Linux
Page 82 of 100 — Linux CVEs from a corpus of 24866, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-23036 | | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before iget_failed() in btrfs_read_locked_inode() In btrfs_read_locke… | |
CVE-2026-23035 | | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv mlx5e_priv is an unstable… | |
CVE-2026-23034 | | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: Fix fence reference leak on queue teardown v2 The user mode queue keeps… | |
CVE-2026-23033 | | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: omap-dma: fix dma_pool resource leak in error paths The dma_pool created by dm… | |
CVE-2026-23032 | | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: null_blk: fix kmemleak by releasing references to fault configfs items When CONFIG_BLK_DE… | |
CVE-2026-23031 | | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak In gs_can_open(), the UR… | |
CVE-2026-23030 | | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() The for_each_… | |
CVE-2026-23029 | | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() In kvm_ioctl_create_device()… | |
CVE-2026-23028 | | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() In kvm_ioctl_create_device(), kv… | |
CVE-2026-23027 | | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() In kvm_ioctl_create_device()… | |
CVE-2026-23026 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() Fix a memory leak in gpi… |
CVE-2026-23025 | High | 7.8 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: prevent pcp corruption with SMP=n The kernel test robot has reported: BU… |
CVE-2026-23024 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leak of flow steer list on rmmod The flow steering list maintains entrie… |
CVE-2026-23023 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leak in idpf_vport_rel() Free vport->rx_ptype_lkup in idpf_vport_rel() t… |
CVE-2026-23022 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leak in idpf_vc_core_deinit() Make sure to free hw->lan_regs. Reported b… |
CVE-2026-23021 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: fix memory leak in update_eth_regs_async() When asynchronously writing… |
CVE-2026-23020 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: net: 3com: 3c59x: fix possible null dereference in vortex_probe1() pdev can be null and f… |
CVE-2026-23019 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix NULL dereference on devlink_alloc() failure devlink_alloc() m… |
CVE-2026-23018 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before initializing extent tree in btrfs_read_locked_inode() In btrfs… |
CVE-2026-23017 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix error handling in the init_task on load If the init_task fails during a driver… |
CVE-2026-23016 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: inet: frags: drop fraglist conntrack references Jakub added a warning in nf_conntrack_cle… |
CVE-2026-23015 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: fix reference leak in gpio_mpsse_probe() error paths The reference obtained… |
CVE-2025-71191 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: at_hdmac: fix device leak on of_dma_xlate() Make sure to drop the reference ta… |
CVE-2025-71190 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: bcm-sba-raid: fix device leak on probe Make sure to drop the reference taken w… |
CVE-2025-71189 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw: dmamux: fix OF node leak on route allocation failure Make sure to drop the… |
CVE-2025-71188 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: lpc18xx-dmamux: fix device leak on route allocation Make sure to drop the refe… |
CVE-2025-71187 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: fix device leak on probe failure Make sure to drop the reference… |
CVE-2025-71186 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: stm32: dmamux: fix device leak on route allocation Make sure to drop the refer… |
CVE-2025-71185 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation Make sure to drop… |
CVE-2025-71184 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix NULL dereference on root when tracing inode eviction When evicting an inode th… |
CVE-2025-71183 | Critical | 9.1 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging (… |
CVE-2025-71182 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: can: j1939: make j1939_session_activate() fail if device is no longer registered syzbot i… |
CVE-2025-71181 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: rust_binder: remove spin_lock() in rust_shrink_free_page() When forward-porting Rust Bind… |
CVE-2025-71180 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: counter: interrupt-cnt: Drop IRQF_NO_THREAD flag An IRQ handler can either be IRQF_NO_THR… |
CVE-2026-24687 | Medium | 6.5 | 2026-01-29 | Umbraco Forms is a form builder that integrates with the Umbraco content management system. It's possible for an authenticated backoffice-user to enumerate and… |
