2026 CVEs (page 256)
Page 256 of 693 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-72382 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject undersized DACLs before parsing ACEs parse_dacl() limits the attacker-contr… |
CVE-2026-72381 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of fp->owner.name in durable handle owner check Two concurrent… |
CVE-2026-72380 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: xen/pvcalls: bound backend response req_id before indexing rsp[] pvcalls_front_event_hand… |
CVE-2026-72379 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid vfs_tmpfile() never checked… | |
CVE-2026-72378 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix error code in afs_extract_vl_addrs() The error codes on these paths are only set… |
CVE-2026-72377 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: afs: Remove setting of AS_RELEASE_ALWAYS for symlinks and mountpoints Regular AFS files c… | |
CVE-2026-72376 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix misplaced inc of net->cells_outstanding Fix net->cells_outstanding being increme… | |
CVE-2026-72375 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix reinitialisation of the inode, in particular ->lock_work It seems that initalisi… |
CVE-2026-72374 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem clie… |
CVE-2026-72373 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing NULL pointer check in afs_break_some_callbacks() Fix afs_break_some_call… |
CVE-2026-72372 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix lack of locking around modifications of net->cells_dyn_ino Fix the lack of locki… |
CVE-2026-72371 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix the volume AFS_VOLUME_RM_TREE is set on Fix afs_insert_volume_into_cell() to set… |
CVE-2026-72370 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: iomap: release pages on atomic dio size mismatch If bio_iov_iter_get_pages() or the bounc… | |
CVE-2026-72369 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: minix: avoid overflow in bitmap block count calculation minix_check_superblock() uses min… |
CVE-2026-72368 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix double unlock in nomem_d_alloc error path When start_creating() fails and… |
CVE-2026-72367 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: iomap: guard io_size EOF trim against concurrent truncate underflow iomap: fix zero paddi… |
CVE-2026-72366 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_create_write_req() to handle async cache object creation netfs_create_wr… |
CVE-2026-72365 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix writethrough to use collection offload Fix writethrough write to set NETFS_RRE… | |
CVE-2026-72364 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix writeback error handling Fix the error handling in writeback_iter() loop. If… |
CVE-2026-72363 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio state after ENOMEM whilst under writeback iteration Fix the state of the… | |
CVE-2026-72362 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry() The page-table walk fra… | |
CVE-2026-72361 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/hw_engine: Fix double-free of managed BO in error path The error path in hw_engine… | |
CVE-2026-72360 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays Currently defined VF/PF rela… |
CVE-2026-72359 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix NPD in bo_meminfo() When a buffer object is purged, its ttm.resource is set t… | |
CVE-2026-72358 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: prevent invalid cursor access for purged BOs During a page table walk for bind… |
CVE-2026-72357 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline In the unregister path we use… |
CVE-2026-72356 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifs_issue_read() Fix missing release of c… |
CVE-2026-72355 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix barriering when walking subrequest list Fix the barriering used when walking t… |
CVE-2026-72354 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid stale runlist element dereference in MFT writeback ntfs_write_mft_block() map… |
CVE-2026-72353 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid stale runlist element dereference in fallocate ntfs_attr_fallocate() allocate… |
CVE-2026-72352 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: HID: bpf: Fix hid_bpf_get_data() range check hid_bpf_get_data() returns a pointer into th… |
CVE-2026-72351 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote ch… |
CVE-2026-72350 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_u32: reject invalid shift counts u32_match_it() executes rule-supplied shif… |
CVE-2026-72349 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() On links faster than ~34 Gbp… | |
CVE-2026-72348 | Critical | 9.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop The ah, hbh and r… |
CVE-2026-72347 | High | 7.3 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_connmark: reject invalid shift parameters Revision 2 of the CONNMARK target… |
CVE-2026-72346 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume The dr… | |
CVE-2026-72345 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, Fix off-by-one in single-FDB error rollback On failure at index i, the rev… |
CVE-2026-72344 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable mlx5_lag_get_dev_seq()… |
CVE-2026-72343 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation mlx5e_hv_vhca_stats_create() is… |
CVE-2026-72342 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats agent registration race mlx5e_hv_vhca_stats_create() registe… |
CVE-2026-72341 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix publication race for priv->channel_stats[] mlx5e_channel_stats_alloc() pub… | |
CVE-2026-72340 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: fix races on the shared Super VCAP block The VCAP instances on a ch… |
CVE-2026-72339 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: qede: fix off-by-one in BD ring consumption on build_skb failure qede_rx_build_skb() and… |
CVE-2026-72338 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload There is a TOCTOU race cond… |
CVE-2026-72337 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: avoid untracked enable work lowpan_enable_set() allocates a temporary… | |
CVE-2026-72336 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: hold L2CAP conn across debugfs control get_l2cap_conn() looks up an L… | |
CVE-2026-72335 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix adv monitor add failure cleanup hci_add_adv_monitor() publishes a ne… |
CVE-2026-72334 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix malformed ISO_END/CONT handling Core specification (Part C vol 4 sec… |
