2026 CVEs (page 258)
Page 258 of 696 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-72441 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ieee802154: fix kernel-infoleak in dgram_recvmsg() KMSAN reported a kernel-infoleak in mo… | |
CVE-2026-72440 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: md/raid1: fix writes_pending and barrier reference leaks on write failures raid1_make_req… |
CVE-2026-72439 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes_pending leak on write request failures raid10_make_request() acquir… | |
CVE-2026-72438 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes_pending and barrier reference leaks on discard failures raid10_make… |
CVE-2026-72437 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry When a read is… | |
CVE-2026-72436 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types Sashiko poin… |
CVE-2026-72435 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() Sashiko pointed out t… |
CVE-2026-72434 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: make sure gc is properly stopped Sashiko noticed that when destroying a… |
CVE-2026-72433 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak This needs to test for no… | |
CVE-2026-72432 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: tpm_crb: Check ACPI_COMPANION() against NULL during probe Every platform driver can be fo… | |
CVE-2026-72431 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: alloc_tag: fix use-after-free in /proc/allocinfo after module unload allocinfo_start() on… | |
CVE-2026-72430 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix nf_connlabels leak on two error paths tcf_ct_fill_params() calls n… | |
CVE-2026-72429 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix type confusion of dst_entry IOAM uses a dummy dst_entry(null_dst) to mark… |
CVE-2026-72428 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack slot index in nospec checks check_stack_write_fixed_off() computes the byt… | |
CVE-2026-72427 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix effective prog array index with BPF_F_PREORDER replace_effective_prog() and purg… |
CVE-2026-72426 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer spill metadata during half-slot cleanup __clean_func_state() cleans… |
CVE-2026-72425 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() Resetting all VFs causes reso… |
CVE-2026-72424 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: rtc: msc313: fix NULL deref in shared IRQ handler at probe msc313_rtc_probe() calls devm_… | |
CVE-2026-72423 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bpf: Guard conntrack opts error writes The conntrack lookup and allocation kfuncs take an… |
CVE-2026-72422 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE conn->preaut… |
CVE-2026-72421 | Critical | 10.0 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't ignore error route in local/main tables. When CONFIG_IP_MULTIPLE_TABLES… |
CVE-2026-72420 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5_Overlap races while breaking stripe batches KCSAN report a race in bre… |
CVE-2026-72419 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() We ran into… |
CVE-2026-72418 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: prevent connlimit drops for early confirmed ct Commit 69894e5b4c… |
CVE-2026-72417 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() Add sanity check fo… |
CVE-2026-72416 | High | 7.3 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_compat: ebtables emulation must reject non-bridge targets xtables targets… |
CVE-2026-72415 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Validate written enum value in ge_put_enum_double() ge_put_enum_double() pass… |
CVE-2026-72414 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pin_duration is converted from the us… | |
CVE-2026-72413 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix err_chunk memory leaks in INIT handling When sctp_verify_init() encounters unre… | |
CVE-2026-72412 | Critical | 9.3 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix handling of _PAGE_UNUSED pte bit The _PAGE_UNUSED softbit should not really… |
CVE-2026-72411 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work Upon an MDIO CRC erro… |
CVE-2026-72410 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Validate NIX maximum LFs correctly NIX maximum number of LFs can be set via… |
CVE-2026-72409 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: mvneta: re-enable percpu interrupt on resume On Marvell MPIC platforms (Armada 370/X… |
CVE-2026-72408 | Critical | 10.0 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint geneve_gro_receive() reads… |
CVE-2026-72407 | Critical | 10.0 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: geneve: validate inner network offset in geneve_gro_complete() Even with both paths gated… |
CVE-2026-72406 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: sungem: fix probe error cleanup gem_init_one() calls gem_remove_one() when register_… |
CVE-2026-72405 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync Yue Sun reported a… |
CVE-2026-72404 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() TIPC UDP media bea… |
CVE-2026-72403 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Fix NULL pointer dereference in interface lookup A malformed USB device can pr… | |
CVE-2026-72402 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mask pseudo pointer values in verifier logs print_bpf_insn() masks ldimm64 immediate… | |
CVE-2026-72401 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix insn_aux_data leak on verifier err_free_env path When bpf_check() allocates env-… | |
CVE-2026-72400 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: seg6: validate SRH length before reading fixed fields seg6_validate_srh() reads fixed SRH… |
CVE-2026-72399 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: enetc: check the number of BDs needed for xdp_frame The size of xdp_redirect_arr arr… |
CVE-2026-72398 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification after cookie unpacking In SCTP handshake, the INIT chunk is i… |
CVE-2026-72397 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid() pmbus_data2reg_vid() hardco… |
CVE-2026-72396 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: hwmon: adm1275: Prevent reading uninitialized stack While adding support for the ROHM BD1… | |
CVE-2026-72395 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus) Fix passing events to regulator core Sashiko reports: Commit 754bd2b4a084… |
CVE-2026-72394 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero Sashiko repo… | |
CVE-2026-72393 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: don't cache shinfo across skb realloc fbnic_tx_lso() calls skb_cow_head() whi… |
CVE-2026-72392 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump inet6_dump_fib() s… | |
