Linux
Page 72 of 100 — Linux CVEs from a corpus of 24865, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-31633 | Critical | 9.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix integer overflow in rxgk_verify_response() In rxgk_verify_response(), there's… |
CVE-2026-31632 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix leak of rxgk context in rxgk_verify_response() Fix rxgk_verify_response() to c… |
CVE-2026-31631 | High | 8.2 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() Fix rxgk_do_verify_authentic… |
CVE-2026-31630 | High | 7.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: proc: size address buffers for %pISpc output The AF_RXRPC procfs helpers format lo… |
CVE-2026-31629 | High | 8.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: add missing return after LLCP_CLOSED checks In nfc_llcp_recv_hdlc() and nfc_ll… |
CVE-2026-31628 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: x86/CPU: Fix FPDSS on Zen1 Zen1's hardware divider can leave, under certain circumstances… |
CVE-2026-31627 | High | 7.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: i2c: s3c24xx: check the size of the SMBUS message before using it The first byte of an i2… |
CVE-2026-31626 | High | 7.1 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() Initialize le_tmp64 to zero i… |
CVE-2026-31625 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix NULL pointer dereference in alps_raw_event() Commit ecfa6f34492c ("HID: Ad… |
CVE-2026-31624 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: HID: core: clamp report_size in s32ton() to avoid undefined shift s32ton() shifts by n-1… |
CVE-2026-31623 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() A malicious USB device cl… |
CVE-2026-31622 | High | 8.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: NFC: digital: Bounds check NFC-A cascade depth in SDD response handler The NFC-A anti-col… |
CVE-2026-31621 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: bnge: return after auxiliary_device_uninit() in error path When auxiliary_device_add() fa… |
CVE-2026-31620 | Medium | 4.6 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0 A malicious USB device with… |
CVE-2026-31619 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: ALSA: fireworks: bound device-supplied status before string array lookup The status field… |
CVE-2026-31618 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Much like commit 19f953e74356… |
CVE-2026-31617 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() The block_len read fro… |
CVE-2026-31616 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() A broken/bored/mean U… |
CVE-2026-31615 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: renesas_usb3: validate endpoint index in standard request handlers The GET_S… |
CVE-2026-31614 | High | 7.1 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix off-by-8 bounds check in check_wsl_eas() The bounds check uses (u8 *)ea… |
CVE-2026-31613 | High | 8.1 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB reads parsing symlink error response When a CREATE returns STATUS_ST… |
CVE-2026-31612 | High | 7.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate EaNameLength in smb2_get_ea() smb2_get_ea() reads ea_req->EaNameLength fr… |
CVE-2026-31611 | High | 8.6 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: require 3 sub-authorities before reading sub_auth[2] parse_dacl() compares each AC… |
CVE-2026-31610 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc The kernel ASN.1 BER… |
CVE-2026-31609 | Critical | 9.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() smbd_… |
CVE-2026-31608 | Critical | 9.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list… |
CVE-2026-31607 | Critical | 9.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in usbip_pack_ret_submit() When a USB/IP client receive… |
CVE-2026-31606 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_hid: don't call cdev_init while cdev in use When calling unbind, then bind… |
CVE-2026-31605 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Much like commit 19f953e74356 (… |
CVE-2026-31604 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix device leak on probe failure Driver core holds a reference to the USB in… |
CVE-2026-31603 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: staging: sm750fb: fix division by zero in ps_to_hz() ps_to_hz() is called from hw_sm750_c… |
CVE-2026-31602 | High | 7.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Limit PTP to a single page Commit 391e69143d0a increased CT_PTP_NUM from 1 t… |
CVE-2026-31601 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: vfio/xe: Reorganize the init to decouple migration from reset Attempting to issue reset o… |
CVE-2026-31600 | High | 7.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: arm64: mm: Handle invalid large leaf mappings correctly It has been possible for a long t… |
CVE-2026-31599 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections syzbot rep… |
CVE-2026-31598 | High | 7.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix possible deadlock between unlink and dio_end_io_write ocfs2_unlink takes orpha… |
CVE-2026-31597 | High | 7.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY filemap_fault() may drop t… |
CVE-2026-31596 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: handle invalid dinode in ocfs2_group_extend [BUG] kernel BUG at fs/ocfs2/resize.c… |
CVE-2026-31595 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup Disable the del… |
CVE-2026-31594 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown epf_ntb_epc_destroy() dup… |
CVE-2026-31593 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU Reject synch… |
CVE-2026-31592 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock Take and hold kvm… |
CVE-2026-31591 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish Lock all vCPUs whe… |
CVE-2026-31590 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION Drop the WARN in sev_… |
CVE-2026-31589 | Critical | 9.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: mm: call ->free_folio() directly in folio_unmap_invalidate() We can only call filemap_fre… |
CVE-2026-31588 | High | 8.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use scratch field in MMIO fragment to hold small write values When exiting to u… |
CVE-2026-31587 | High | 7.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm: move component registration to unmanaged version q6apm component regis… |
CVE-2026-31586 | High | 7.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() cgwb_release_workfn() calls c… |
CVE-2026-31585 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix nfeeds state corruption on start_streaming failure syzbot reported a me… |
CVE-2026-31584 | High | 7.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: fix use-after-free in encoder release path The fops_vcodec_relea… |
CVE-2026-31583 | High | 7.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: media: em28xx: fix use-after-free in em28xx_v4l2_open() em28xx_v4l2_open() reads dev->v4l… |
