[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-98315 | 6 Oct 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ntfs: protect runlist updates with the runlist lock… | |
| CVE-2026-98316 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: Fix race between rawmidi and disconnect Although we tried to fix… | |
| CVE-2026-98317 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS… | |
| CVE-2026-98318 | 6 Oct 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: validate absolute native symlink targets before NT fixups With… | |
| CVE-2026-98319 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr When an… | |
| CVE-2026-98320 | 6 Oct 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: hold reference on ct until flow is released nf_ct_put()… | |
| CVE-2026-98308 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: hda: trace PCM open only after assigning a stream Stream assignment can… | |
| CVE-2026-98309 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/vc4: Use managed KMS polling to fix UAF on unbind vc4_kms_load() calls… | |
| CVE-2026-98310 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory… | |
| CVE-2026-98311 | 6 Oct 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: don't transfer operstate before register virt_wifi_newlink()… | |
| CVE-2026-98312 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: fix OOB write from device-reported iso length… | |
| CVE-2026-98313 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: skip PUSH_IDLE when the link was never enabled… | |
| CVE-2026-98301 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: move switchdev call outside rcu This is a follow-up of one of… | |
| CVE-2026-98302 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: fddi: skfp: fix NULL deref when setting the MAC address while down… | |
| CVE-2026-98303 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup When the… | |
| CVE-2026-98304 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: restore the hardware filters on open bcmgenet_hfb_init() runs… | |
| CVE-2026-98305 | 6 Oct 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: disable the stats poll on teardown mxl862xx_setup() arms the… | |
| CVE-2026-98306 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation When an SRv6… | |
| CVE-2026-98307 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() When mac80211… | |
| CVE-2026-98295 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: coredump: Quiesce dump work on unregister hci_devcd_handle_pkt_init()… | |
| CVE-2026-98296 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: validate TX skb length in send_sync… | |
| CVE-2026-98297 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained… | |
| CVE-2026-98298 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() In… | |
| CVE-2026-98299 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tcp: do not let tcp_rmem be set below 4096 We can hit a division by zero crash in… | |
| CVE-2026-98300 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tcp: Don't call skb_clone_and_charge_r() for close()d listener in… | |
| CVE-2026-98288 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix TSO header length truncation stmmac_tso_xmit() stores the… | |
| CVE-2026-98289 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). Commit… | |
| CVE-2026-98290 | 6 Oct 2026 | CVSS 7.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup… | |
| CVE-2026-98291 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit… | |
| CVE-2026-98292 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access… | |
| CVE-2026-98293 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() iso_get_sock() returns… | |
| CVE-2026-98294 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: Do not write to the serial port after it is closed… | |
| CVE-2026-98281 | 6 Oct 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: futex: Also allocate private hash on vfork() As Jann demonstrated, it is entirely… | |
| CVE-2026-98282 | 6 Oct 2026 | CVSS 8.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba The commit… | |
| CVE-2026-98283 | 6 Oct 2026 | CVSS 8.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()… | |
| CVE-2026-98284 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: netlink: do not free nlk->groups while lockless readers can use it… | |
| CVE-2026-98285 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix bugs caused by switchdev deletion errors Allowing… | |
| CVE-2026-98286 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown… | |
| CVE-2026-98287 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: pppoatm: ensure a writable skb header and linear data In pppoatm_send(), LLC… | |
| CVE-2026-98274 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb() PSP… | |
| CVE-2026-98275 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Ack RX overrun interrupt correctly The RX overrun… | |
| CVE-2026-98276 | 6 Oct 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: lock the socket in sock_gettstamp() sk->sk_flags must only be changed while… | |
| CVE-2026-98277 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: eth: fbnic: ring the doorbell if a burst ends in a drop fbnic_tx_map() skips the… | |
| CVE-2026-98278 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check… | |
| CVE-2026-98279 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: btrfs: handle lack of space when cleaning up verity items When enable_verity()… | |
| CVE-2026-98280 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/xe/i2c: Disable IRQ on unbind Currently, struct xe_i2c is freed before SGUnit… | |
| CVE-2026-98267 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: 9p: Fix v9fs_issue_write() to update i_size and remote_i_size Fix… | |
| CVE-2026-98268 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: perf: Fix null pointer access in is_include_guest_event() A typical module unload… | |
| CVE-2026-98269 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on failure to update inode for hole punching and… | |
| CVE-2026-98270 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before dereference… | |
| CVE-2026-98271 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: skbuff: do not leave stale header offsets after pskb_carve()… | |
