2026 CVEs (page 37)
Page 37 of 445 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-68163 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: mm/page_vma_mapped: fix device-private PMD handling Commit 65edfda6f3f2 ("mm/rmap: extend… |
CVE-2026-68162 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: sctp: avoid auth_enable sysctl UAF during netns teardown proc_sctp_do_auth() updates the… |
CVE-2026-68161 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: sctp: close UDP tunnel sockets during netns teardown proc_sctp_do_udp_port() starts per-n… |
CVE-2026-68160 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() ceph_handle_caps… |
CVE-2026-68159 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE __decode_pg_temp()… |
CVE-2026-68158 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: libceph: Fix multiplication overflow in decode_new_up_state_weight() If a message of type… |
CVE-2026-68157 | High | 7.5 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: libceph: guard missing CRUSH type name lookup Localized read selection can walk a parent… |
CVE-2026-68156 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth->authorizer_buf{,_len} after authorizer update ceph_x_create_author… |
CVE-2026-68155 | High | 7.5 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: libceph: Reject monmaps advertising zero monitors A message of type CEPH_MSG_MON_MAP cont… |
CVE-2026-68154 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crush_decode CRUSH bucket type 0 is reserved for dev… |
CVE-2026-68153 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: libceph: remove debugfs files before client teardown ceph_destroy_client() tears down the… |
CVE-2026-68152 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: amt: fix use-after-free in AMT delayed works When an AMT device is removed, pending delay… |
CVE-2026-68151 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: binfmt_elf_fdpic: only honour the first PT_INTERP The program header scan handles PT_INTE… | |
CVE-2026-68150 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: fs/super: fix emergency thaw double-unlock of s_umount do_thaw_all() iterates over all su… | |
CVE-2026-68149 | High | 8.4 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: fs: preserve ACL_DONT_CACHE state in forget_cached_acl() The ACL_DONT_CACHE state is mean… |
CVE-2026-68148 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: fscrypt: Add missing superblock check in find_or_insert_direct_key() The legacy 'fscrypt_… |
CVE-2026-68147 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: fscrypt: Avoid dynamic allocation in fscrypt_get_devices() When a blk_crypto_key starts b… |
CVE-2026-68146 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Add global mutex to serialize trace_parser access In ftrace, the trace_parser str… | |
CVE-2026-68145 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: iomap: fix out-of-bounds bitmap_set() with zero-length range ifs_set_range_dirty() and if… |
CVE-2026-68144 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: phonet: pep: fix use-after-free in pep_get_sb() pep_get_sb() doesn't consider that pskb_m… |
CVE-2026-68143 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: net: slip: serialize receive against buffer reallocation sl_realloc_bufs() replaces rbuff… |
CVE-2026-68142 | High | 8.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: geneve: require CAP_NET_ADMIN in the device netns for changelink A tunnel changelink() op… |
CVE-2026-68141 | High | 7.5 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() afiucv_hs_callback_syn() allocate… |
CVE-2026-68140 | High | 8.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix use-after-free of a severed iucv_path af_iucv queues not-yet-received messa… |
CVE-2026-68139 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use sender devcom for MPV master-up After PCIe DPC recovery, mlx5 reloads the… | |
CVE-2026-68138 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: net/sched: serialize qdisc_rtab_list against concurrent get/put qdisc_get_rtab() and qdis… |
CVE-2026-68137 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free in x25_kill_by_neigh() x25_kill_by_neigh() walks the global X… |
CVE-2026-68136 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: net: gro: fix double aggregation of flush-marked skbs Commit 0ab03f353d36 ("net-gro: Fix… |
CVE-2026-68135 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on build_skb failure When build_skb() fails in hip04_rx_po… | |
CVE-2026-68134 | High | 7.3 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ptp: ptp_s390: Add missing facility check Only register the physical clock when facility… |
CVE-2026-68133 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP Call Trace during PTP release If a PF reset occurs when the PTP state is ICE… | |
CVE-2026-68132 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: super: fix emergency thaw deadlock on frozen block devices do_thaw_all_callback() calls b… | |