CVE-2026-31582 | High | 7.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (powerz) Fix use-after-free on USB disconnect After powerz_disconnect() frees the… |
CVE-2026-31581 | High | 7.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: fix use-after-free on disconnect In usb6fire_chip_abort(), the chip struct i… |
CVE-2026-31580 | High | 7.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: bcache: fix cached_dev.sb_bio use-after-free and crash In our production environment, we… |
CVE-2026-31579 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit wg_netn… |
CVE-2026-31578 | High | 7.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: media: as102: fix to not free memory after the device is registered in as102_usb_probe() … |
CVE-2026-31577 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map The DAT inode'… |
CVE-2026-31576 | High | 7.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: media: hackrf: fix to not free memory after the device is registered in hackrf_probe() In… |
CVE-2026-31575 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: mm/userfaultfd: fix hugetlb fault mutex hash calculation In mfill_atomic_hugetlb(), linea… |
CVE-2026-31574 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: clockevents: Add missing resets of the next_event_forced flag The prevention mechanism ag… |
CVE-2026-31573 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: Fix kernel panic due to __initconst misuse Fix a kernel panic when pr… |
CVE-2026-31572 | Medium | 4.7 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: i2c: designware: amdisp: Fix resume-probe race condition issue Identified resume-probe ra… |
CVE-2026-31571 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Unlink NV12 planes earlier unlink_nv12_plane() will clobber parts of the plane… |
CVE-2026-31570 | High | 8.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: can: gw: fix OOB heap access in cgw_csum_crc8_rel() cgw_csum_crc8_rel() correctly compute… |
CVE-2026-31569 | High | 7.3 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Handle the case that EIOINTC's coremap is empty EIOINTC's coremap in eioi… |
CVE-2026-31568 | High | 7.1 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: s390/mm: Add missing secure storage access fixups for donated memory There are special ca… |
CVE-2026-31567 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: PM: sleep: Drop spurious WARN_ON() from pm_restore_gfp_mask() Commit 35e4a69b2003f ("PM… |
CVE-2026-31566 | High | 7.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib amdgpu_amdkfd_submit_ib(… |
CVE-2026-31565 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix deadlock during netdev reset with active connections Resolve deadlock tha… |
CVE-2026-31564 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix base address calculation in kvm_eiointc_regs_access() In function kvm… |
CVE-2026-31563 | High | 7.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: net: macb: Use dev_consume_skb_any() to free TX SKBs The napi_consume_skb() function is n… |
CVE-2026-31562 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register The call to m… |
CVE-2026-31561 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask Commit in Fixes added the FRED… |
CVE-2026-31560 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-dw-dma: fix print error log when wait finish transaction If an error occurs, the… |
CVE-2026-31559 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing NULL checks for kstrdup() 1. Replace "of_find_node_by_path("/")" w… |
CVE-2026-31558 | High | 8.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust kvm_get_vcpu_by_cpuid() takes a… |
CVE-2026-31557 | High | 7.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: nvmet: move async event work off nvmet-wq For target nvmet_ctrl_free() flushes ctrl->asyn… |
CVE-2026-31556 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: xfs: scrub: unlock dquot before early return in quota scrub xchk_quota_item can return ea… |
CVE-2026-31555 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: futex: Clear stale exiting pointer in futex_lock_pi() retry path Fuzzying/stressing futex… |
CVE-2026-31554 | High | 7.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: futex: Require sys_futex_requeue() to have identical flags Nicholas reported that his LLM… |
CVE-2026-31553 | High | 8.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc() Using "(u64 __user *)hva +… |
CVE-2026-31552 | High | 7.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom Since ups… |
CVE-2026-31551 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. syzbot reported static… |
CVE-2026-31550 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: bcm: bcm2835-power: Increase ASB control timeout The bcm2835_asb_control() func… |
CVE-2026-31549 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: i2c: cp2615: fix serial string NULL-deref at probe The cp2615 driver uses the USB device… |
CVE-2026-31548 | High | 7.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down When the nl80211 socket th… |
CVE-2026-31547 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix missing runtime PM reference in ccs_mode_store ccs_mode_store() calls xe_gt_r… |
CVE-2026-31546 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix NULL deref in bond_debug_rlb_hash_show rlb_clear_slave intentionally ke… |
CVE-2026-31545 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: NFC: nxp-nci: allow GPIOs to sleep Allow the firmware and enable GPIOs to sleep. This fi… |
CVE-2026-31544 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix NULL dereference on notify error path Since commit b5daf93b809d1… |
CVE-2026-31543 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying When debug logging… |
CVE-2026-31542 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: x86/platform/uv: Handle deconfigured sockets When a socket is deconfigured, it's mapped t… |
CVE-2026-31541 | High | 7.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix trace_marker copy link list updates When the "copy_trace_marker" option is e… |
CVE-2026-31540 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Check set_default_submission() before deferencing When the i915 driver firmw… |
CVE-2026-31539 | High | 7.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available The logic off managi… |
CVE-2026-31538 | High | 7.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: smb: server: make use of smbdirect_socket.recv_io.credits.available The logic off managin… |
CVE-2026-31537 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: smb: server: make use of smbdirect_socket.send_io.bcredits It turns out that our code wil… |
CVE-2026-31536 | Critical | 9.8 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: smb: server: let send_done handle a completion without IB_SEND_SIGNALED With smbdirect_se… |
CVE-2026-31535 | Medium | 4.7 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: smb: client: make use of smbdirect_socket.recv_io.credits.available The logic off managin… |
CVE-2026-6921 | High | 8.3 | 2026-04-23 | Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Ch… |