| CVE-2026-98272 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: mvpp2: prevent buffer overflow in page_pool allocation The per‑processor… | |
| CVE-2026-98273 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: x86/kprobes: Fix crash when probing CS CALL instructions When using eBPF to probe… | |
| CVE-2026-98260 | 6 Oct 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: exec: Cleanup POSIX timers right after de_thread() A per-thread CPU timer holds a… | |
| CVE-2026-98261 | 6 Oct 2026 | CVSS 8.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() When a secondary… | |
| CVE-2026-98262 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY A user reported… | |
| CVE-2026-98263 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type… | |
| CVE-2026-98264 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: reset device before deleting virtqueues virtsnd_remove() and… | |
| CVE-2026-98265 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity… | |
| CVE-2026-98266 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound… | |
| CVE-2026-98254 | 6 Oct 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: swiotlb: use the adjusted address for the highmem page lookup swiotlb_bounce()… | |
| CVE-2026-98255 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the… | |
| CVE-2026-98256 | 6 Oct 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: signal: Prevent exec() race Hyunwoo debugged the following KASAN UAF splat: BUG… | |
| CVE-2026-98257 | 6 Oct 2026 | CVSS 7.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: rds: ib: use rds_conn_drop() on protocol version mismatch… | |
| CVE-2026-98258 | 6 Oct 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list Kijo… | |
| CVE-2026-98259 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: fs/dax: check zero or empty entry before converting xarray entry Calling… | |
| CVE-2026-98248 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: arm64: percpu: Fix LSE operations on {8,16}-bit types The assembly for… | |
| CVE-2026-98249 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc… | |
| CVE-2026-98250 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: nfsd: fix handling of NFSEXP_PNFS in the netlink codepath The rework of how block… | |
| CVE-2026-98251 | 6 Oct 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: openvswitch: avoid reallocating confirmed conntrack labels… | |
| CVE-2026-98252 | 6 Oct 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() iwpm_get_nlmsg_request()… | |
| CVE-2026-98253 | 6 Oct 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Serialize join and leave on copy_to_user failure rdma_join_multicast()… | |
| CVE-2026-98241 | 6 Oct 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipv6: xfrm: use full sockets in local error paths xfrm6_local_rxpmtu() and… | |
| CVE-2026-98242 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: dma-buf: Fix silent overflow for phys vec to sgt In case MMIO size is bigger than… | |
| CVE-2026-98243 | 6 Oct 2026 | CVSS 7.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3 The… | |
| CVE-2026-98244 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: btrfs: clear free space tree creation state on rebuild failure… | |
| CVE-2026-98245 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()… | |
| CVE-2026-98246 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Serialize local codec list cleanup hci_dev_close_sync()… | |
| CVE-2026-98247 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_codec: validate vendor codec count length The Read Local Supported… | |
| CVE-2026-98234 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: cap hh_flows_limit at change time hhf_change() stores… | |
| CVE-2026-98235 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: release tail references on DELACTION failure A batched… | |
| CVE-2026-98236 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value mhi_mbim_rx()… | |
| CVE-2026-98237 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain The NDP traversal in… | |
| CVE-2026-98238 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() The netif… | |
| CVE-2026-98239 | 6 Oct 2026 | CVSS 8.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: lan743x: fix RX checksum use-after-free lan743x_rx_process_buffer() adds… | |
| CVE-2026-98240 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: initialize `options_len` before referencing options The following… | |
| CVE-2026-98228 | 6 Oct 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ On I6500 CPU… | |
| CVE-2026-98229 | 6 Oct 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfrm: save input state data before secpath resets xfrm_input() stores the current… | |
| CVE-2026-98230 | 6 Oct 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfrm: use hlist_del_init_rcu for state_cache and state_cache_input Commit… | |
| CVE-2026-98231 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfrm: serialize state GC with device state flush The deferred-device pass in… | |
| CVE-2026-98232 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable() scsi_cdl_enable()… | |
| CVE-2026-98233 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 ("net/packet… | |
| CVE-2026-98221 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix tpm2_load_cmd() boundary check tpm2_load_cmd() does boundary… | |
| CVE-2026-98222 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KEYS: encrypted: fix integer overflow of datablob_len encrypted_key_alloc()… | |
| CVE-2026-98223 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: mm: filemap: retain mapped dropbehind folios Fault-around can map ready… | |
| CVE-2026-98224 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: mm/vma: correctly unaccount on mmap_prepare() failure __mmap_setup() accounts… | |
| CVE-2026-98225 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: mm/shrinker: fix bogus set_shrinker_bit() with cgroup.memory=nokmem With… | |
| CVE-2026-98226 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count… | |
| CVE-2026-98227 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: memstick: ms_block: destroy io_queue workqueue on removal msb_init_disk() creates… | |
| CVE-2026-98215 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: selinux: preserve user SID across nested backing files SELinux saves the user… |
Page 114 of 168