Linux
Page 42 of 100 — Linux CVEs from a corpus of 24865, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-64268 | Critical | 9.8 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/… |
CVE-2026-64267 | Medium | 5.5 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: fuse: avoid 32-bit prune notification count wrap FUSE_NOTIFY_PRUNE validates the nodeid p… |
CVE-2026-64266 | High | 7.8 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before returning from fuse_ref_folio() fuse_ref_folio() unlocks the… |
CVE-2026-64265 | High | 7.8 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req When fuse_resend() move… |
CVE-2026-64264 | Medium | 5.5 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix EFAULT clobber in fuse_uring_commit copy_from_user() returns the number o… |
CVE-2026-64263 | Medium | 5.5 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix moving cancelled entry to ent_in_userspace list fuse_uring_cancel() moves… |
CVE-2026-64262 | Medium | 5.5 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: end fuse_req on io-uring cancel task work When io_uring delivers task work wi… |
CVE-2026-64261 | High | 7.8 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues fuse_uring_async_stop_qu… |
CVE-2026-64260 | High | 7.8 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid queue->stopped races and set/read that value under lock There are sever… |
CVE-2026-64259 | High | 7.8 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: make a fuse_req on SQE commit only findable after memcpy Bad userspace might… |
CVE-2026-64258 | Medium | 5.5 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: remove request-less entries from ent_w_req_queue to fix NULL deref If a copy… |
CVE-2026-64257 | Critical | 9.1 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: smb: client: reject overlapping data areas in SMB2 responses Commit 53b7c271f06b ("smb: c… |
CVE-2026-64256 | Medium | 5.5 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: xfs: don't wrap around quota ids in dqiterate LOLLM noticed that q_id is an unsigned 32-b… |
CVE-2026-16280 | Critical | 9.8 | 2026-07-24 | An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This c… |
CVE-2026-64255 | High | 8.8 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers Three BA sessio… |
CVE-2026-64254 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR When BAR_PE… |
CVE-2026-64253 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: kernel/fork: clear PF_BLOCK_TS in copy_process() PF_BLOCK_TS is only set in blk_time_get_… |
CVE-2026-64252 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Prevent initial console buffer from landing in XKPHYS In 64-bit configurations… |
CVE-2026-64251 | High | 7.8 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next() pwrseq_debugfs_seq_next() d… |
CVE-2026-64250 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Report dying CPU to RCU in stop_this_cpu() This is a port of MIPS commit 9f3f3… |
CVE-2026-64249 | High | 7.8 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use-after-free in child_regions_with_firmware() Move of_node_put(child_… |
CVE-2026-64248 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: report dying CPU to RCU in stop_this_cpu() smp_send_stop() parks all secondary… |
CVE-2026-64247 | High | 8.4 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Bound the bank index when querying sparse banks When checking if a VP… |
CVE-2026-64246 | High | 7.8 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init() … |
CVE-2026-64245 | High | 7.8 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fb_find_mode() If mode_option is NULL, it is assigne… |
CVE-2026-64244 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: set mem->altmap after successful device registration If __add_memory… |
CVE-2026-64243 | High | 7.1 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simple_mux_control_put() rejects… |
CVE-2026-64242 | High | 7.8 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe error path usb_initialize_gadget() install… |
CVE-2026-64241 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: teardown bugs and resource leaks Address several teardown issues and reso… |
CVE-2026-64240 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: fix control request setup packet Commit eac69475b01f ("media: rc… |
CVE-2026-64239 | High | 7.8 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in regions_rmdirs() DAMON sysfs maintains the… |
CVE-2026-64238 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix deadlock on shared proxy's parent removal Commit 710abda58055 ("gpio: s… |
CVE-2026-64237 | High | 7.1 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - validate firmware size before use Ensure that the firmware file is larg… |
CVE-2026-64236 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock-frequency When the 'clock-frequency'… |
CVE-2026-64235 | High | 8.1 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines With CONFIG_CALL_DE… |
CVE-2026-64234 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: pch_uart: add check for dma_alloc_coherent() Add a check for dma_alloc_coher… |
CVE-2026-64233 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bind uvc_function_bind(… |
CVE-2026-64232 | Critical | 9.8 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in blk_insert_cloned_request blk_insert_cloned_req… |
CVE-2026-64231 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: don't dump registers past the mapped region On DSI 6G platforms the IO addre… |
CVE-2026-64230 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: regulator: tps65219: fix irq_data.rdev not being assigned Commit 64a6b577490c ("regulator… |
CVE-2026-64229 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting with "nopcid" clears X8… |
CVE-2026-64228 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev->drv can become NUL… |
CVE-2026-64227 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: ACPI: driver: Check ACPI_COMPANION() against NULL during probe Since every platform drive… |
CVE-2026-64226 | High | 7.8 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path In scx_root_enable_wor… |
CVE-2026-64225 | High | 7.8 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index cgx_speed_mbps has 13 element… |
CVE-2026-64224 | High | 7.8 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvu_rep_rsrc_init() rvu_rep_rsrc_init() allocates queue… |
CVE-2026-64223 | High | 8.1 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: consume only present negotiated TTLM maps ieee80211_tid_to_link_map_size_… |
CVE-2026-64222 | High | 7.0 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool->stack on AQ init failure otx2_pool_aq_init() fre… |
CVE-2026-64221 | High | 7.8 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mod… |
CVE-2026-64220 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode->secondary to NULL in fwnode_init() If a firmware node is all… |