CVE-2026-72391 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy sfp_i2c_mdiobus_create() allocates… | |
CVE-2026-72390 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF The teql maste… |
CVE-2026-72389 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bridge: stp: Fix a potential use-after-free when deleting a bridge The three STP timers a… |
CVE-2026-72388 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock Since dma_fenc… | |
CVE-2026-72387 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix potential invalid pointer deref in group_process_tiler_oom() If heaps is… | |
CVE-2026-72386 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced A group… | |
CVE-2026-72385 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: tracing/fprobe: Fix NULL pointer dereference in fprobe_fgraph_entry() fprobe_fgraph_entry… | |
CVE-2026-72384 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: irqchip/ts4800: Fix missing chained handler cleanup on remove The driver installs a chain… | |
CVE-2026-72383 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix addr_wq_timer race in sctp_free_addr_wq() sctp_free_addr_wq() previously remove… |
CVE-2026-72382 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject undersized DACLs before parsing ACEs parse_dacl() limits the attacker-contr… |
CVE-2026-72381 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of fp->owner.name in durable handle owner check Two concurrent… |
CVE-2026-72380 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: xen/pvcalls: bound backend response req_id before indexing rsp[] pvcalls_front_event_hand… |
CVE-2026-72379 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid vfs_tmpfile() never checked… | |
CVE-2026-72378 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix error code in afs_extract_vl_addrs() The error codes on these paths are only set… |
CVE-2026-72377 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: afs: Remove setting of AS_RELEASE_ALWAYS for symlinks and mountpoints Regular AFS files c… | |
CVE-2026-72376 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix misplaced inc of net->cells_outstanding Fix net->cells_outstanding being increme… | |
CVE-2026-72375 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix reinitialisation of the inode, in particular ->lock_work It seems that initalisi… |
CVE-2026-72374 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem clie… |
CVE-2026-72373 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing NULL pointer check in afs_break_some_callbacks() Fix afs_break_some_call… |
CVE-2026-72372 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix lack of locking around modifications of net->cells_dyn_ino Fix the lack of locki… |
CVE-2026-72371 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix the volume AFS_VOLUME_RM_TREE is set on Fix afs_insert_volume_into_cell() to set… |
CVE-2026-72370 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: iomap: release pages on atomic dio size mismatch If bio_iov_iter_get_pages() or the bounc… | |
CVE-2026-72369 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: minix: avoid overflow in bitmap block count calculation minix_check_superblock() uses min… |
CVE-2026-72368 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix double unlock in nomem_d_alloc error path When start_creating() fails and… |
CVE-2026-72367 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: iomap: guard io_size EOF trim against concurrent truncate underflow iomap: fix zero paddi… |
CVE-2026-72366 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_create_write_req() to handle async cache object creation netfs_create_wr… |
CVE-2026-72365 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix writethrough to use collection offload Fix writethrough write to set NETFS_RRE… | |
CVE-2026-72364 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix writeback error handling Fix the error handling in writeback_iter() loop. If… |
CVE-2026-72363 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio state after ENOMEM whilst under writeback iteration Fix the state of the… | |
CVE-2026-72362 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry() The page-table walk fra… | |
CVE-2026-72361 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/hw_engine: Fix double-free of managed BO in error path The error path in hw_engine… | |
CVE-2026-72360 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays Currently defined VF/PF rela… |
CVE-2026-72359 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix NPD in bo_meminfo() When a buffer object is purged, its ttm.resource is set t… | |
CVE-2026-72358 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: prevent invalid cursor access for purged BOs During a page table walk for bind… |
CVE-2026-72357 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline In the unregister path we use… |
CVE-2026-72356 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifs_issue_read() Fix missing release of c… |
CVE-2026-72355 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix barriering when walking subrequest list Fix the barriering used when walking t… |
CVE-2026-72354 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid stale runlist element dereference in MFT writeback ntfs_write_mft_block() map… |
CVE-2026-72353 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid stale runlist element dereference in fallocate ntfs_attr_fallocate() allocate… |
CVE-2026-72352 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: HID: bpf: Fix hid_bpf_get_data() range check hid_bpf_get_data() returns a pointer into th… |
CVE-2026-72351 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote ch… |
CVE-2026-72350 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_u32: reject invalid shift counts u32_match_it() executes rule-supplied shif… |
CVE-2026-72349 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() On links faster than ~34 Gbp… | |
CVE-2026-72348 | Critical | 9.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop The ah, hbh and r… |
CVE-2026-72347 | High | 7.3 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_connmark: reject invalid shift parameters Revision 2 of the CONNMARK target… |
CVE-2026-72346 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume The dr… | |
CVE-2026-72345 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, Fix off-by-one in single-FDB error rollback On failure at index i, the rev… |
CVE-2026-72344 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable mlx5_lag_get_dev_seq()… |
CVE-2026-72343 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation mlx5e_hv_vhca_stats_create() is… |
CVE-2026-72342 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats agent registration race mlx5e_hv_vhca_stats_create() registe… |