2026 CVEs (page 122)
Page 122 of 462 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-64155 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix error path leaks in some WMI WOW calls Fix two instances where we used… |
CVE-2026-64154 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() In a6xx_gpu_init(), node is obtai… |
CVE-2026-64153 | High | 8.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN Commit "iommu: return… |
CVE-2026-64152 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: iommu: Handle unmap error when iommu_debug is enabled Sashiko noticed a latent bug where… |
CVE-2026-64151 | High | 8.4 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap Sashiko pointed out that the dr… |
CVE-2026-64150 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before re-enabling softirqs Quoting sashiko: In… |
CVE-2026-64149 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: dma-mapping: move dma_map_resource() sanity check into debug code dma_map_resource() uses… |
CVE-2026-64148 | High | 7.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: pds_core: fix error handling in pdsc_devcmd_wait Fix two cases where pdsc_devcmd_wait() r… |
CVE-2026-64147 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: pds_core: fix debugfs_lookup dentry leak and error handling debugfs_lookup() returns a de… |
CVE-2026-64146 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix metabuf leak in inode xattr initialization commit bb88e8da0025 ("erofs: use me… |
CVE-2026-64145 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix dma_buffer leak on bus acquire failure wilc_wlan_firmware_download()… |
CVE-2026-64144 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix urb->setup_packet leak in error paths The setup_packet of control u… |
CVE-2026-64143 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: uniwill-laptop: Do not enable the charging limit even when forced It seems… |
CVE-2026-64142 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: close durable scavenger races against m_fp_list lookups ksmbd_durable_scavenger()… |
CVE-2026-64141 | High | 7.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in compare_guid_key() session_fd_check() walks the pe… |
CVE-2026-64140 | High | 7.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in proc_show_files() When a SMB2 client opens a file… |
CVE-2026-64139 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow Commit 299f962c0b0… |
CVE-2026-64138 | High | 8.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate SID in parent security descriptor during ACL inheritance Introduce smb_va… |
CVE-2026-64137 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netlink CIFS_GENL_CMD_SWN_NOTIFY is the users… |
CVE-2026-64136 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Commit 96c4… |
CVE-2026-64135 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX adm1266_nvmem_re… |
CVE-2026-64134 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Don't setup bogus iov_iter for silencing At transition to the iov_iter for PCM… |
CVE-2026-64133 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access at reading cache find_control() to retrieve… |
CVE-2026-64132 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: refresh hdr pointer before ioam6_event() Reported by Sashiko: In ipv6_hop_io… |
CVE-2026-64131 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: mm/memory: fix spurious warning when unmapping device-private/exclusive pages Device priv… |
CVE-2026-64130 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free __GFP_… |
CVE-2026-64129 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page When check_stabl… |
CVE-2026-64128 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: drop ISO_END frames received without prior ISO_START ISO data PDUs carry… |
CVE-2026-64127 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer Commit 1c08108f30… |
CVE-2026-64126 | High | 7.3 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate Add Extended Advertising Data length MGMT_OP_ADD_EXT_ADV_DATA i… |
CVE-2026-64125 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: keep RBUF EEE/PM disabled Setting RBUF_EEE_EN | RBUF_PM_EN in RBUF_ENERGY_… |
CVE-2026-64124 | High | 8.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: net: devmem: reject dma-buf bind with non-page-aligned size or SG length net_devmem_bind_… |
CVE-2026-64123 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: net: hsr: defer node table free until after RCU readers HSR node-list and node-status gen… |
CVE-2026-64122 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover mlx5e_tx_reporter_time… |
CVE-2026-64121 | High | 7.1 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over num_tx_queues ifb_dev_init() allocates dp->tx_private… |
CVE-2026-64120 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix NULL pointer dereference in phy_reply_size In phy_prepare_data(), sever… |
CVE-2026-64119 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: l2tp: use list_del_rcu in l2tp_session_unhash An unprivileged local user can pin a host C… |
CVE-2026-64118 | High | 8.4 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: qed: fix double free in qed_cxt_tables_alloc() If one of the later PF or VF CID bitmap al… |
CVE-2026-64117 | High | 8.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb ieee80211_invoke_fast_rx(… |
CVE-2026-64116 | High | 7.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() Reported by Sashiko: The function… |
CVE-2026-64115 | High | 8.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix UAF when peer resets connection during handshake vmci_transport_recv_conn… |
CVE-2026-64114 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 raw_send_hdrinc() validates that the ca… |
CVE-2026-64113 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix use-after-free in VEPA multicast source pruning ixgbevf_clean_rx_irq() prune… |
CVE-2026-64112 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: rbd: eliminate a race in lock_dwork draining on unmap Given how rbd_lock_add_request() an… |
CVE-2026-64111 | High | 7.1 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: lsm: hold cred_guard_mutex for lsm_set_self_attr() Just as proc_pid_attr_write() already… |
CVE-2026-64110 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: igc: fix potential skb leak in igc_fpe_xmit_smd_frame() When igc_fpe_init_tx_descriptor()… |
CVE-2026-64109 | High | 8.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix UAF read of tail->len in unix_stream_data_wait() unix_stream_data_wait() doe… |
CVE-2026-64108 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix busy dentry used after unmounting Since commit 340cea84f691c ("cifs: open files… |
CVE-2026-64107 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put() In the pcm… |
CVE-2026-64106 | Critical | 9.0 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits Userspace ca… |
