Linux
Page 70 of 100 — Linux CVEs from a corpus of 24865, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-43017 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate mesh send advertising payload length mesh_send() currently boun… |
CVE-2026-43016 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). syzbo… |
CVE-2026-43015 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: macb: fix clk handling on PCI glue driver removal platform_device_unregister() may s… |
CVE-2026-43014 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: macb: properly unregister fixed rate clocks The additional resources allocated with… |
CVE-2026-43013 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: lag: Check for LAG device before creating debugfs __mlx5_lag_dev_add_mdev() may… |
CVE-2026-43012 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix switchdev mode rollback in case of failure If for some internal reason swit… |
CVE-2026-43011 | Critical | 9.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix potential double free of skb When alloc_skb fails in x25_queue_rx_frame it c… |
CVE-2026-43010 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable kprobe_multi programs at attach time kprobe.multi programs run in a… |
CVE-2026-43009 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix incorrect pruning due to atomic fetch precision tracking When backtrack_insn enc… |
CVE-2026-43008 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: gpio: qixis-fpga: Fix error handling for devm_regmap_init_mmio() devm_regmap_init_mmio()… |
CVE-2026-43007 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Handle DBC deactivation if the owner went away When a DBC is released, the de… |
CVE-2026-43006 | High | 7.1 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: reject zero-length fixed buffer import validate_fixed_range() admits buf_a… |
CVE-2026-43005 | High | 7.1 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (tps53679) Fix array access with zero-length block read i2c_smbus_read_block_data(… |
CVE-2026-43004 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: spi: stm32-ospi: Fix resource leak in remove() callback The remove() callback returned ea… |
CVE-2026-31785 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/xe_pagefault: Disallow writes to read-only VMAs The page fault handler should reje… |
CVE-2026-31784 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pxp: Clear restart flag in pxp_start after jumping back If we don't clear the flag… |
CVE-2026-31783 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callback aml_… |
CVE-2026-31782 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix potential bad container_of in intel_pmu_hw_config Auto counter reload may h… |
CVE-2026-31781 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/ioc32: stop speculation on the drm_compat_ioctl path The drm compat ioctl path takes… |
CVE-2026-31780 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation The variable valuesi… |
CVE-2026-31779 | High | 8.1 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() T… |
CVE-2026-31778 | High | 7.1 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix stack out-of-bounds read in init_card The loop creates a whitespace-stri… |
CVE-2026-31777 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Check the error for index mapping The ctxfi driver blindly assumed a proper… |
CVE-2026-31776 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix missing SPDIFI1 index handling SPDIF1 DAIO type isn't properly handled i… |
CVE-2026-31775 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization The recent refactoring of xfi… |
CVE-2026-31774 | High | 7.1 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() sqe->len is __u32 but gets… |
CVE-2026-31773 | High | 8.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The legacy res… |
CVE-2026-31772 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync hci_le_big_creat… |
CVE-2026-31771 | High | 8.1 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: move wake reason storage into validated event handlers hci_store_wa… |
CVE-2026-31770 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (occ) Fix division by zero in occ_show_power_1() In occ_show_power_1() case 1, the… |
CVE-2026-31769 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: gpib: fix use-after-free in IO ioctl handlers The IBRD, IBWRT, IBCMD, and IBWAIT ioctl ha… |
CVE-2026-31768 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() Add a DMA-safe buffer and use… |
CVE-2026-31767 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode Stop adjusting t… |
CVE-2026-31766 | High | 7.1 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate doorbell_offset in user queue creation amdgpu_userq_get_doorbell_ind… |
CVE-2026-31765 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB Currently, AMDGPU_VA_RESERVED_TRA… |
CVE-2026-31764 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer only The st_lsm6dsx… |
CVE-2026-31763 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Fix incorrect free_irq() variable The handler for the IRQ part of thi… |
CVE-2026-31762 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Fix irq resource leak The interrupt handler is setup but only a few l… |
CVE-2026-31761 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Move iio_device_register() to correct location iio_device_register()… |
CVE-2026-31760 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: gpib: lpvo_usb: fix memory leak on disconnect The driver iterates over the registered USB… |
CVE-2026-31759 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix double free in ulpi_register_interface() error path When device_register()… |
CVE-2026-31758 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Flush anchored URBs in usbtmc_release When calling usbtmc_release, pending a… |
CVE-2026-31757 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: Fix URB memory leak on submit failure When usb_submit_urb() fails in us… |
CVE-2026-31756 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() dwc2_gadget_exi… |
CVE-2026-31755 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: fix NULL pointer dereference in ep_queue When the gadget endpoint is… |
CVE-2026-31754 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: fix state inconsistency on gadget init failure When cdns3_gadget_star… |
CVE-2026-31753 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: auxdisplay: line-display: fix NULL dereference in linedisp_release linedisp_release() cur… |
CVE-2026-31752 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: bridge: br_nd_send: validate ND option lengths br_nd_send() walks ND options according to… |
CVE-2026-31751 | Medium | 4.7 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: comedi: dt2815: add hardware detection to prevent crash The dt2815 driver crashes when at… |
CVE-2026-31750 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: comedi: runflags cannot determine whether to reclaim chanlist syzbot reported a memory le… |
