CVEs published by kernel.org

CVEs published by kernel.org (CVE Numbering Authority). 332 tracked.

CVE-2026-99083 HIGH 8.8 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix heap out-of-bounds write in kr
CVE-2026-99082 HIGH 8.8 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use active memslots for the per
CVE-2026-99081 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: bnxt_en: fix DMA mapping length for padde
CVE-2026-99079 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer relea
CVE-2026-99078 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer relea
CVE-2026-99077 HIGH 7.4 In the Linux kernel, the following vulnerability has been resolved: ipv4: udp: Create exceptions before socke
CVE-2026-99064 HIGH 8.1 In the Linux kernel, the following vulnerability has been resolved: cipso: adjust cached option offsets when
CVE-2026-99059 HIGH 7.7 In the Linux kernel, the following vulnerability has been resolved: wireguard: noise: reject response consump
CVE-2026-99056 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: strparser: make sure __strp_recv isn't ru
CVE-2026-99054 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: tipc: destroy topsrv workqueues before cl
CVE-2026-99053 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: tipc: hold a reference to nodes found by
CVE-2026-99051 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: fsverity: RCU-delay the freeing of struct
CVE-2026-99050 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: fix race when arming the IRQ
CVE-2026-99046 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak on error descrip
CVE-2026-99042 HIGH 8.4 In the Linux kernel, the following vulnerability has been resolved: io_uring/net: populate CONNECT filter fie
CVE-2026-99032 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: net/smc: protect clcsock lifetime in smc_
CVE-2026-99030 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't leave stale bytes in s
CVE-2026-99018 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: riscv: entry: gate shadow call stack relo
CVE-2026-99017 HIGH 7.0 In the Linux kernel, the following vulnerability has been resolved: riscv: errata: select RISCV_ALTERNATIVE_E
CVE-2026-99016 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: riscv: futex: untag the user pointer befo
CVE-2026-99014 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix command skb life
CVE-2026-99013 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Reject concurrent BIS lis
CVE-2026-99012 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Serialize concurrent conn
CVE-2026-99011 HIGH 7.1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: serialise sco_conn lifeti
CVE-2026-99006 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Prevent overstepping exec a
CVE-2026-99002 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from us
CVE-2026-98999 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix stale pinned_link entry when
CVE-2026-98995 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: namespace: reset the old parent's ->overm
CVE-2026-98993 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: namespace: don't inherit MNT_UMOUNT in cl
CVE-2026-98991 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: namespace: queue a mount only once for mo
CVE-2026-98988 HIGH 8.8 In the Linux kernel, the following vulnerability has been resolved: namespace: keep covered mounts covered in
CVE-2026-98982 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: namespace: don't let a pseudo dentry beco
CVE-2026-98981 HIGH 8.8 In the Linux kernel, the following vulnerability has been resolved: namespace: unhash a dentry before detachi
CVE-2026-98980 HIGH 8.8 In the Linux kernel, the following vulnerability has been resolved: namei: don't reveal overmounted entries i
CVE-2026-98978 HIGH 8.4 In the Linux kernel, the following vulnerability has been resolved: namespace: never expire a locked mount L
CVE-2026-98976 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: namespace: keep the lock on a mount that
CVE-2026-98975 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: xfs: stop exchanging reflink flags when e
CVE-2026-98974 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range-to-eof file size
CVE-2026-98968 HIGH 8.1 In the Linux kernel, the following vulnerability has been resolved: amt: send the relay's General Query direc
CVE-2026-98965 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: ice: Restore Ordered MMIO Writes for Tx D
CVE-2026-98964 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: nvmet: use the local P2P device on metada
CVE-2026-98959 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix xattr replace when multiple xa
CVE-2026-98952 HIGH 7.3 In the Linux kernel, the following vulnerability has been resolved: pfcp: make sure the SEID is linear before
CVE-2026-98945 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: HID: steam: Rearrange teardown sequence
CVE-2026-98944 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: HID: steam: Refactor registration This r
CVE-2026-98941 HIGH 7.0 In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable large folios on encryp
CVE-2026-98932 HIGH 7.4 In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Fix use-after-free in error
CVE-2026-98927 HIGH 7.0 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix life cycle of the nes
CVE-2026-98911 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix the error path in dpaa2
CVE-2026-98899 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: mark the rcu locked are
CVE-2026-98895 HIGH 7.0 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Handle destroying table th
CVE-2026-98889 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix sched scan IE siz
CVE-2026-98870 HIGH 8.8 In the Linux kernel, the following vulnerability has been resolved: ksmbd: remove stale channels from all ses
CVE-2026-98869 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zext_dst based on static regis
CVE-2026-98555 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: llc: fix skb UAF and leaks on llc_mac_hdr
CVE-2026-98550 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: tipc: reject invalid and unexpected GRP_A
CVE-2026-98549 CRITICAL 9.1 In the Linux kernel, the following vulnerability has been resolved: tcp: prevent collapsing skbs across bound
CVE-2026-98548 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: sctp: discard the rest of the packet on a
CVE-2026-98543 HIGH 7.3 In the Linux kernel, the following vulnerability has been resolved: bpf: fs/xattr: don't assume the inode is
CVE-2026-98532 HIGH 8.1 In the Linux kernel, the following vulnerability has been resolved: ipv6: do not let ipv6_find_hdr() return a
CVE-2026-98524 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: rds: ib: Clear the sg list when mapping a
CVE-2026-98520 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix use-after-free and multi-
CVE-2026-98518 HIGH 7.0 In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: pin VRAM for the whole
CVE-2026-98517 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/uvmm: fix UAF in nouveau_uvmm
CVE-2026-98515 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix double-free in nvif_vmm_
CVE-2026-98512 HIGH 7.1 In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: RCU-free the scheduler-conta
CVE-2026-98510 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: nuke PTs only after unlinking
CVE-2026-98507 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix missing barrier between anon
CVE-2026-98501 HIGH 7.1 In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix use-after-free on input2 r
