Linux
Page 73 of 100 — Linux CVEs from a corpus of 24866, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-6920 | Critical | 9.6 | 2026-04-23 | Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially… |
CVE-2026-6919 | Critical | 9.6 | 2026-04-23 | Use after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a… |
CVE-2026-31533 | Critical | 9.8 | 2026-04-23 | In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption The -EBUSY handling… |
CVE-2026-31532 | High | 7.8 | 2026-04-23 | In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro->uniq use-after-free in raw_rcv() raw_release() unregisters raw CAN rece… |
CVE-2026-31531 | Medium | 5.5 | 2026-04-23 | In the Linux kernel, the following vulnerability has been resolved: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() When querying a nexthop obje… |
CVE-2026-31530 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: cxl/port: Fix use after free of parent_port in cxl_detach_ep() cxl_detach_ep() is called… |
CVE-2026-31529 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix leakage in __construct_region() Failing the first sysfs_update_group() ne… |
CVE-2026-31528 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: perf: Make sure to use pmu_ctx->pmu for groups Oliver reported that x86_pmu_del() ended u… |
CVE-2026-31527 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: driver core: platform: use generic driver_override infrastructure When a driver is probed… |
CVE-2026-31526 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix exception exit lock checking for subprogs process_bpf_exit_full() passes check_l… |
CVE-2026-31525 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN The BPF interpreter's si… |
CVE-2026-31524 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: HID: asus: avoid memory leak in asus_report_fixup() The asus_report_fixup() function was… |
CVE-2026-31523 | Medium | 4.7 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: nvme-pci: ensure we're polling a polled queue A user can change the polled queue count at… |
CVE-2026-31522 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: avoid memory leak in magicmouse_report_fixup() The magicmouse_report_fix… |
CVE-2026-31521 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: module: Fix kernel panic when a symbol st_shndx is out of bounds The module loader doesn'… |
CVE-2026-31520 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: HID: apple: avoid memory leak in apple_report_fixup() The apple_report_fixup() function w… |
CVE-2026-31519 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create We have recently observed a num… |
CVE-2026-31518 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: esp: fix skb leak with espintcp and async crypto When the TX queue for espintcp is full… |
CVE-2026-31517 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix skb_put() panic on non-linear skb during reassembly In iptfs_reassem_con… |
CVE-2026-31516 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: xfrm: prevent policy_hthresh.work from racing with netns teardown A XFRM_MSG_NEWSPDINFO r… |
CVE-2026-31515 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: af_key: validate families in pfkey_send_migrate() syzbot was able to trigger a crash in s… |
CVE-2026-31514 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: erofs: set fileio bio failed in short read case For file-backed mount, IO requests are ha… |
CVE-2026-31513 | High | 8.1 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req Syzbot reported a… |
CVE-2026-31512 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() … |
CVE-2026-31511 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete This fixe… |
CVE-2026-31510 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb Before using sk pointer, chec… |
CVE-2026-31509 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix circular locking dependency in nci_close_device nci_close_device() flushes… |
CVE-2026-31508 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Avoid releasing netdev before teardown completes The patch cited in the… |
CVE-2026-31507 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer smc_rx_… |
CVE-2026-31506 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix double free of WoL irq We do not need to free wol_irq since it was insta… |
CVE-2026-31505 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() iavf incorrectly uses real_num… |
CVE-2026-31504 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: net: fix fanout UAF in packet_release() via NETDEV_UP race `packet_release()` has a race… |
CVE-2026-31503 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: udp: Fix wildcard bind conflict check when using hash2 When binding a udp_sock to a local… |
CVE-2026-31502 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: team: fix header_ops type confusion with non-Ethernet ports Similar to commit 950803f7254… |
CVE-2026-31501 | Critical | 9.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path cppi5_hdesc_get_p… |
CVE-2026-31500 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock btintel_hw_error(… |
CVE-2026-31499 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() l2cap_conn_del() calls cancel_delayed_… |
CVE-2026-31498 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop l2cap_config_req() proc… |
CVE-2026-31497 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: clamp SCO altsetting table indices btusb_work() maps the number of acti… |
CVE-2026-31496 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: skip expectations in other netns via proc Skip expectatio… |
CVE-2026-31495 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use netlink policy range checks Replace manual range and mask valid… |
CVE-2026-31494 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: net: macb: use the current queue number for stats There's a potential mismatch between th… |
CVE-2026-31493 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix use of completion ctx after free On admin queue completion handling, if the… |
CVE-2026-31492 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Initialize free_qp completion before using it In irdma_create_qp, if ib_copy_… |
CVE-2026-31491 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Harden depth calculation functions An issue was exposed where OS can pass in… |
CVE-2026-31490 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix use-after-free in migration restore When an error is returned from xe_srio… |
CVE-2026-31489 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: spi: meson-spicc: Fix double-put in remove path meson_spicc_probe() registers the control… |
CVE-2026-31488 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode changes in DSC validation Starting with commi… |
CVE-2026-31487 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: spi: use generic driver_override infrastructure When a driver is probed through __driver_… |
CVE-2026-31486 | High | 7.1 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/core) Protect regulator operations with mutex The regulator operations pmbu… |