CVE-2026-64219 | High | 7.0 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_as… |
CVE-2026-64218 | High | 7.8 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix report_work leak on backbone_gw purge batadv_bla_purge_backbone_gw()… |
CVE-2026-64217 | High | 7.8 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_iter() Fix netfs_extract_user_iter() so th… |
CVE-2026-64216 | Critical | 9.8 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() netfs_unlock_abandoned_re… |
CVE-2026-64215 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table Check the return value of… |
CVE-2026-64214 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise() … |
CVE-2026-64213 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Add lock protection to lm90_alert Sashiko reports: lm90_alert() executes i… |
CVE-2026-64212 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it In iwl_mld_remove… |
CVE-2026-64211 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: srcu: Don't queue workqueue handlers to never-online CPUs While an srcu_struct structure… |
CVE-2026-64210 | High | 7.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix unlocked writing to ICOSQ During napi poll, when the affinity changes… |
CVE-2026-64209 | High | 7.1 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config swing_tbl and pre_… |
CVE-2026-64208 | High | 7.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks Change the krb5 cryp… |
CVE-2026-49745 | High | 7.8 | 2026-07-24 | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualis… |
CVE-2026-49744 | High | 7.8 | 2026-07-24 | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualis… |
CVE-2026-49743 | High | 7.8 | 2026-07-24 | Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel… |
CVE-2026-12702 | Medium | 4.9 | 2026-07-24 | In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment. |
CVE-2026-64600 | High | 7.8 | 2026-07-23 | In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK xfs_reflink_fill_{cow_hole,delall… |
CVE-2026-3482 | Medium | 5.3 | 2026-07-22 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 could allow an… |
CVE-2026-16422 | High | 7.5 | 2026-07-21 | Insufficient validation of untrusted input in Certificate in Google Chrome on Linux prior to 150.0.7871.182 allowed an attacker in a privileged network positio… |
CVE-2026-15904 | High | 8.8 | 2026-07-20 | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.128 allowed a remote attacker who convinced a user to engage in specific UI gestures to p… |
CVE-2026-64207 | Medium | 5.5 | 2026-07-20 | In the Linux kernel, the following vulnerability has been resolved: net/sched: dualpi2: fix GSO backlog accounting When DualPI2 splits a GSO skb into N segme… |
CVE-2026-64206 | High | 8.8 | 2026-07-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock l2cap_conn_del() takes… |
CVE-2026-64205 | Medium | 5.5 | 2026-07-20 | In the Linux kernel, the following vulnerability has been resolved: i2c: i801: fix hardware state machine corruption in error path A severe livelock and subs… |
CVE-2026-64192 | Medium | 5.5 | 2026-07-20 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized When CONFIG_B… |
CVE-2026-64191 | High | 7.8 | 2026-07-20 | In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid length The I2C_SMBUS_I2C_BLOCK_DATA ca… |
CVE-2026-64190 | Medium | 5.5 | 2026-07-20 | In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in team_xmit during mode change __team_change_mod… |
CVE-2026-64189 | High | 7.8 | 2026-07-20 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix race between dump and ip_set_list resize The release path of ip_set… |
CVE-2026-64188 | High | 7.8 | 2026-07-20 | In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() rmnet_dellink() remo… |
CVE-2026-64187 | Medium | 5.5 | 2026-07-20 | In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transacti… |
CVE-2026-64186 | High | 7.1 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs In iommu_mmio_write() and… |
CVE-2026-64185 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: sysfs: don't remove existing directory on update failure When sysfs_update_group() is cal… |
CVE-2026-64184 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() damon_sysfs_memcg_path_to_id… |
CVE-2026-64183 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: efi: Allocate runtime workqueue before ACPI init Since commit 5894cf571e14 ("acpi/prmt… |
CVE-2026-64182 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference leak in poison accounting memblk_nr_poiso… |
CVE-2026-64181 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special() On x… |
CVE-2026-64180 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix memory block reference leak on remove Patch series "mm: Fix memory… |
CVE-2026-64179 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix potential memory leaks in ipc_imem_init() The memory allocated in ip… |
CVE-2026-64178 | High | 8.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev->name bnep_add_connection() needs to keep holding th… |
CVE-2026-64177 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: phonet/pep: disable BH around forwarded sk_receive_skb() The networking receive path is u… |
CVE-2026-64176 | High | 8.1 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices On old devices such as 7265D… |
CVE-2026-64175 | High | 7.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: stop TX during firmware restart When iwlwifi firmware crashes (e.g… |
CVE-2026-64174 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: advance loop vars in cfg80211_merge_profile() cfg80211_merge_profile() re… |
CVE-2026-64173 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: tracing: Do not call map->ops->elt_free() if elt_alloc() fails In paths where tracing_map… |
CVE-2026-64172 | High | 7.1 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235) Hygon Famil… |
CVE-2026-64171 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: fix pm_runtime leak on mutex_lock failure If tegra_i2c_mutex_lock() fails, th… |
CVE-2026-64170 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: spi: qup: fix error pointer deref after DMA setup failure The driver falls back to PIO mo… |
CVE-2026-64169 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: spi: ep93xx: fix error pointer deref after DMA setup failure The driver falls back to PIO… |
CVE-2026-64168 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: spi: sprd: fix error pointer deref after DMA setup failure The driver falls back to PIO m… |
CVE-2026-64167 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: kho: skip KHO for crash kernel kho_fill_kimage() unconditionally populates the kimage wit… |
CVE-2026-64166 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Check for NULL FF-A ID table while driver registration The bus match c… |