CVE-2026-98499 HIGH 8.1 In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix OOB read in wacom_wac_pen
CVE-2026-98497 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix swapped IPv6 IPsec policy
CVE-2026-98491 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: avoid modify
CVE-2026-98490 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fix helper U
CVE-2026-98487 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: net: bridge: mdb: restart port group walk
CVE-2026-98485 HIGH 7.1 In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_rt: fix zero-address non-
CVE-2026-98479 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi_tcp: Check the data direct
CVE-2026-98471 HIGH 7.1 In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do cache maintenance on the sou
CVE-2026-98469 HIGH 7.1 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix AArch32 DBGBXVR<n> handli
CVE-2026-98466 HIGH 8.2 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Transfer the hyp stack pages
CVE-2026-98465 HIGH 7.0 In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Serialize IMSIC attributes w
CVE-2026-98464 CRITICAL 9.3 In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Synchronize hrtimer callback
CVE-2026-98456 HIGH 7.0 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix race in read_unconf_
CVE-2026-98454 HIGH 8.1 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context out-of-bo
CVE-2026-98451 HIGH 8.8 In the Linux kernel, the following vulnerability has been resolved: smb: client: use finish_no_open() for non
CVE-2026-98443 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: xfs: fix cursor and pointer handling when
CVE-2026-98442 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix helper UAF due to
CVE-2026-98441 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: avoid modifying shared
CVE-2026-98440 HIGH 7.0 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Delay freeing of shadow S
CVE-2026-98436 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer expo
CVE-2026-98432 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an
CVE-2026-98419 HIGH 7.0 In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix out-of-bounds write in
CVE-2026-98405 HIGH 8.1 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check
CVE-2026-98401 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: fix stale transport header
CVE-2026-98385 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple sched_cache_group f
CVE-2026-98383 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_skb_pull_data() for LWT
CVE-2026-98382 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on ot
CVE-2026-98381 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: veth: manage XDP program pointers during
CVE-2026-98378 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled links in link iterato
CVE-2026-98376 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: bpf: Use array_map_meta_equal for percpu
CVE-2026-98374 HIGH 8.8 In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmit_skb
CVE-2023-7356 HIGH 8.8 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data
CVE-2026-64439 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead impl
CVE-2026-64312 HIGH 7.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non
CVE-2026-64313 HIGH 8.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli m
CVE-2026-64438 HIGH 8.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown rac
CVE-2026-64270 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized devic
CVE-2026-64271 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index
CVE-2026-64272 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MM
CVE-2026-64273 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported
CVE-2026-64274 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported
CVE-2026-64276 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F30 key
CVE-2026-64277 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F3A key
CVE-2026-64304 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component
CVE-2026-64311 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: loongson - Remove broken and unus
CVE-2026-64529 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character dev
CVE-2026-64305 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: qat - protect service table itera
CVE-2026-64237 HIGH 7.1 UPGRADE In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - validate firmware size
CVE-2026-64315 HIGH 7.0 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel t
CVE-2026-64307 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for i
CVE-2026-64308 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for i
CVE-2026-64309 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for i
CVE-2026-64310 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for S
CVE-2026-64275 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - prevent division by zer
CVE-2026-64306 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: drbg - Fix returning success on f
CVE-2026-64314 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: chacha20poly1305 - validate poly1
CVE-2026-64316 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel t
CVE-2026-64544 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - fix OOB read in
CVE-2026-74632 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix huge_zero_pfn race P
CVE-2026-64565 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix heap-buffer-overflow
CVE-2026-74672 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire init_mm lock on huge
CVE-2026-64599 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in
CVE-2026-98090 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: btrfs: restore active device pointers aft
CVE-2026-98094 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: make dirty_lock IRQ-safe
CVE-2026-98091 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: btrfs: detach failed sprout device from t
CVE-2026-98092 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: yc: fix memory leak in acp6x_p
CVE-2026-63860 HIGH 8.4 UPGRADE In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prefer NLA_NUL_STRING These a
CVE-2026-98093 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_micfil: balance mclk enable/dis
CVE-2026-98095 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't cast tpacket_hdr.tp_len
CVE-2026-31694 HIGH 7.8 UPGRADE MITIGATE In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page ca
CVE-2026-99087 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereferenc
CVE-2026-99086 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: dm-integrity: validate the superblock on
CVE-2026-99085 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix CPU hotplug hang when a dy
CVE-2026-99084 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: readdir: take no inode lock on an immutab
CVE-2026-99080 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: fs: Free any excess xarray nodes in clear
CVE-2026-99076 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: ipv6: udp: Create exceptions before socke
CVE-2026-99075 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: rust_binder: reschedule node refcount upd
CVE-2026-99074 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: ipv4: stop PMTU walk when nexthop group s
CVE-2026-99073 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: ipv4: stop exception dump when nexthop gr
CVE-2026-99072 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: ipv4: stop route notification sizing when
CVE-2026-99071 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: ipv4: do not warn on route notification s

← Back to latest CVEs