CVE-2026-72333 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix tx ident leak for commands without a response Commit 6c3ea155e5ee (… | |
CVE-2026-72332 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Prevent PM resume deadlock in hwctx_sync_debug_bo() amdxdna_hwctx_sync_deb… | |
CVE-2026-72331 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix VMA access race aie2_populate_range() and amdxdna_umap_release() acces… |
CVE-2026-72330 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/tls: Consume empty data records in tls_sw_read_sock() A peer may send a zero-length T… |
CVE-2026-72329 | Critical | 9.3 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/liquidio: drop cached VF pci_dev LUT The PF SR-IOV enable path caches VF pci_dev poin… |
CVE-2026-72328 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix potential amdxdna_umap lifetime race amdxdna_umap_release() calls the… |
CVE-2026-72327 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Reject invalid indirect BO handle in indirect CSD setup v3d_get_cpu_indirect_csd… | |
CVE-2026-72326 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cake: reject overhead values that underflow length CAKE accepts signed overhea… | |
CVE-2026-72325 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Branch Sampling (BRS) and… | |
CVE-2026-72324 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: free generic chips on unbind irq_alloc_domain_generic_chips() allocates gene… | |
CVE-2026-72323 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() A race condition exists between de… |
CVE-2026-72322 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix potential UAF in MLD delayed work A race condition exists between device… |
CVE-2026-72321 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() When a t… | |
CVE-2026-72320 | Critical | 9.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_lookup: fix catchall element handling with inverted lookups nft_lookup_eva… |
CVE-2026-72319 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in headroom Sashiko points out that after s… |
CVE-2026-72318 | Critical | 9.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets parse_dfs_referrals() validates that the respo… |
CVE-2026-72317 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpc_clnt across the TLS connect_worker The TLS connect path has a use-a… |
CVE-2026-72316 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadata_open() metadata_open() returns NULL when… | |
CVE-2026-72315 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix busy dentry warning on unmount after DIO Commit c68337442f03 ("cifs: Fix… |
CVE-2026-72314 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK Compare again… |
CVE-2026-72313 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/fb-helper: Only consider active CRTCs for vblank sync Only synchronize fbdev output t… | |
CVE-2026-72312 | High | 7.9 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix VF bringup affecting PF promiscuous state Mbox handling of nix_set_rx_m… |
CVE-2026-72311 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: free madvise VMA array on L2 flush failure xe_vm_madvise_ioctl() allocates madvis… | |
CVE-2026-72310 | High | 8.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix overflow in passthrough ioctl bounds check smb2_ioctl_query_info() valid… |
CVE-2026-72309 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: tracing/remotes: Fix leak in trace_remote_alloc_buffer() error path If page allocation fa… | |
CVE-2026-72308 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() When mlxsw_sp_port_lag_index_get() f… | |
CVE-2026-72307 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() When mlxsw_sp_vrs_lpm_tree_re… | |
CVE-2026-72306 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter There is one race case in v… | |
CVE-2026-72305 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: VDUSE: avoid leaking information to userspace The bounceing is not necessarily page align… | |
CVE-2026-72304 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put In sof_ipc4_bytes_put(), the co… |
CVE-2026-72303 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-control: Validate notification payload size Validate MODULE_NOTIFICATION… |
CVE-2026-72302 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc In sof_ipc3_cont… |
CVE-2026-72301 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get In sof_ipc3_bytes_put(), t… |
CVE-2026-72300 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: topology: validate vendor array size before parsing sof_parse_token_sets() rea… | |
CVE-2026-72299 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tracepoints tipc_sk_enqueue() runs with sk->… |
CVE-2026-72298 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() qrtr_endpoint_post() valid… |
CVE-2026-72297 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: atm: reject out-of-range traffic classes in QoS validation Reject ATM traffic classe… |
CVE-2026-72296 | Critical | 9.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETH_HLEN to be pullable in ife_decode() ife decode may return after mak… |
CVE-2026-72295 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate irqchip index in irqfd routing Sashiko reported that the irqchip… |
CVE-2026-72294 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt() Function kvm_vcpu_ioctl_… |
CVE-2026-72293 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: Add missing radix_tree_preload() in _gaccess_shadow_fault() Add missing… | |
CVE-2026-72292 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Initialize KVM_S390_GET_CMMA_BITS memory kvm_s390_get_cmma_bits() allocates it… | |
CVE-2026-72291 | Critical | 9.3 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix unlikely race in try_get_locked_pte() Fix an unlikely race in try_get_lock… |
CVE-2026-72290 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix GISC refcount leak on AIF enable failure kvm_s390_gisc_register() reg… | |
CVE-2026-72289 | Critical | 9.3 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Check the interrupt is still ours before migrating it vgic_prune_ap_lis… |
CVE-2026-72288 | Critical | 9.3 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling Hyunwoo… |
CVE-2026-72287 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into "normal" checks Move the of… |
CVE-2026-72286 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs The intra-host migration… |
CVE-2026-72285 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: KVM: TDX: Reject concurrent change to CPUID entry count Reject KVM_TDX_INIT_VM if userspa… |
CVE-2026-72284 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore KVM's inter… |
CVE-2026-72283 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Nullify irqfd->producer if updating IRTE for bypass fails Nullify irqfd->produc… |