CVE-2026-64105 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Free private_irqs when init fails after allocation Companion to commit… |
CVE-2026-64104 | High | 8.7 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: virt: sev-guest: Explicitly leak pages in unknown state When set_memory_{encrypted,decryp… |
CVE-2026-64103 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: isci: Fix use-after-free in device removal path The ISCI completion tasklet is init… |
CVE-2026-64102 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before signed receive math A malicious connect… |
CVE-2026-64101 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: fwctl: pds: Validate RPC input size before parsing The fwctl core allocates the device-sp… |
CVE-2026-64100 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix shrinker deadlock With PROVE_LOCKING on an Snapdragon X1 and VM reclaim pres… |
CVE-2026-64099 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix use-after-free of CPU job query arrays on error path The CPU job ioctl's fai… |
CVE-2026-64098 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use uninterruptible resv lock for plane updates virtio_gpu_cursor_plane_updat… |
CVE-2026-64097 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate GPIO pin LUT table size before iterating [Why&How] The GPIO pin… |
CVE-2026-64096 | High | 8.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: fix use-after-free in orig_node RCU release batadv_mcast_purge_orig()… |
CVE-2026-64095 | High | 7.1 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid double decrement of bla.num_requests The bla.num_requests is incre… |
CVE-2026-64094 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface Without rtnl_lock h… |
CVE-2026-64093 | High | 8.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: directly shut down timer on cleanup batadv_tp_sender_cleanup() was… |
CVE-2026-64092 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown The receiver shutdo… |
CVE-2026-64091 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix TOCTOU race for reported vlans The local TT based TVLV is generated b… |
CVE-2026-64090 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid empty VLAN responses The commit 16116dac2339 ("batman-adv: prevent… |
CVE-2026-64089 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative last_changeset_len batadv_piv_tt::last_changeset_len len was… |
CVE-2026-64088 | High | 8.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative tt_buff_len batadv_orig_node::tt_buff_len was declared as s1… |
CVE-2026-64087 | | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) reject implausible blackbox record_count adm1266_nvmem_read_blackb… | |
CVE-2026-64086 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer adm1266_pmbus_blo… |
CVE-2026-64085 | | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer adm1266_pm… | |
CVE-2026-64084 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR adm1266_gpio_get_… |
CVE-2026-64083 | | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors adm1266_gp… | |
CVE-2026-64082 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: riscv: Fix register corruption from uninitialized cregs on error compat_riscv_gpr_set() c… |
CVE-2026-64081 | High | 8.4 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Validate framework notification message layout Framework notifications… |
CVE-2026-64080 | Critical | 9.3 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Snapshot notifier callbacks under lock Both notification handlers curr… |
CVE-2026-64079 | | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: allocate hook ops while under mutex arp/ip(6)t_register_table() add… | |
CVE-2026-64078 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: add and use xtables_unregister_table_exit Previous change added xtab… |
CVE-2026-64077 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: move to two-stage removal scheme Like previous patches for x_tables… |
CVE-2026-64076 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: eb_tables: close module init race sashiko reports for unrelated patch… |
CVE-2026-64075 | | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: fprobe: Fix unregister_fprobe() to wait for RCU grace period Commit 4346ba1604093 ("fprob… | |
CVE-2026-64074 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap statmount_mnt_idmap() w… |
CVE-2026-64073 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT On PREEMPT_RT, non-HARD i… |
CVE-2026-64072 | | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix bio leak on mapping failure The local bio is always NULL, so we'd leak the bio… | |
CVE-2026-64071 | | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix use-after-free in nvme_free_host_mem() nvme_free_host_mem() frees dev->hmb_… | |
CVE-2026-64070 | | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: powerpc/hv-gpci: fix preempt count leak in sysfs show paths Four sysfs show() callbacks i… | |
CVE-2026-64069 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix cancellation of a DIO and single read subrequests When the preparation of a ne… |
CVE-2026-64068 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding new subreqs Fix netfs_retry_read_subreques… |
CVE-2026-64067 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing barriers when accessing stream->subrequests locklessly The list of sub… |
CVE-2026-64066 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_to_pagecache() to pause on subreq failure Fix netfs_read_to_pagecac… |
CVE-2026-64065 | | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call The multiple runs of gener… | |
CVE-2026-64064 | | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone If a streaming… | |
CVE-2026-64063 | | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix streaming write being overwritten In order to avoid reading whilst writing, ne… | |
CVE-2026-64062 | | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential deadlock in write-through mode Fix netfs_advance_writethrough() to a… | |
CVE-2026-64061 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfs_read_gaps() Fix netfs_read_gaps() to release… |
CVE-2026-64060 | | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix leak of request in netfs_write_begin() error handling Fix netfs_write_begin()… | |
CVE-2026-64059 | | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio->private handling in netfs_perform_write() Under some circumstances, net… | |
CVE-2026-64058 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_folio() to wait on writeback Fix netfs_read_folio() to wait for an… |
CVE-2026-64057 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix the locking used by afs_get_link() The afs filesystem in the kernel doesn't do l… |
CVE-2026-64056 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port The SKB used to assemble packets from fragme… |