CVE-2026-31485 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-lpspi: fix teardown order issue (UAF) There is a teardown order issue in the… |
CVE-2026-31484 | High | 7.1 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: io_uring/fdinfo: fix OOB read in SQE_MIXED wrap check __io_uring_show_fdinfo() iterates o… |
CVE-2026-31483 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: s390/syscalls: Add spectre boundary for syscall dispatch table The s390 syscall number is… |
CVE-2026-31482 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: s390/entry: Scrub r12 register on kernel entry Before commit f33f2d4c7c80 ("s390/bp: remo… |
CVE-2026-31481 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: tracing: Drain deferred trigger frees if kthread creation fails Boot-time trigger registr… |
CVE-2026-31480 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix potential deadlock in cpu hotplug with osnoise The following sequence may le… |
CVE-2026-31479 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: always keep track of remap prev/next During 3D workload, user is reporting hittin… |
CVE-2026-31478 | Critical | 9.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() After th… |
CVE-2026-31477 | High | 7.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leaks and NULL deref in smb2_lock() smb2_lock() has three error handlin… |
CVE-2026-31476 | High | 8.2 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: do not expire session on binding failure When a multichannel session binding reque… |
CVE-2026-31475 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: ASoC: sma1307: fix double free of devm_kzalloc() memory A previous change added NULL chec… |
CVE-2026-31474 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() isotp_sendmsg() uses only cmpxch… |
CVE-2026-31473 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex MEDIA_REQUEST_IOC_REIN… |
CVE-2026-31472 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: validate inner IPv4 header length in IPTFS payload Add validation of the inn… |
CVE-2026-31471 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: only publish mode_data after clone setup iptfs_clone_state() stores x->mode_… |
CVE-2026-31470 | High | 7.1 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: virt: tdx-guest: Fix handling of host controlled 'quote' buffer length Validate host cont… |
CVE-2026-31469 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false … |
CVE-2026-31468 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Fix double free in dma-buf feature The error path through vfio_pci_core_feature… |
CVE-2026-31467 | High | 7.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: erofs: add GFP_NOIO in the bio completion if needed The bio completion path in the proces… |
CVE-2026-31466 | Medium | 4.7 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() On arm64 server, we found f… |
CVE-2026-31465 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SB_I_… |
CVE-2026-31464 | High | 8.1 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() A malicious or compromised… |
CVE-2026-31463 | Critical | 9.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: iomap: fix invalid folio access when i_blkbits differs from I/O granularity Commit aa35dd… |
CVE-2026-31462 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent immediate PASID reuse case PASID resue could cause interrupt issue wh… |
CVE-2026-31461 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix drm_edid leak in amdgpu_dm [WHAT] When a sink is connected, aconnect… |
CVE-2026-31460 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check if ext_caps is valid in BL setup LVDS connectors don't have extend… |
CVE-2026-31459 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx() failure Patch series "mm… |
CVE-2026-31458 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] Multiple sysfs comman… |
CVE-2026-31457 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: check contexts->nr in repeat_call_fn damon_sysfs_repeat_call_fn() calls d… |
CVE-2026-31456 | Medium | 4.7 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix race between concurrent split and refault The splitting of a PUD entry i… |
CVE-2026-31455 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: xfs: stop reclaim before pushing AIL during unmount The unmount sequence in xfs_unmount_f… |
CVE-2026-31454 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: xfs: save ailp before dropping the AIL lock in push callbacks In xfs_inode_item_push() an… |
CVE-2026-31453 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: xfs: avoid dereferencing log items after push callbacks After xfsaild_push_item() calls i… |
CVE-2026-31452 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: ext4: convert inline data to extents when truncate exceeds inline size Add a check in ext… |
CVE-2026-31451 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio Replace BUG_ON(… |
CVE-2026-31450 | High | 8.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: ext4: publish jinode after initialization ext4_inode_attach_jinode() publishes ei->jinode… |
CVE-2026-31449 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: ext4: validate p_idx bounds in ext4_ext_correct_indexes ext4_ext_correct_indexes() walks… |
CVE-2026-31448 | Critical | 9.4 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: ext4: avoid infinite loops caused by residual data On the mkdir/mknod path, when mapping… |
CVE-2026-31447 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: ext4: reject mount if bigalloc with s_first_data_block != 0 bigalloc with s_first_data_bl… |
CVE-2026-31446 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in update_super_work when racing with umount Commit b98535d09179… |
CVE-2026-31445 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid use of half-online-committed context One major usage of damon_call()… |
CVE-2026-31444 | Critical | 9.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() smb_grant_oplock() has two… |
CVE-2026-31443 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix crash when the event log is disabled If reporting errors to the even… |
CVE-2026-31442 | High | 7.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible invalid memory access after FLR In the case that the first… |
CVE-2026-31441 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix memory leak when a wq is reset idxd_wq_disable_cleanup() which is ca… |
CVE-2026-31440 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix leaking event log memory During the device remove process, the devic… |
CVE-2026-31439 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx: xdma: Fix regmap init error handling devm_regmap_init_mmio returns an… |
CVE-2026-31438 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators When a process crashe… |
CVE-2026-31437 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry When a write sub… |
CVE-2026-31436 | Critical | 9.8 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() At the en… |