CVE-2026-68131 | High | 7.5 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: rbd: Reset positive result codes to zero in object map update path In a reply message to… |
CVE-2026-68130 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer destroy_previous_session() until after NTLM authentication In ntlm_authentic… | |
CVE-2026-68129 | High | 7.5 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: gve: fix Rx queue stall on alloc failure When the system is under extreme memory pressure… |
CVE-2026-68128 | High | 8.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in ice_parser_profile_init set_bit(rslt->ptype, prof->ptyp… |
CVE-2026-68127 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ila: reload IPv6 header after pskb_may_pull in checksum adjust ila_csum_adjust_transport(… |
CVE-2026-68126 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: mac802154: hold an interface reference across the scan worker mac802154_scan_worker() cap… | |
CVE-2026-68125 | High | 8.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: reject frames shorter than the authentication tag llsec_do_decrypt_auth… |
CVE-2026-68124 | Critical | 9.6 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: mctp: serial: handle zero-length frames to prevent rx buffer overflow The MCTP serial rec… |
CVE-2026-68123 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix GSO userspace truncation underflow OVS_ACTION_ATTR_TRUNC currently store… |
CVE-2026-68122 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ovpn: fix peer refcount leak in TCP error paths When either the TCP RX or TX error path c… | |
CVE-2026-68121 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after dev_hard_header() pppoe_sendmsg() saves a pointer to t… |
CVE-2026-68120 | High | 7.5 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware packet parsing The hardware performs pac… |
CVE-2026-68119 | High | 7.5 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: tcp: initialize standalone TCP-AO response padding tcp_v4_send_ack() and tcp_v6_send_resp… |
CVE-2026-68118 | High | 8.2 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: tcp: challenge ACK for non-exact RST in SYN-RECEIVED The SYN-RECEIVED request-socket path… |
CVE-2026-68117 | Critical | 9.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() When tipc_sk_create()… |
CVE-2026-68116 | High | 7.9 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix source list corruption on a failed replace When replacing the source list… |
CVE-2026-68115 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for… | |
CVE-2026-68114 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12.1: replace BUG_ON() with WARN_ON() There's no need to crash the kernel f… | |
CVE-2026-68113 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for… | |
CVE-2026-68112 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON() There's no need to crash the kernel… | |
CVE-2026-68111 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for… | |
CVE-2026-68110 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON() There's no need to crash the kernel… | |
CVE-2026-68109 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON() There's no need to crash the kernel f… | |
CVE-2026-68108 | High | 8.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: fix integer overflow in image size Fix a security vulnerability where mal… |
CVE-2026-68107 | High | 8.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by v… |
CVE-2026-68106 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix division by zero with invalid uvd dimensions When width or height is less… |
CVE-2026-68105 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix kernel panic during driver load failure Avoid kernel panic if MES init fa… | |
CVE-2026-68104 | High | 7.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: invoke pm_genpd_remove() before freeing genpd Call pm_genpd_remove() to unreg… |
CVE-2026-68103 | High | 7.1 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: reject mapping a reserved doorbell to a new queue When creating an user-queue… |
CVE-2026-68102 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix aperture mapping leak amdgpu_pci_remove() calls drm_dev_unplug() before i… | |
CVE-2026-68101 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix check in amdgpu_hmm_invalidate_gfx For a short moment during alloc/free t… | |
CVE-2026-68100 | High | 8.1 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl set_ntacl_dacl() copies ea… |
CVE-2026-68099 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL check_add_overflo… | |
CVE-2026-68098 | High | 8.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound DACL dedup walk to copied ACEs set_ntacl_dacl() can stop copying ACEs before… |
CVE-2026-68097 | High | 8.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities set_ntacl_dacl() validates sid.num_s… |
CVE-2026-68096 | High | 7.5 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: audit: fix recursive locking deadlock in audit_dupe_exe() A deadlock occurs in the audit… |