CVE-2026-23014 | High | 7.8 | 2026-01-28 | In the Linux kernel, the following vulnerability has been resolved: perf: Ensure swevent hrtimer is properly destroyed With the change to hrtimer_try_to_canc… |
CVE-2026-23013 | High | 7.0 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback octep_vf_request_irqs() r… |
CVE-2026-23012 | High | 7.8 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: remove call_control in inactive contexts If damon_call() is executed again… |
CVE-2026-23011 | Medium | 5.5 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: ipv4: ip_gre: make ipgre_header() robust Analog to commit db5b4e39c4e6 ("ip6_gre: make ip… |
CVE-2026-23010 | High | 7.8 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix use-after-free in inet6_addr_del(). syzbot reported use-after-free of inet6_ifa… |
CVE-2026-23009 | Medium | 5.5 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: don't dereference freed ring when removing sideband endpoint xhci_sideban… |
CVE-2026-23008 | Medium | 5.5 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix KMS with 3D on HW version 10 HW version 10 does not have GB Surfaces so t… |
CVE-2026-23007 | Medium | 5.5 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: block: zero non-PI portion of auto integrity buffer The auto-generated integrity buffer f… |
CVE-2026-23006 | Medium | 5.5 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: ASoC: tlv320adcx140: fix null pointer The "snd_soc_component" in "adcx140_priv" was only… |
CVE-2026-23005 | Medium | 5.5 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 When loading guest XSA… |
CVE-2026-23004 | High | 7.8 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() syzbot was able to c… |
CVE-2026-23003 | High | 7.5 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() Blamed commit did not take car… |
CVE-2026-23002 | Medium | 5.5 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: lib/buildid: use __kernel_read() for sleepable context Prevent a "BUG: unable to handle k… |
CVE-2026-23001 | High | 7.8 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: macvlan: fix possible UAF in macvlan_forward_source() Add RCU protection on (struct macvl… |
CVE-2026-23000 | Medium | 5.5 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash on profile change rollback failure mlx5e_netdev_change_profile can f… |
CVE-2026-22999 | High | 7.8 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: do not free existing class in qfq_change_class() Fixes qfq_change_cla… |
CVE-2026-22998 | High | 7.5 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec Commit efa56305908b… |
CVE-2026-22997 | High | 7.5 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the… |
CVE-2026-22996 | Medium | 5.5 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv mlx5e_priv is an unstable str… |
CVE-2025-71163 | Medium | 5.5 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix device leaks on compat bind and unbind Make sure to drop the referen… |
CVE-2025-71162 | High | 7.8 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra-adma: Fix use-after-free A use-after-free bug exists in the Tegra ADMA d… |
CVE-2026-22995 | High | 7.8 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: ublk: fix use-after-free in ublk_partition_scan_work A race condition exists between the… |
CVE-2026-22994 | Medium | 5.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix reference count leak in bpf_prog_test_run_xdp() syzbot is reporting unregiste… |
CVE-2026-22993 | Medium | 5.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL ptr issue after soft reset During soft reset, the RSS LUT is freed… |
CVE-2026-22992 | High | 7.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: libceph: return the handler error from mon_handle_auth_done() Currently any error from ce… |
CVE-2026-22991 | High | 7.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: libceph: make free_choose_arg_map() resilient to partial allocation free_choose_arg_map()… |
CVE-2026-22990 | High | 7.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() If the osdmap is (malic… |
CVE-2026-22989 | Medium | 5.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: nfsd: check that server is running in unlock_filesystem If we are trying to unlock the fi… |
CVE-2026-22988 | High | 7.8 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: arp: do not assume dev_hard_header() does not change skb->head arp_create() is the only d… |
CVE-2026-22987 | Medium | 5.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy syzbot reported a… |
CVE-2026-22986 | Medium | 4.7 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix race condition for gdev->srcu If two drivers were calling gpiochip_add_data_… |
CVE-2026-22985 | Medium | 5.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL pointer crash on early ethtool operations The RSS LUT is not initi… |
CVE-2026-22984 | Critical | 9.8 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in handle_auth_done() Perform an explicit… |
