2026 CVEs (page 286)
Page 286 of 725 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-74296 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one Free the UAR index re… |
CVE-2026-74295 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: hdac_hdmi: Validate written enum value hdac_hdmi_set_pin_port_mux() uses th… |
CVE-2026-74294 | High | 7.3 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: aiu: Validate written enum values The AIU HDMI and internal codec mux put ca… |
CVE-2026-74293 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: fsl_audmix: Validate written enum values fsl_audmix_put_mix_clk_src() and fsl_… |
CVE-2026-74292 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ASoC: tegra: tegra210_ahub: Validate written enum value tegra_ahub_put_value_enum() reads… |
CVE-2026-74291 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ASoC: topology: Check PCM and DAI name strings before use Topology objects store several… | |
CVE-2026-74290 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flow: Dont expose folded kernel pointers The flow classifier falls back to… | |
CVE-2026-74289 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). syzbot reported use-after-free… |
CVE-2026-74288 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). rocker_router_fib_event()… |
CVE-2026-74287 | Critical | 9.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded address parameter length sctp_verify_asconf() and sctp_verify_par… |
CVE-2026-74286 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: pfcp: allocate per-cpu tstats for PFCP netdevs PFCP uses dev_get_tstats64() as its n… | |
CVE-2026-74285 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: Stop leased rxq before uninstalling its memory provider netif_rxq_cleanup_unlease()… |
CVE-2026-74284 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_hfsc: Don't make class passive twice update_vf() is called from two places… | |
CVE-2026-74283 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: tipc: require net admin for TIPCv2 netlink mutators TIPCv2 registers mutating generic-net… |
CVE-2026-74282 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: tipc: prevent snt_unacked underflow on CONN_ACK tipc_sk_conn_proto_rcv() subtracts the pe… |
CVE-2026-74281 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: tipc: reject inverted service ranges from peer bindings tipc_update_nametbl() inserts a b… |
CVE-2026-74280 | Critical | 10.0 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/octeontx - fix DMA cleanup using wrong loop index The sg_cleanup path use… |
CVE-2026-74279 | Critical | 10.0 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: crypto: cavium/cpt - fix DMA cleanup using wrong loop index The sg_cleanup error path use… |
CVE-2026-74278 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix kernel heap address leak in bounce_error_event() The comment above bounce_… | |
CVE-2026-74277 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path In iommu_dma_map_… |
CVE-2026-74276 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: spi: xilinx: use FIFO occupancy register to determine buffer size The method the driver u… | |
CVE-2026-74275 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach() In cxl_cancel_auto_attac… |
CVE-2026-74274 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fill first free targets[] slot during auto-discovery Any invalid endpoint dec… | |
CVE-2026-74273 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Block region delete during region creation Expand the range lock, rename it "… | |
CVE-2026-74272 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Resolve region deletion races Sungwoo noticed that the sysfs trigger to delet… | |
CVE-2026-74271 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: power: supply: core: fix supplied_from allocations If dts property power-supplies has mul… | |
CVE-2026-74270 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: handshake: Require admin permission for DONE command ACCEPT and DONE are the two downcall… |
CVE-2026-74269 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bnxt: fix head underflow on XDP head-grow The xdp.py test test_xdp_native_adjst_head_grow… |
CVE-2026-74268 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: tcp: clear sock_ops cb flags before force-closing a child socket A child socket inherits… |
CVE-2026-74267 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring q… |
CVE-2026-74266 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_dualpi2: Do not call qdisc_tree_reduce_backlog during peek before restoring… | |
CVE-2026-74265 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: mana: initialize gdma queue id to INVALID_QUEUE_ID mana_gd_create_mana_wq_cq() leave… | |
CVE-2026-74264 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: watchdog: fix refcount tracking races Blamed commit converted the untracked dev_hold… |
CVE-2026-74263 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: check skb_clone in control TX t7xx_port_ctrl_tx() clones each skb fragme… | |
CVE-2026-74262 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: kcm: use WRITE_ONCE() when changing lower socket callbacks kcm_attach() replaces a live l… |
CVE-2026-74261 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: avoid stale FIFO cells during resize snd_seq_fifo_resize() still needs to publ… | |
CVE-2026-74260 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them Update nft_du… |
CVE-2026-74258 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bpf: Guard __get_user acesss with access_ok for uprobe_multi data As reported by sashiko… |
CVE-2026-74257 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: sockmap: Fix use-after-free in udp_bpf_recvmsg() syzbot reported use-after-free of struct… |
CVE-2026-74256 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check start and len are u… |
CVE-2026-74255 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in tipc_l2_send_msg() Syzbot reported a slab-use-after-free in ipvlan_hard_… |
CVE-2026-72502 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) When MTU is large… |
CVE-2026-72501 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Initialize dpi variable to zero dpi is initialized only for BNXT_RE_ALLOC_W… | |
CVE-2026-72500 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free SRQ toggle page after firmware teardown Free the toggle page only afte… |
CVE-2026-72499 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free CQ toggle page after firmware teardown Free the toggle page only after… |
CVE-2026-72498 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Avoid displaying the kernel pointer While dumping the info on MR using the… | |
CVE-2026-72497 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a max slot check for SQ The variable WQE mode must be validated against… |
CVE-2026-72496 | Critical | 9.2 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Proper rollback if the ioremap fails bnxt_qplib_alloc_dpi returns success e… |
CVE-2026-72495 | Critical | 9.3 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Avoid repeated requests to allocate WC pages Applications can request multi… |
CVE-2026-72494 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Replace waitqueue and flag with completion The driver previously used a waitq… |
