Linux
Page 77 of 100 — Linux CVEs from a corpus of 24866, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-23351 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase Yiming Qian reports Use… |
CVE-2026-23350 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/queue: Call fini on exec queue creation fail Every call to queue init should have… |
CVE-2026-23349 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix condition effect bit clearing As reported by MPDarkGuy on discord, NULL p… |
CVE-2026-23348 | Medium | 4.7 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: cxl: Fix race of nvdimm_bus object when creating nvdimm objects Found issue during runnin… |
CVE-2026-23347 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: can: usb: f81604: correctly anchor the urb in the read bulk callback When submitting an u… |
CVE-2026-23346 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: arm64: io: Extract user memory type in ioremap_prot() The only caller of ioremap_prot() o… |
CVE-2026-23345 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: arm64: gcs: Do not set PTE_SHARED on GCS mappings if FEAT_LPA2 is enabled When FEAT_LPA2… |
CVE-2026-23344 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix use-after-free on error path In the error path of sev_tsm_init_locked()… |
CVE-2026-23343 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: xdp: produce a warning when calculated tailroom is negative Many ethernet drivers report… |
CVE-2026-23342 | Medium | 4.7 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix race in cpumap on PREEMPT_RT On PREEMPT_RT kernels, the per-CPU xdp_bulk_queue (… |
CVE-2026-23341 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix crash when destroying a suspended hardware context If userspace issues… |
CVE-2026-23340 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs When shrink… |
CVE-2026-23339 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: free skb on nci_transceive early error paths nci_transceive() takes ownership o… |
CVE-2026-23338 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings Userspace ca… |
CVE-2026-23337 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config() In pinconf… |
CVE-2026-23336 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() There is a use-after-free… |
CVE-2026-23335 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() struct irdma_create_ah_resp {… |
CVE-2026-23334 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: can: usb: f81604: handle short interrupt urb messages properly If an interrupt urb is rec… |
CVE-2026-23332 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: intel_pstate: Fix crash during turbo disable When the system is booted with kern… |
CVE-2026-23331 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: udp: Unhash auto-bound connected sk from 4-tuple hash table when disconnected. Let's say… |
CVE-2026-23330 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nci_close_device(), complete… |
CVE-2026-23329 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: libie: don't unroll if fwlog isn't supported The libie_fwlog_deinit() function can be cal… |
CVE-2026-23328 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix NULL pointer dereference of mgmt_chann mgmt_chann may be set to NULL i… |
CVE-2026-23327 | High | 7.1 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed… |
CVE-2026-23326 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: xsk: Fix fragment node deletion to prevent buffer leak After commit b692bf9a7543 ("xsk: G… |
CVE-2026-23325 | High | 7.1 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() Check frame… |
CVE-2026-23324 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: can: usb: etas_es58x: correctly anchor the urb in the read bulk callback When submitting… |
CVE-2026-23323 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (macsmc) Fix regressions in Apple Silicon SMC hwmon driver The recently added macs… |
CVE-2026-23322 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix use-after-free and list corruption on sender error The analysis from Breno: Wh… |
CVE-2026-23321 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: in-kernel: always mark signal+subflow endp as used Syzkaller managed to find a… |
CVE-2026-23319 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim The root cause of this bug is tha… |
CVE-2026-23318 | High | 7.1 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Use correct version for UAC3 header validation The entry of the validato… |
CVE-2026-23317 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Return the correct value in vmw_translate_ptr functions Before the referenced… |
CVE-2026-23316 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix ARM64 alignment fault in multipath hash seed `struct sysctl_fib_multipath_… |
CVE-2026-23315 | High | 7.1 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() Check frame le… |
CVE-2026-23314 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: regulator: bq257xx: Fix device node reference leak in bq257xx_reg_dt_parse_gpio() In bq25… |
CVE-2026-23313 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: i40e: Fix preempt count leak in napi poll tracepoint Using get_cpu() in the tracepoint as… |
CVE-2026-23312 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: usb: kaweth: validate USB endpoints The kaweth driver should validate that the devic… |
CVE-2026-23311 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix invalid wait context in ctx_sched_in() Lockdep found a bug in the event sc… |
CVE-2026-23310 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded bond_option_mo… |
CVE-2026-23309 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: tracing: Add NULL pointer check to trigger_data_free() If trigger_data_alloc() fails and… |
CVE-2026-23308 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: equilibrium: fix warning trace on load The callback functions 'eqbr_irq_mask()'… |
CVE-2026-23307 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message When loo… |
CVE-2026-23306 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free in pm8001_queue_command() Commit e29c47fe8946 ("scsi: pm… |
CVE-2026-23305 | High | 7.1 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix unwinding in error path in rocket_probe When rocket_core_init() fails (… |
CVE-2026-23304 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() l3mdev_master_dev_rcu() can return N… |
CVE-2026-23303 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Don't log plaintext credentials in cifs_set_cifscreds When debug logging is… |
CVE-2026-23302 | Medium | 4.7 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: annotate data-races around sk->sk_{data_ready,write_space} skmsg (and probably other… |
CVE-2026-23301 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Add allocation failure check for Entity name Currently find_sdca_entity_iot()… |
CVE-2026-23300 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop When a standalone I… |
CVE-2026-23299 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: purge error queues in socket destructors When TX timestamping is enabled via S… |