CVE-2026-22983 | Medium | 5.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: net: do not write to msg_get_inq in callee NULL pointer dereference fix. msg_get_inq is… |
CVE-2026-22982 | Medium | 5.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: Fix crash when adding interface under a lag Commit 15faa1f67ab4 ("lan9… |
CVE-2026-22981 | Medium | 5.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: idpf: detach and close netdevs while handling a reset Protect the reset path from callbac… |
CVE-2026-22980 | High | 7.8 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: nfsd: provide locking for v4_end_grace Writing to v4_end_grace can race with server shutd… |
CVE-2026-22979 | Medium | 5.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: net: fix memory leak in skb_segment_list for GRO packets When skb_segment_list() is calle… |
CVE-2026-22978 | Low | 3.3 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: wifi: avoid kernel-infoleak from struct iw_point struct iw_point has a 32bit hole on 64bi… |
CVE-2025-71161 | High | 7.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: dm-verity: disable recursive forward error correction There are two problems with the rec… |
CVE-2025-71160 | Medium | 5.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: avoid chain re-validation if possible Hamza Mahfooz reports cpu sof… |
CVE-2025-71159 | Critical | 9.8 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free warning in btrfs_get_or_create_delayed_node() Previously, btrfs… |
CVE-2025-71158 | High | 7.8 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: ensure worker is torn down When an IRQ worker is running, unplugging the dev… |
CVE-2025-71157 | High | 7.8 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: always drop device refcount in ib_del_sub_device_and_put() Since nldev_deldev(… |
CVE-2025-71156 | High | 7.8 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: gve: defer interrupt enabling until NAPI registration Currently, interrupts are automatic… |
CVE-2025-71155 | High | 7.8 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix gmap_helper_zap_one_page() again A few checks were missing in gmap_helper_… |
CVE-2025-71154 | Medium | 5.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix memory leak on usb_submit_urb() failure In async_set_registers()… |
CVE-2025-71153 | Medium | 5.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix memory leak in get_file_all_info() In get_file_all_info(), if vfs_getattr() fa… |
CVE-2025-71152 | High | 7.8 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: properly keep track of conduit reference Problem description ------------------… |
CVE-2025-71151 | Medium | 5.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix memory and information leak in smb3_reconfigure() In smb3_reconfigure(), if smb… |
CVE-2025-71150 | High | 7.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix refcount leak when invalid session is found on session lookup When a session i… |
CVE-2025-71148 | Low | 3.3 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure handshake_req_submit() replaces sk->s… |
CVE-2025-71147 | Medium | 5.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix a memory leak in tpm2_load_cmd 'tpm2_load_cmd' allocates a tempoary bl… |
CVE-2025-71146 | High | 7.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix leaked ct in error paths There are some situations where ct… |
CVE-2025-71145 | High | 7.8 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: usb: phy: isp1301: fix non-OF device reference imbalance A recent change fixing a device… |
CVE-2026-22977 | Medium | 5.5 | 2026-01-21 | In the Linux kernel, the following vulnerability has been resolved: net: sock: fix hardened usercopy panic in sock_recv_errqueue skbuff_fclone_cache was crea… |
CVE-2026-22976 | Medium | 5.5 | 2026-01-21 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset `qfq… |
CVE-2025-33230 | High | 7.3 | 2026-01-20 | NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious… |
CVE-2026-0908 | High | 8.8 | 2026-01-20 | Use after free in ANGLE in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2026-0907 | Critical | 9.8 | 2026-01-20 | Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium… |
CVE-2026-0906 | Critical | 9.8 | 2026-01-20 | Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafte… |
CVE-2026-0905 | Critical | 9.8 | 2026-01-20 | Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a network log file to potentially obtain pote… |
CVE-2026-0904 | Medium | 5.4 | 2026-01-20 | Incorrect security UI in Digital Credentials in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform domain spoofing via a crafted HTML pa… |
CVE-2026-0903 | Medium | 5.4 | 2026-01-20 | Inappropriate implementation in Downloads in Google Chrome on Windows prior to 144.0.7559.59 allowed a remote attacker to bypass dangerous file type protection… |
CVE-2026-0902 | High | 8.8 | 2026-01-20 | Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML… |