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: defer link RX stats percpu free to RCU sta_remove_link() frees a removed… |
CVE-2026-68408 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock When a netlink socket… | |
CVE-2026-68407 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: free RNR data on MBSSID mismatch nl80211_parse_beacon() rejects EMA RNR da… | |
CVE-2026-68406 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate PMSR FTM preamble range PMSR FTM request parsing accepts preambl… |