CVE-2026-23298 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: can: ucan: Fix infinite loop from zero-length messages If a broken ucan device gets a mes… |
CVE-2026-23297 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). syzbot reported memory leak of str… |
CVE-2026-23296 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix refcount leak for tagset_refcnt This leak will cause a hang when tearing… |
CVE-2026-23295 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix dead lock for suspend and resume When an application issues a query IO… |
CVE-2026-23294 | High | 7.0 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix race in devmap on PREEMPT_RT On PREEMPT_RT kernels, the per-CPU xdp_dev_bulk_que… |
CVE-2026-23293 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled When booting with the 'ipv6… |
CVE-2026-23292 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix recursive locking in __configfs_open_file() In flush_write_buffer, &p->… |
CVE-2026-23291 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: properly drop the usb interface reference on disconnect When the device is di… |
CVE-2026-23290 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: validate USB endpoints The pegasus driver should validate that the dev… |
CVE-2026-23289 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() Fix a user triggerable… |
CVE-2026-23288 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix out-of-bounds memset in command slot handling The remaining space in a… |
CVE-2026-23287 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: irqchip/sifive-plic: Fix frozen interrupt due to affinity setting PLIC ignores interrupt… |
CVE-2026-23286 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: atm: lec: fix null-ptr-deref in lec_arp_clear_vccs syzkaller reported a null-ptr-deref in… |
CVE-2026-23285 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: drbd: fix null-pointer dereference on local read error In drbd_request_endio(), READ_COMP… |
CVE-2026-23284 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()… |
CVE-2026-23283 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: regulator: fp9931: Fix PM runtime reference leak in fp9931_hwmon_read() In fp9931_hwmon_r… |
CVE-2026-23282 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix oops due to uninitialised var in smb2_unlink() If SMB2_open_init() or SM… |
CVE-2026-23281 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix use-after-free in lbs_free_adapter() The lbs_free_adapter() function… |
CVE-2026-23280 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Prevent ubuf size overflow The ubuf size calculation may overflow, resulti… |
CVE-2026-23279 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() In mesh_rx_csa_frame(… |
CVE-2026-4680 | High | 8.8 | 2026-03-24 | Use after free in FedCM in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page… |
CVE-2026-4679 | High | 8.8 | 2026-03-24 | Integer overflow in Fonts in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page… |
CVE-2026-4678 | High | 8.8 | 2026-03-24 | Use after free in WebGPU in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page… |
CVE-2026-4677 | High | 8.8 | 2026-03-24 | Inappropriate implementation in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory read via a craft… |
CVE-2026-4676 | High | 8.8 | 2026-03-24 | Use after free in Dawn in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chr… |
CVE-2026-4675 | High | 8.8 | 2026-03-24 | Heap buffer overflow in WebGL in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML pag… |
CVE-2026-4674 | High | 8.8 | 2026-03-24 | Out of bounds read in CSS in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (C… |
CVE-2026-4673 | High | 8.8 | 2026-03-24 | Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML… |
CVE-2019-25567 | Medium | 6.2 | 2026-03-21 | Valentina Studio 9.0.5 Linux contains a buffer overflow vulnerability in the Host field of the connection dialog that allows local attackers to crash the appli… |
CVE-2026-23278 | High | 7.8 | 2026-03-20 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always walk all pending catchall elements During transaction proces… |
CVE-2026-23277 | Medium | 5.5 | 2026-03-20 | In the Linux kernel, the following vulnerability has been resolved: net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit teql_ma… |
CVE-2026-23276 | Medium | 5.5 | 2026-03-20 | In the Linux kernel, the following vulnerability has been resolved: net: add xmit recursion limit to tunnel xmit functions Tunnel xmit functions (iptunnel_xm… |
CVE-2026-23275 | High | 7.8 | 2026-03-20 | In the Linux kernel, the following vulnerability has been resolved: io_uring: ensure ctx->rings is stable for task work flags manipulation If DEFER_TASKRUN |… |
CVE-2026-23274 | High | 7.8 | 2026-03-20 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels IDLETIMER revision 0 rul… |
CVE-2026-23273 | High | 7.8 | 2026-03-20 | In the Linux kernel, the following vulnerability has been resolved: macvlan: observe an RCU grace period in macvlan_common_newlink() error path valis reporte… |
CVE-2026-23272 | High | 7.8 | 2026-03-20 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally bump set->nelems before insertion In case that the… |
CVE-2026-23271 | High | 7.8 | 2026-03-20 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race Make sure that __per… |
CVE-2026-4464 | High | 8.8 | 2026-03-20 | Integer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
CVE-2026-4463 | High | 8.8 | 2026-03-20 | Heap buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
CVE-2026-4462 | High | 8.8 | 2026-03-20 | Out of bounds read in Blink in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page… |
CVE-2026-4461 | High | 8.8 | 2026-03-20 | Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2026-4460 | High | 8.8 | 2026-03-20 | Out of bounds read in Skia in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page… |
CVE-2026-4459 | High | 8.8 | 2026-03-20 | Out of bounds read and write in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafte… |
CVE-2026-4458 | High | 8.8 | 2026-03-20 | Use after free in Extensions in Google Chrome prior to 146.0.7680.153 allowed an attacker who convinced a user to install a malicious extension to potentially… |
CVE-2026-4457 | High | 8.8 | 2026-03-20 | Type Confusion in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2026-4456 | High | 8.8 | 2026-03-20 | Use after free in Digital Credentials API in Google Chrome prior to 146.0.7680.153 allowed a remote attacker who had compromised the renderer process to potent… |
CVE-2026-4455 | High | 8.8 | 2026-03-20 | Heap buffer overflow in PDFium in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file… |
CVE-2026-4454 | High | 8.8 | 2026-03-20 | Use after free in Network in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
CVE-2026-4451 | High | 8.8 | 2026-03-20 | Insufficient validation of untrusted input in Navigation in Google Chrome prior to 146.0.7680.153 allowed a remote attacker who had compromised the renderer pr… |