Linux
Page 5 of 100 — Linux CVEs from a corpus of 24867, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-97495 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on allocate_doorbell allocated_doorbell has an option to set the… | |
CVE-2026-97494 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw Change psp_copy_fw f… | |
CVE-2026-97493 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Bound GPIO I2C table entry count from VBIOS Reject undersized tables and cap… | |
CVE-2026-97492 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed In case reco… | |
CVE-2026-97491 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: net/rds: Don't sleep inside rds_ib_conn_path_shutdown New rds rdma self tests exposed a h… | |
CVE-2026-97490 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: affs: handle set_blocksize failures affs uses buffer_heads, which don't handle block size… | |
CVE-2026-97489 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: bfs: handle set_blocksize failures bfs uses buffer_heads, which don't handle block size >… | |
CVE-2026-97488 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: qnx4: handle set_blocksize failures qnx4 uses buffer_heads, which don't handle block size… | |
CVE-2026-97487 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: jfs: handle set_blocksize failures jfs uses buffer_heads, which don't handle block size >… | |
CVE-2026-97486 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: hpfs: handle set_blocksize failures hpfs uses buffer_heads, which don't handle block size… | |
CVE-2026-97485 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: omfs: handle set_blocksize failures omfs uses buffer_heads, which don't handle block size… | |
CVE-2026-97484 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: usbip: vhci_hcd: fix NULL deref in status_show_vhci platform_get_drvdata() can return NUL… | |
CVE-2026-97483 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: usb: core: hcd: fix possible deadlock in rh control transfers >From within the SCSI error… | |
CVE-2026-97482 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log goku_irq() han… | |
CVE-2026-97481 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix possible ISR soft lockup There are rare cases in which the host gets st… | |
CVE-2026-97480 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: protect against NULL uart->port.dev in register serial8250_register_82… | |
CVE-2026-97479 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: driver core: Avoid warning when removing a device while its supplier is unbinding During… | |
CVE-2026-97478 | High | 7.8 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: virt: acrn: Fix irqfd use-after-free during eventfd shutdown acrn_irqfd_deassign() and th… |
CVE-2026-97477 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() When __rdma_co… | |
CVE-2026-97476 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: rds: filter RDS_INFO_* getsockopt by caller's netns The RDS_INFO_* family of getsockopt(2… | |
CVE-2026-97475 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/tegra/soctherma: Switch to devm cooling device registration Use devm_ther… | |
CVE-2026-97474 | High | 7.4 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: purge async notifications upon nic error This fixes a kernel panic in… |
CVE-2026-97473 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() When topology_phys… | |
CVE-2026-97472 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: fix temp address generation after prefix deprecation When a router tempor… | |
CVE-2026-97456 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix condition check in acpi_ps_parse_loop() Fix condition check for AML_ELSE_OP i… | |
CVE-2026-97455 | High | 8.4 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() Fix use-after-free issue… |
CVE-2026-97454 | High | 7.7 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in acpi_ps_get_next_field() Add boundary checks in acpi_ps_ge… |
CVE-2026-97453 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate byte_count in acpi_ps_get_next_package_length() Validate package length… | |
CVE-2026-97452 | High | 8.4 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Prevent adding invalid references Prevent adding references for local, argument… |
CVE-2026-97451 | High | 8.4 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) Add overflow check for… |
CVE-2026-97450 | High | 8.4 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate handler object type in two places ACPICA: validate handler object type i… |
CVE-2026-97449 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add package limit checks in parser functions Add package limit checks in parser f… | |
CVE-2026-97448 | High | 7.7 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add validation for node in acpi_ns_build_normalized_path() Add validation for nod… |
CVE-2026-97447 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() Enhance OEM ID… | |
CVE-2026-97446 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() acpi_ns_custom_package()… | |
CVE-2026-97445 | High | 7.7 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() Enhance buffer validati… |
CVE-2026-97444 | High | 7.7 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in two places Add boundary checks in acpi_ps_get_next_namestr… |
CVE-2026-97443 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: perf/ftrace: Fix WARNING in __unregister_ftrace_function perf_ftrace_function_unregister(… | |
CVE-2026-97442 | High | 8.8 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi In certain cases, h… |
CVE-2026-97441 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ata: ahci: fail probe if BAR too small for claimed ports When an AHCI controller is disab… | |
CVE-2026-97440 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtr_send_resume_tx() call… | |
CVE-2026-97439 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib [BUG] A corrupted ntfs3 im… | |
CVE-2026-97438 | High | 7.1 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate index entry key bounds [BUG] A malformed NTFS directory index entry ca… |
CVE-2026-97437 | High | 7.1 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e() The bounds check in ntf… |
CVE-2026-97436 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: rework FDB management on the bridge leave path On bridge leave, the dpaa2_s… | |
CVE-2026-97435 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: flower: reject cross-chip redirect dsa_port_from_netdev() may return a… | |
CVE-2026-97434 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix handling of NAPI on the remove path All the NAPI instances for a DPSW d… | |
CVE-2026-97433 | High | 8.2 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking… |
CVE-2026-97432 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix P2P-Device binding handling Our binding handling for P2P-Device c… | |
CVE-2026-97431 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid DPMS-on for phantom stream [Why & How] Calling dc_update_planes_an… | |
