Linux
Page 37 of 100 — Linux CVEs from a corpus of 24865, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-68205 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() T… | |
CVE-2026-68204 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: media: vivid: check for vb2_is_busy() when toggling caps The vivid_update_format_cap/out(… |
CVE-2026-68203 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix cleanup bugs in vivid_init() When platform_device_register() fails in v… | |
CVE-2026-68202 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: close a re-opened queue timer in the destructor queue_delete() closes the queu… |
CVE-2026-68201 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: drain a slave's callback before its master detaches it snd_timer_close_locke… |
CVE-2026-68200 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: don't re-enter an instance callback that is still running The userspace-driv… |
CVE-2026-68199 | High | 8.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB access from firmware ADDBA window size aggr_recv_addba_req_evt() lo… |
CVE-2026-68198 | High | 8.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix use-after-free in aggr_reset_state() The aggr_reset_state() function us… |
CVE-2026-68197 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper mwifiex_tdls_ad… | |
CVE-2026-68196 | High | 8.3 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: validate assoc response length before subtracting header wilc_parse_assoc… |
CVE-2026-68195 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses PKT_TYPE_TXRX_NOTIFY is an mmio-on… | |
CVE-2026-68194 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses PKT_TYPE_TXRX_NOTIFY is an mmio-on… | |
CVE-2026-68193 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses PKT_TYPE_TXRX_NOTIFY is an mmio-on… | |
CVE-2026-68192 | High | 8.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: make release_scratchbuffers idempotent brcmf_pcie_release_scratchbuffers(… |
CVE-2026-68191 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix NULL pointer dereference in rhash table destroy When unbinding the ath1… | |
CVE-2026-68190 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie() rtw_get_wps_ie() iterates over IE d… | |
CVE-2026-68189 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Protect UUID list traversal The hci_sync conversion moved class-of-d… |
CVE-2026-68188 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix session UAF in set_termios rfcomm_tty_set_termios() tests dlc->ses… | |
CVE-2026-68187 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: exec: fix unsigned loop counter wrap in transfer_args_to_stack() The stop value is derive… | |
CVE-2026-68186 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: set have_execfd only once the interpreter is opened load_misc_binary() raise… | |
CVE-2026-68185 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jump_label_init() before parse_early_param() When enabling both CONFIG_ME… | |
CVE-2026-68184 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: cdrom: fix stack out-of-bounds read in CDROMVOLCTRL mmc_ioctl_cdrom_volume() first reads… | |
CVE-2026-68183 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: fix memory leaks and list corruption bugs Fix a memory leak when… | |
CVE-2026-68182 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: comedi: comedi_parport: deal with premature interrupt Syzbot reported a general protectio… | |
CVE-2026-68181 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: mei: bus: access mei_device under device_lock on cleanup Fix couple of problems in mei_cl… | |
CVE-2026-68180 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: intel_th: fix MSC output device reference leak intel_th_output_open() looks up the output… | |
CVE-2026-68179 | High | 8.4 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsm_dev on post-lock error paths nsm_dev_ioctl() jumps to the comm… |
CVE-2026-68178 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: misc: nsm: pin the module while the device is open misc_open() installs a misc driver's f… |
CVE-2026-68177 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: tracing: Delay module ref count for "enable_event" trigger Triggers are now delayed from… |
CVE-2026-68176 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev If the mmio_pipe_open()… | |
CVE-2026-68175 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix resource leak on mmiotrace trace_pipe close The mmiotrace tracer was added M… | |
CVE-2026-68174 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix union collision of module and refcnt for dynamic events In 'struct trace_eve… | |
CVE-2026-68173 | High | 7.1 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ublk: wait on ublk_dev_ready() instead of ub->completion ub->completion is only re-armed… |
CVE-2026-68172 | High | 7.1 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: arm64: make huge_ptep_get handled unaligned addresses huge_ptep_get() can be handed a vir… |
CVE-2026-68170 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix stale skb->sk reference on subflow close The backlog list is updated by mptcp_… |
CVE-2026-68169 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: userspace: fix use-after-free in get_local_id In mptcp_pm_userspace_get_local_… | |
CVE-2026-68168 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix afs_edit_dir_remove() to get, not find, block 0 Fix afs_edit_dir_remove() to use… | |
CVE-2026-68167 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not try compression for data reloc inodes [BUG] There is a syzbot report that t… | |
CVE-2026-68166 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: userfaultfd: prevent registration of special VMAs Vova Tokarev says: userfaultfd allow… | |
CVE-2026-68165 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: validate ranges in damon_set_regions() DAMON core logic assumes zero lengt… | |
CVE-2026-68164 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: disallow overlapping input ranges for damon_set_regions() damon_set_region… | |
CVE-2026-68163 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: mm/page_vma_mapped: fix device-private PMD handling Commit 65edfda6f3f2 ("mm/rmap: extend… |
CVE-2026-68162 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: sctp: avoid auth_enable sysctl UAF during netns teardown proc_sctp_do_auth() updates the… |
CVE-2026-68161 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: sctp: close UDP tunnel sockets during netns teardown proc_sctp_do_udp_port() starts per-n… |
CVE-2026-68160 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() ceph_handle_caps… |
CVE-2026-68159 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE __decode_pg_temp()… |
CVE-2026-68158 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: libceph: Fix multiplication overflow in decode_new_up_state_weight() If a message of type… |
CVE-2026-68157 | High | 7.5 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: libceph: guard missing CRUSH type name lookup Localized read selection can walk a parent… |
CVE-2026-68156 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth->authorizer_buf{,_len} after authorizer update ceph_x_create_author… |
CVE-2026-68155 | High | 7.5 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: libceph: Reject monmaps advertising zero monitors A message of type CEPH_MSG_MON_MAP cont… |
