2026 CVEs (page 285)
Page 285 of 725 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-74396 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure mlx5r_umr_update_xlt() allocates a… |
CVE-2026-74395 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference MLX5_IB_METHOD_DEVX_SUBSCRIBE… | |
CVE-2026-74394 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: fix integer overflow in immediate data length check imm_buf->len is a user-con… |
CVE-2026-74393 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/syncobj: Fix memory leak in drm_syncobj_find_fence() Commit 18226ba52159 ("drm/syncob… | |
CVE-2026-74392 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: dm: limit target bio polling to one shot dm_poll_bio() is the ->poll_bio() callback for a… | |
CVE-2026-74391 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: tracing: Bound synthetic-field strings with seq_buf The synthetic field helpers build a p… | |
CVE-2026-74390 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs The irdma_copy_user_pgaddr… |
CVE-2026-74389 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix log flood after cmd_mbox failure hns_roce_cmd_mbox() is the command interfa… | |
CVE-2026-74388 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data The OSS sequencer pro… |
CVE-2026-74387 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: midi: Serialize output teardown with event_input event_process_midi() borrows… |
CVE-2026-74386 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix page fragment cache leak in error path In nvmet_tcp_alloc_queue(), when a… | |
CVE-2026-74385 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock The return value of nvmet_tcp_s… |
CVE-2026-74384 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix flex array size in struct nvme_ns_head struct nvme_ns_head contains a… |
CVE-2026-74383 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix out-of-bounds access in nvme_setup_descriptor_pools nvme_setup_descriptor_p… |
CVE-2026-74382 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_bpf: prevent unbounded recursion in offload rollback Quan Sun reported [1]… | |
CVE-2026-74381 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Allow entries in BO caches to be freed When a buffer object is pinned via ho… | |
CVE-2026-74380 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix iommu_map_sgtable() return value check Commit "iommu: return full error… |
CVE-2026-74379 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: dax/kmem: account for partial discontiguous resource upon removal When dev_dax_kmem_probe… | |
CVE-2026-74378 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe get_srq_wqe() reads wqe->dma.num_sge fr… |
CVE-2026-74377 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path For non-SRQ QPs, the responder… |
CVE-2026-74376 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: md/raid10: reset read_slot when reusing r10bio for discard put_all_bios() always drops de… |
CVE-2026-74375 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix deadlock in read error recovery path raid1d and raid10d may resubmit… | |
CVE-2026-74374 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix error-path detection with md_cloned_bio() Detect the error path usin… |
CVE-2026-74373 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix bio accounting for split md cloned bios Use md_cloned_bio() to contr… | |
CVE-2026-74372 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: raid1: fix nr_pending leak in REQ_ATOMIC bad-block error path In raid1_write_request(), e… | |
CVE-2026-74371 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat BPF_PROG_QUERY writes back t… |
CVE-2026-74370 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix TOCTOU race in luo_session_retrieve() Extend the scope of the rwsem_read… | |
CVE-2026-74369 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix u-a-f in luo_file_unpreserve_files() and luo_file_finish() In luo_file_un… | |
CVE-2026-74368 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() In ath12k_wifi7_d… | |
CVE-2026-74367 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix inconsistent arvif state in vdev_create error paths ath12k_mac_vdev_cre… |
CVE-2026-74366 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix NULL deref in change_sta_links for unready link _ieee80211_set_active_l… | |
CVE-2026-74365 | High | 7.3 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Handle preemption in BTT lane acquisition BTT lanes serialize access to per-l… |
CVE-2026-74364 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject exclusive maps as inner maps in map-in-map An exclusive map (created with exc… |
CVE-2026-74363 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs commit 4f375ade6aa9 ("bpf: A… |
CVE-2026-74362 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ext2: fix ignored return value of generic_write_sync() Fix ext2_dio_write_iter() to propa… | |
CVE-2026-74361 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix FDP fdpcidx bounds check The fdpcidx bounds check sets n = NUMFDPC + 1 but used… |
CVE-2026-74360 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject exclusive maps for bpf_map_elem iterators Exclusive maps (aka excl_prog_hash)… | |
CVE-2026-74359 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: configfs_lookup(): don't leave ->s_dentry dangling on failure Normally ->s_dentry is clea… |
CVE-2026-74358 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix fast commit wait/wake bit mapping on 64-bit On 64-bit, ext4 dynamic inode state… | |
CVE-2026-74357 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu_coredump ring dump The ring content du… |
CVE-2026-74356 | High | 7.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: vhost: fix vhost_get_avail_idx for a non empty ring vhost_get_avail_idx is supposed to re… |
CVE-2026-74355 | High | 8.2 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe error path The info->node RB-tree member is z… |
CVE-2026-74354 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bpf: Take mmap_lock in zap_pages() zap_vma_range() requires the owning mm's mmap_lock to… |
CVE-2026-74353 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: always resume_all after suspend_all Need to restore any good queues even if t… | |
CVE-2026-74352 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails The global po… | |
CVE-2026-74351 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: rebase copied fsdlm LVB pointers in locking_state The locking_state debugfs iterat… | |
CVE-2026-74350 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate fast symlink target during inode read ocfs2_validate_inode_block() alread… |
CVE-2026-74349 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject FITRIM ranges shorter than a cluster ocfs2_trim_mainbm() trims the global b… |
CVE-2026-74348 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: require a ref for locking_state debugfs open debug_lockres_open() copies inode… | |
CVE-2026-74347 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount Add a refcou… |