CVE-2026-31749 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: comedi: ni_atmio16d: Fix invalid clean-up after failed attach If the driver's COMEDI "att… |
CVE-2026-31748 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: comedi: me_daq: Fix potential overrun of firmware buffer `me2600_xilinx_download()` loads… |
CVE-2026-31747 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: comedi: me4000: Fix potential overrun of firmware buffer `me4000_xilinx_download()` loads… |
CVE-2026-31746 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix memory leak with CCA cards used as accelerator Tests showed that there i… |
CVE-2026-31745 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: reset: gpio: fix double free in reset_add_gpio_aux_device() error path When __auxiliary_d… |
CVE-2026-31744 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: PM: EM: Fix NULL pointer dereference when perf domain ID is not found dev_energymodel_nl_… |
CVE-2026-31743 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy Buffer size used in dma allocation… |
CVE-2026-31742 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: vt: discard stale unicode buffer on alt screen exit after resize When enter_alt_screen()… |
CVE-2026-31741 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: counter: rz-mtu3-cnt: prevent counter from being toggled multiple times Runtime PM counte… |
CVE-2026-31740 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member The counter driver c… |
CVE-2026-31739 | High | 8.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Add missing CRYPTO_ALG_ASYNC The tegra crypto driver failed to set the CR… |
CVE-2026-31738 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: vxlan: validate ND option lengths in vxlan_na_create vxlan_na_create() walks ND options a… |
CVE-2026-31737 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: ftgmac100: fix ring allocation unwind on open failure ftgmac100_alloc_rings() alloca… |
CVE-2026-31736 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled If the gmac0 is disabled… |
CVE-2026-31735 | High | 8.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: iommupt: Fix short gather if the unmap goes into a large mapping unmap has the odd behavi… |
CVE-2026-31734 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCU Since commit… |
CVE-2026-31733 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix stale direct dispatch state in ddsp_dsq_id @p->scx.ddsp_dsq_id can be left… |
CVE-2026-31732 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: gpio: Fix resource leaks on errors in gpiochip_add_data_with_key() Since commit aab5c6f20… |
CVE-2026-31731 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: thermal: core: Address thermal zone removal races with resume Since thermal_zone_pm_compl… |
CVE-2026-31730 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: possible double-free of cctx->remote_heap fastrpc_init_create_static_proce… |
CVE-2026-31729 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: validate connector number in ucsi_notify_common() The connector number… |
CVE-2026-31728 | Medium | 4.7 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop A race condition be… |
CVE-2026-31727 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo Commit ec35c1969650 ("usb… |
CVE-2026-31726 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: fix NULL pointer dereference during unbind race Commit b81ac4395bbe ("u… |
CVE-2026-31725 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ecm: Fix net_device lifecycle with device_move The net_device is allocated… |
CVE-2026-31724 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_eem: Fix net_device lifecycle with device_move The net_device is allocated… |
CVE-2026-31723 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_subset: Fix net_device lifecycle with device_move The net_device is alloca… |
CVE-2026-31722 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_rndis: Fix net_device lifecycle with device_move The net_device is allocat… |
CVE-2026-31721 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_hid: move list and spinlock inits from bind to alloc There was an issue wh… |
CVE-2026-31720 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_uac1_legacy: validate control request size f_audio_complete() copies req->… |
CVE-2026-31719 | High | 7.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: crypto: krb5enc - fix async decrypt skipping hash verification krb5enc_dispatch_decrypt()… |
CVE-2026-31718 | Critical | 9.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger When a durable file… |
CVE-2026-31717 | High | 8.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate owner of durable handle on reconnect Currently, ksmbd does not verify if… |
CVE-2026-31716 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate rec->used in journal-replay file record check check_file_record() vali… |
CVE-2026-31715 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() The xfstests… |
CVE-2026-31714 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid memory leak in f2fs_rename() syzbot reported a f2fs bug as below: BUG… |
CVE-2026-31713 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: fuse: abort on fatal signal during sync init When sync init is used and the server exits… |
CVE-2026-31712 | High | 8.3 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: require minimum ACE size in smb_check_perm_dacl() Both ACE-walk loops in smb_check… |
CVE-2026-31711 | High | 7.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: smb: server: fix active_num_conn leak on transport allocation failure Commit 77ffbcac4e56… |
CVE-2026-31710 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix dir separator in SMB1 UNIX mounts When calling cifs_mount_get_tcon() wit… |
CVE-2026-31709 | High | 8.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before rewriting it in cifsacl build_sec_desc() and… |
CVE-2026-31708 | High | 8.1 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path smb2_ioctl_query_info(… |
CVE-2026-31707 | High | 7.1 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate response sizes in ipc_validate_msg() ipc_validate_msg() computes the expe… |
CVE-2026-31706 | High | 8.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() smb_inherit_dacl() tru… |
CVE-2026-31705 | Critical | 9.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment smb2_get_ea() applies 4-byte… |
CVE-2026-31704 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: use check_add_overflow() to prevent u16 DACL size overflow set_posix_acl_entries_d… |
CVE-2026-31703 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: writeback: Fix use after free in inode_switch_wbs_work_fn() inode_switch_wbs_work_fn() ha… |
CVE-2026-31702 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() In f2fs_compress_write_en… |
CVE-2026-31701 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: take a reference on the USB device in create_card() The caiaq driver stores… |
CVE-2026-31700 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() In tpacket_snd(), when PA… |