CVE-2026-97430 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: xhci: Prevent queuing new commands if xhci is inaccessible Refuse to queue a new command… | |
CVE-2026-97429 | High | 7.8 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix UAF race in destroy_queue_cpsch wait_on_destroy_queue() drops locks to wa… |
CVE-2026-97428 | High | 7.7 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: harden FRU PIA parsing with bounded helpers Replace the open-coded TLV walk w… |
CVE-2026-97427 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: bound pp_dpm_set_pp_table() memcpy The powerplay path allocates hardcode_pp_t… | |
CVE-2026-97426 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error Return the pars… | |
CVE-2026-97425 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix buffer overflow during vBIOS update Clamp the buffer postion to write by… | |
CVE-2026-97424 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq cp_ecc_error_irq… | |
CVE-2026-97423 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access construct_region() reads cxled->… | |
CVE-2026-97422 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix SMI event cross-process information leak kfd_smi_ev_enabled() skips the s… | |
CVE-2026-97421 | High | 7.8 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() Several corne… |
CVE-2026-97420 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: bpf: NUL-terminate replaced sysctl value When writing to sysctls, proc_sys_call_handler()… | |
CVE-2026-97419 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: hsr: broadcast netlink notifications in the device's net namespace The HSR generic netlin… | |
CVE-2026-97418 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ALSA: es18xx: check control allocation before private data setup snd_es18xx_mixer() creat… | |
CVE-2026-97417 | High | 7.5 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() The timestamp-only fast p… |
CVE-2026-97416 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() [BUG] Run… | |
CVE-2026-97415 | High | 7.8 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF ROOT_REF and ROOT_BACKRE… |
CVE-2026-97414 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspe… | |
CVE-2026-97413 | Critical | 9.8 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write usr_len is read fr… |
CVE-2026-97412 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: pds_core: quiesce DMA before freeing resources pdsc_teardown() frees DMA buffers but does… | |
CVE-2026-97411 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in mal_remove() napi_disable() is not idem… | |
CVE-2026-97410 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: netconsole: take target_cleanup_list_lock in drop_netconsole_target() drop_netconsole_tar… | |
CVE-2026-97409 | High | 8.8 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: nvme-fc: Do not cancel requests in io target before it is initialized A new nvme-fc contr… |
CVE-2026-97408 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate connectionless PSM length Connectionless L2CAP frames carry a… | |
CVE-2026-97407 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt rockchip_pdm_s… | |
CVE-2026-93830 | High | 7.5 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask Enabling the RX Buffer Una… |
CVE-2026-93829 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix races in cifsd thread creation The cifsd demultiplex thread can run and… | |
CVE-2026-93828 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix handling of damaged volume in exfat_create_upcase_table() When the size of the… | |
CVE-2026-93827 | High | 8.4 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: virtio-fs: avoid double-free on failed queue setup virtio_fs_setup_vqs() allocates fs->vq… |
CVE-2026-93826 | High | 7.5 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: HID: hidpp: fix potential UAF in hidpp_connect_event() If input_register_device() fails… |
CVE-2026-93825 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() Prevent NULL p… | |
CVE-2026-93824 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: tls: reject the combination of TLS and sockmap TLS and sockmap (BPF psock) integration hi… | |
CVE-2026-93823 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl amdkfd driv… | |
CVE-2026-93822 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: PCI: iproc: Protect root bus removal with rescan lock Hold the pci_rescan_remove_lock loc… | |
CVE-2026-93821 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Protect root bus removal with rescan lock Hold the pci_rescan_remove_lock lo… | |
CVE-2026-93820 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: PCI: rockchip: Protect root bus removal with rescan lock Hold the pci_rescan_remove_lock… | |
CVE-2026-93819 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Protect root bus removal with rescan lock Hold the pci_rescan_remove_lock… | |
CVE-2026-93818 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Protect root bus removal with rescan lock Hold the pci_rescan_remove_lock lock… | |
CVE-2026-93817 | High | 7.8 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix addr_filter_ranges lifetime Lee Jia Jie reported that since event::addr_filter_… |
CVE-2026-93816 | High | 7.1 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: f2fs: validate inline dentry name lengths before conversion Inline dentry conversion copi… |
CVE-2026-93815 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: net: au1000: move free_irq out of the close-time spinlocked section au1000_close() calls… | |
CVE-2026-93814 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: spi: core: Abort active target transfer on controller suspend When an SPI controller oper… | |
CVE-2026-93813 | High | 7.8 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: btrfs: tree-checker: validate INODE_REF's namelen [BUG] A crafted btrfs image can trigger… |
CVE-2026-93812 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr ndr_encode_v4_ntacl() alloca… | |
CVE-2026-93811 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling 1. When ndr_decode_v… | |
CVE-2026-93810 | High | 7.0 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix double fput Fix a double fput() in error handling in cachefiles_create_tm… |
CVE-2026-93809 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: flush pending RCU callbacks on module unload Call rcu_barrier() in module exi… | |
CVE-2026-93808 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: caiaq: validate EP1 reply lengths usb_ep1_command_reply_dispatch() uses… | |
CVE-2026-93807 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers rsi_hal_load_key() copies tx_… | |
CVE-2026-93806 | High | 8.8 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate assoc response length before status and IE access cfg80211_rx_as… |
CVE-2026-93805 | | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate rx/tx MLME callback frame lengths before access cfg80211_rx_mlme… |