CVE-2026-74346 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix OOB read during CQ MR registration Sashiko pointed out an unrelated bug d… | |
CVE-2026-74345 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix endpoint/socket association handling Disassociating a socket from an endpoi… |
CVE-2026-74344 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bpf: Clear rb node linkage when freeing bpf_rb_root bpf_rb_root_free() detaches the root… |
CVE-2026-74343 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: kernfs: fix xattr race condition with multiple superblocks Multiple superblocks with diff… |
CVE-2026-74342 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: kernfs: link kn to its parent before the LSM init hook After commit 12e9e3cd03b5 ("simpe_… | |
CVE-2026-74341 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix heap overflow from oversized firmware HAL response The firmware respon… |
CVE-2026-74340 | High | 8.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication The firmware… |
CVE-2026-74339 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Clear variable event pointer on read snd_seq_read() copies a queued variable-l… | |
CVE-2026-74338 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable BPF_LSM_CGROUP programs at load time The cgroup shim runs under rcu… |
CVE-2026-74337 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NMI/tracepoint re-entry deadlock on lru locks NMI and tracepoint BPF programs ca… | |
CVE-2026-74336 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bound S1G TIM PVB walk to the TIM element ieee80211_s1g_check_tim() parse… | |
CVE-2026-74335 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL pointer dereference in bpf_task_from_vpid() bpf_task_from_vpid() looks up a… | |
CVE-2026-74334 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: Fix locking when accessing mr->pd Sashiko points out that, due to rereg_mr, t… |
CVE-2026-74333 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-sdw-legacy: Bound DAI link iteration create_sdw_dailinks() walks soc_dais… |
CVE-2026-74332 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-sdw-sof: Bound DAI link iteration create_sdw_dailinks() walks sof_dais unt… |
CVE-2026-74331 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Fix recursive lock in device_cache_fw_images() A recursive locking deadl… | |
CVE-2026-74330 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of ->s_children Having the parent directory locked prot… |
CVE-2026-74329 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: watchdog: unregister PM notifier on watchdog unregister watchdog_register_device() regist… | |
CVE-2026-74328 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Destroy the pages content after detaching from dmabuf Sashiko points out this ha… |
CVE-2026-74327 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix NULL pointer dereference in is_vm_area_hugepages() find_vm_area() can return… | |
CVE-2026-74326 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix resource leak in probe error path When pcim_iomap_region() or dev… | |
CVE-2026-74325 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: use kfree_rcu for offchannel link in mt76_put_vif_phy_link mt76_put_vif_phy_l… |
CVE-2026-74324 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: validate skb length in testmode query In mt7925_tm_query(), the respo… | |
CVE-2026-74323 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb() If link_conf or li… |
CVE-2026-74322 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible NULL pointer dereference in mt7996_mac_write_txwi_80211()… | |
CVE-2026-74321 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() In the beginning of… |
CVE-2026-74320 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: fbdev: sm501fb: Fix buffer errors in OF binding code The code that gets the frame buffer… | |
CVE-2026-74319 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix deadlock waiting for ticket during data relocation When performing data… | |
CVE-2026-74318 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock cloning inline extent when using flushoncommit In commit b48c980b6a7e… | |
CVE-2026-74317 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ixgbe: do not configure xps for XDP queues netif_set_xps_queue() should not be called for… |
CVE-2026-74316 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Handle layout stid in nfsd4_drop_revoked_stid() nfsd4_drop_revoked_stid() has no SC… |
CVE-2026-74315 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file() file_hash() digests the… |
CVE-2026-74314 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields on map value recycle Map update and delete paths currently cal… |
CVE-2026-74313 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: vduse: hold vduse_lock across IDR lookup in open path vduse_dev_open() looks up struct vd… |
CVE-2026-74312 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: vhost/vdpa: validate virtqueue index in mmap and fault paths vhost_vdpa_mmap() and vhost_… |
CVE-2026-74311 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: tear down old virtqueues before restore virtio_device_restore() resets the d… |
CVE-2026-74310 | Critical | 9.3 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: vhost/net: complete zerocopy ubufs only once vhost-net initializes one ubuf_info per outs… |
CVE-2026-74309 | Critical | 10.0 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler Look up the IRQ index in oct… |
CVE-2026-74308 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix kernel BUG in ext4_write_inline_data_end When the data=journal mount option is… | |
CVE-2026-74307 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT Reject the EXT4_IOC_MOVE_… | |
CVE-2026-74306 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: vfio/qat: fix f_pos race in qat_vf_resume_write() qat_vf_resume_write() checks filp->f_po… |
CVE-2026-74305 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten cgroup storage cookie checks for prog arrays The fix in commit abad3d0bad72… |
CVE-2026-74304 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: fix NULL pointer dereference in qca_setup() for non-serdev device hu-… | |
CVE-2026-74303 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device h… | |
CVE-2026-74302 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() hci_unregister_dev() does not disabl… |
CVE-2026-74301 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path When btmtk_isopkt_pad() f… | |
CVE-2026-74300 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci: validate codec capability element length Read Local Codec Capabilities re… |
CVE-2026-74299 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix FRMR aging push to queue error flow Aging pools with pinned handles requir… | |
CVE-2026-74298 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix FRMR set pinned push error path Add destruction of FRMR handles in case th… | |
CVE-2026-74297 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE size set_rq_size() computes the RQ WQE size… |