CVE-2026-68095 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix race between registration and connection abortion This fixes this race: -… | |
CVE-2026-68094 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Preserve rq tracking across local DSQ dispatch dispatch_to_local_dsq() can run… | |
CVE-2026-68093 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug If a v… | |
CVE-2026-59233 | | 2026-08-10 | Missing Authorization in the permission management component in Roskus Prospero Flow CRM before 5.2.1 allows any authenticated user to grant any role, includin… | |
CVE-2026-59090 | High | 8.4 | 2026-08-10 | A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a sp… |
CVE-2026-19278 | Medium | 6.8 | 2026-08-10 | A flaw was found in StackRox/RHACS Central's Auth Machine-to-Machine (M2M) token exchange. When an administrator configures M2M role mappings, the system uses… |
CVE-2026-18370 | | 2026-08-10 | entr is vulnerable to Heap-based buffer overflow in run_utility() function. The function allocates a fixed-size heap buffer using malloc(ARG_MAX) and copies co… | |
CVE-2026-13206 | Critical | 9.8 | 2026-08-10 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Zyxel Networks WAH7601 allows OS Command Injection… |
CVE-2026-12984 | High | 8.2 | 2026-08-10 | Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitive Data. This issue affects WAH7601: through 2007… |
CVE-2026-68092 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: time/jiffies: Register jiffies clocksource before usage Teddy reported that a XEN HVM has… | |
CVE-2026-68091 | High | 8.8 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacom_parse_and_register() star… |
CVE-2026-68090 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: debugobjects: Plug race against a concurrent OOM disable syzbot reported a puzzling splat… | |
CVE-2026-68089 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If *ppos is non-zero then simple_write_to_bu… | |
CVE-2026-68088 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check to response query Add variable representat… | |
CVE-2026-68087 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush() wacom_wac_queue_flush() is called v… | |
CVE-2026-68086 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: write all dirty file folios when collapsing [There is no upstream commit… | |
CVE-2026-68085 | High | 8.0 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled HCI_UART_SENDING… |
CVE-2026-68084 | | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: staging: vme_user: fix location monitor leak in tsi148 bridge tsi148_probe() allocates a… | |
CVE-2026-68083 | Critical | 9.1 | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix path resolution in ksmbd_vfs_kern_path_create The SMB2 open lookup is rooted a… |
CVE-2026-64941 | | 2026-08-10 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an ori… | |
CVE-2026-59088 | Medium | 5.5 | 2026-08-10 | A flaw was found in GIMP. A signed integer overflow vulnerability exists in the `file-fli` plugin when processing FLI image files. This occurs due to an incorr… |
CVE-2026-72594 | High | 7.6 | 2026-08-10 | A stored cross-site scripting (XSS) vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authenticated user to inject arbitrary JavaScrip… |
CVE-2026-72593 | Critical | 9.8 | 2026-08-10 | A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to access the full file manager functionality… |
CVE-2026-72592 | Critical | 9.8 | 2026-08-10 | An unrestricted file upload vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to execute arbitrary PHP code on the server… |
CVE-2026-72591 | High | 7.7 | 2026-08-10 | A server-side request forgery (SSRF) vulnerability in gabehf/Koito through v0.3.2 allows an authenticated user to make the server perform HTTP requests to arbi… |
CVE-2026-72590 | Critical | 9.8 | 2026-08-10 | An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to inject arbitrary cron job entries b… |
CVE-2026-72589 | Critical | 9.8 | 2026-08-10 | An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to execute arbitrary system commands b… |
CVE-2026-72588 | Medium | 5.3 | 2026-08-10 | A user enumeration vulnerability in bluewave-labs/Checkmate through 2.1.0 allows an unauthenticated remote attacker to determine whether a given email address… |
CVE-2026-72587 | Medium | 6.1 | 2026-08-10 | A cache poisoning vulnerability in CoreBunch/Instatic through 0.0.14 allows an unauthenticated remote attacker to poison the shared process-wide render cache b… |
CVE-2026-72586 | High | 7.5 | 2026-08-10 | A missing authentication vulnerability in frangoteam/FUXA through 1.3.3 allows an unauthenticated remote attacker to query all historical sensor data via the D… |
CVE-2026-72585 | Medium | 6.5 | 2026-08-10 | An authorization bypass vulnerability in Grafana through 13.2.0 allows an Editor-role user to delete protected contact points (receivers) without the required… |
CVE-2026-72584 | High | 7.4 | 2026-08-10 | A time-of-check/time-of-use (TOCTOU) race condition in fastschema through v0.15.1 allows an unauthenticated remote attacker to bypass the OTP attempt limit on… |