CVE-2026-72493 | Critical | 9.9 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net: serialize netif_running() check in enqueue_to_backlog() Syzbot reported a KASAN slab… |
CVE-2026-72492 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in same_client_has_lease() same_client_has_lease() returns an o… |
CVE-2026-72491 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma->state in trans_rdma.c The rdma->state field is modifi… |
CVE-2026-72490 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix stainfo check in rtw_aes_decrypt The null-pointer-guard was incor… | |
CVE-2026-72489 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: staging: nvec: fix use-after-free in nvec_rx_completed() In nvec_rx_completed(), when an… |
CVE-2026-72488 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: soundwire: fix bug in sdw_add_element_group_count found by syzkaller The original impleme… |
CVE-2026-72487 | High | 7.7 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr before accessing We meet a crash when runni… |
CVE-2026-72486 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-adsp: fix UAF during device teardown When the SOF audio driver fails to init… | |
CVE-2026-72485 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: coresight: platform: defer connection counter increment until alloc succeeds coresight_ad… |
CVE-2026-72484 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: staging: most: video: avoid double free on video register failure comp_register_videodev(… | |
CVE-2026-72483 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() The `max3421_hub_con… |
CVE-2026-72482 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: gpib: fix double decrement of descriptor_busy in command_ioctl() commit d1857f8296dc ("gp… |
CVE-2026-72481 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: iio: magnetometer: ak8975: fix potential kernel stack memory leak Currently in the AK8975… | |
CVE-2026-72480 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling ams_event_to_cha… |
CVE-2026-72479 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: handle I2C read error(s) in mma8452_read() Currently, If i2c_smbus_r… | |
CVE-2026-72478 | High | 8.4 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add bounds check to run_get_highest_vcn() run_get_highest_vcn() parses a packed… |
CVE-2026-72477 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: call _ntfs_bad_inode() when failing to rename It is safe to call _ntfs_bad_inod… |
CVE-2026-72476 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix possible use after free In dma_release_channel(), check chan->device->priv… |
CVE-2026-72475 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dma-axi-dmac: Properly free struct axi_dmac_desc Use axi_dmac_free_desc() to f… | |
CVE-2026-72474 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor For architectures like Mi… | |
CVE-2026-72473 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decouple req recycling from RPC completion rl_kref formerly served two distinct… |
CVE-2026-72472 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: nfs: use nfsi->rwsem to protect traversal of the file lock list Lingfeng identified a bug… |
CVE-2026-72471 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: prevent potential lcn remains uninitialized The target VCN being sought was not… |
CVE-2026-72470 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: resize log->one_page_buf when adopting on-disk page size log_replay() allocates… |
CVE-2026-72469 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix ep kref imbalance on ADDR_CHANGE rpcrdma_cm_event_handler() falls through t… |
CVE-2026-72468 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Initialize re_id before removal registration rpcrdma_create_id() registers ep->… | |
CVE-2026-72467 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Check frwr_wp_create() during connect frwr_wp_create() creates the singleton Me… | |
CVE-2026-72466 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek rpcrdma_is_bcall() decodes a reply's firs… |
CVE-2026-72465 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Sanitize the reply credit grant after parsing The out_norqst exit in rpcrdma_re… |
CVE-2026-72464 | High | 7.5 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Repost Receive buffers for malformed replies rpcrdma_wc_receive() decrements th… |
CVE-2026-72463 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resumption xfrm async resumption hold skb->dev… |
CVE-2026-72462 | High | 8.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race in unix socket mediation when peer_path is used The holding a referenc… |
CVE-2026-72461 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix refcount leak when updating the sk_ctx Currently update_sk_ctx() transfers… |
CVE-2026-72460 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: apparmor: check label build before no_new_privs test aa_change_profile() builds a replace… |
CVE-2026-72459 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: apparmor: aa_label_alloc use aa_label_free on alloc failure aa_label_alloc() allocates a… |
CVE-2026-72458 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix NULL pointer dereference in unpack_pdb pdb->dfa could be NULL if unpack_dfa… | |
CVE-2026-72457 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fail policy unpack on accept2 allocation failure unpack_pdb() may need to alloc… | |
CVE-2026-72456 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: apparmor: release exe file resources on path failure get_current_exe_path() takes both an… | |
CVE-2026-72455 | High | 7.1 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix uninitialised pointer passed to audit_log_untrustedstring() Commit 4a134723… |
CVE-2026-72454 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev() i3c_hci_addr_to_dev() walks bus->dev… |
CVE-2026-72453 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache i… | |
CVE-2026-72452 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after dropping refs intel_crtc_put_color_blobs()… |
CVE-2026-72451 | Critical | 9.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix xfrm state cache insertion race The xfrm input state cache insertion code check… |
CVE-2026-72450 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen during match syzbot reported a shift-out-of-… |
CVE-2026-72449 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm The cleanup tail of kfd_criu_r… |
CVE-2026-72448 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown The send-queue timestamp ring i… | |
CVE-2026-72447 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: sctp: hold socket lock when dumping endpoints in sctp_diag SCTP_DIAG endpoint dumping was… | |
CVE-2026-72446 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: reject stream disable with no active interface handle_uaudio_strea… |
CVE-2026-72445 | | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: clear opened when stream enable fails On enable, subs->opened is s… | |
CVE-2026-72444 | High | 7.8 | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: flow_dissector: check device type before reading ETH_ADDRS __skb_flow_dissect() unconditi… |