CVE-2026-68154 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crush_decode CRUSH bucket type 0 is reserved for dev… |
CVE-2026-68153 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: libceph: remove debugfs files before client teardown ceph_destroy_client() tears down the… |
CVE-2026-68152 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: amt: fix use-after-free in AMT delayed works When an AMT device is removed, pending delay… |
CVE-2026-68151 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: binfmt_elf_fdpic: only honour the first PT_INTERP The program header scan handles PT_INTE… | |
CVE-2026-68150 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: fs/super: fix emergency thaw double-unlock of s_umount do_thaw_all() iterates over all su… | |
CVE-2026-68149 | High | 8.4 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: fs: preserve ACL_DONT_CACHE state in forget_cached_acl() The ACL_DONT_CACHE state is mean… |
CVE-2026-68148 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: fscrypt: Add missing superblock check in find_or_insert_direct_key() The legacy 'fscrypt_… |
CVE-2026-68147 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: fscrypt: Avoid dynamic allocation in fscrypt_get_devices() When a blk_crypto_key starts b… |
CVE-2026-68146 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Add global mutex to serialize trace_parser access In ftrace, the trace_parser str… | |
CVE-2026-68145 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: iomap: fix out-of-bounds bitmap_set() with zero-length range ifs_set_range_dirty() and if… |
CVE-2026-68144 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: phonet: pep: fix use-after-free in pep_get_sb() pep_get_sb() doesn't consider that pskb_m… |
CVE-2026-68143 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: net: slip: serialize receive against buffer reallocation sl_realloc_bufs() replaces rbuff… |
CVE-2026-68142 | High | 8.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: geneve: require CAP_NET_ADMIN in the device netns for changelink A tunnel changelink() op… |
CVE-2026-68141 | High | 7.5 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() afiucv_hs_callback_syn() allocate… |
CVE-2026-68140 | High | 8.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix use-after-free of a severed iucv_path af_iucv queues not-yet-received messa… |
CVE-2026-68139 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use sender devcom for MPV master-up After PCIe DPC recovery, mlx5 reloads the… | |
CVE-2026-68138 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: net/sched: serialize qdisc_rtab_list against concurrent get/put qdisc_get_rtab() and qdis… |
CVE-2026-68137 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free in x25_kill_by_neigh() x25_kill_by_neigh() walks the global X… |
CVE-2026-68136 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: net: gro: fix double aggregation of flush-marked skbs Commit 0ab03f353d36 ("net-gro: Fix… |
CVE-2026-68135 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on build_skb failure When build_skb() fails in hip04_rx_po… | |
CVE-2026-68134 | High | 7.3 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ptp: ptp_s390: Add missing facility check Only register the physical clock when facility… |
CVE-2026-68133 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP Call Trace during PTP release If a PF reset occurs when the PTP state is ICE… | |
CVE-2026-68132 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: super: fix emergency thaw deadlock on frozen block devices do_thaw_all_callback() calls b… | |
CVE-2026-68131 | High | 7.5 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: rbd: Reset positive result codes to zero in object map update path In a reply message to… |
CVE-2026-68130 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer destroy_previous_session() until after NTLM authentication In ntlm_authentic… | |
CVE-2026-68129 | High | 7.5 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: gve: fix Rx queue stall on alloc failure When the system is under extreme memory pressure… |
CVE-2026-68128 | High | 8.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in ice_parser_profile_init set_bit(rslt->ptype, prof->ptyp… |
CVE-2026-68127 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ila: reload IPv6 header after pskb_may_pull in checksum adjust ila_csum_adjust_transport(… |
CVE-2026-68126 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: mac802154: hold an interface reference across the scan worker mac802154_scan_worker() cap… | |
CVE-2026-68125 | High | 8.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: reject frames shorter than the authentication tag llsec_do_decrypt_auth… |
CVE-2026-68124 | Critical | 9.6 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: mctp: serial: handle zero-length frames to prevent rx buffer overflow The MCTP serial rec… |
CVE-2026-68123 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix GSO userspace truncation underflow OVS_ACTION_ATTR_TRUNC currently store… |
CVE-2026-68122 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ovpn: fix peer refcount leak in TCP error paths When either the TCP RX or TX error path c… | |
CVE-2026-68121 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after dev_hard_header() pppoe_sendmsg() saves a pointer to t… |
CVE-2026-68120 | High | 7.5 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware packet parsing The hardware performs pac… |
CVE-2026-68119 | High | 7.5 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: tcp: initialize standalone TCP-AO response padding tcp_v4_send_ack() and tcp_v6_send_resp… |
CVE-2026-68118 | High | 8.2 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: tcp: challenge ACK for non-exact RST in SYN-RECEIVED The SYN-RECEIVED request-socket path… |
CVE-2026-68117 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() When tipc_sk_create()… |
CVE-2026-68116 | High | 7.9 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix source list corruption on a failed replace When replacing the source list… |
CVE-2026-68115 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for… | |
CVE-2026-68114 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12.1: replace BUG_ON() with WARN_ON() There's no need to crash the kernel f… | |
CVE-2026-68113 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for… | |
CVE-2026-68112 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON() There's no need to crash the kernel… | |
CVE-2026-68111 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for… | |
CVE-2026-68110 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON() There's no need to crash the kernel… | |
CVE-2026-68109 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON() There's no need to crash the kernel f… | |
CVE-2026-68108 | High | 8.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: fix integer overflow in image size Fix a security vulnerability where mal… |
CVE-2026-68107 | High | 8.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by v… |
CVE-2026-68106 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix division by zero with invalid uvd dimensions When width or height is less… |
CVE-2026-68105 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix kernel panic during driver load failure Avoid kernel panic if MES init fa… |