[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-97987 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: virtio_input: reset device if input_register_device() fails Probe marks the… | |
| CVE-2026-97988 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring access on IOTLB transitions When VIRTIO_F_ACCESS_PLATFORM… | |
| CVE-2026-97972 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: macb: put the "mdio" child node reference on success macb_mii_init() holds… | |
| CVE-2026-97973 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: macb: destroy the phylink instance on the probe error path macb_mii_init()… | |
| CVE-2026-97974 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipv6: null-check fib6_node before accessing in __ip6_del_rt_siblings() syzbot… | |
| CVE-2026-97975 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del() A NULL pointer… | |
| CVE-2026-97976 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: validate packet_len before skb_put_data… | |
| CVE-2026-97977 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Fix UAF of btusb_data by rx_work btusb_close() and… | |
| CVE-2026-97978 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: eth: ice: don't dereference pointers from TP_printk() After forwarding net-next… | |
| CVE-2026-97979 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ice: add missing xa_destroy for sched_node_ids Commit 16dfa49406bc ("ice… | |
| CVE-2026-97963 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: stmmac: initialize ptp_lock at probe time priv->ptp_lock is only initialized… | |
| CVE-2026-97964 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ppp_synctty: ensure a writeable skb header ppp_sync_txmunge() checks headroom… | |
| CVE-2026-97965 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: vxlan: initialize _md in vxlan_xmit_one() If a VXLAN device is configured with… | |
| CVE-2026-97966 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: reset HTB scheduler topology before freeing queues HTB offload… | |
| CVE-2026-97967 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-cpro) Remove debugfs entries when probe fails ccp_debugfs_init()… | |
| CVE-2026-97968 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-cpro) Create debugfs entries after hwmon registration… | |
| CVE-2026-97969 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Fix clock leak and spurious timer in settimeout()… | |
| CVE-2026-97970 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Avoid division by zero clk_get_rate() could return 0. Avoid a… | |
| CVE-2026-97971 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: nstree: check listing permission before taking a namespace reference… | |
| CVE-2026-97954 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/rds: fix tcp stream corruption with large pages rds_message_map_pages()… | |
| CVE-2026-97955 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: mana: restore the XDP program pointer when pre-allocation fails… | |
| CVE-2026-97956 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: net_failover: Fix the deadlock in net_failover_slave_name_change() This is a… | |
| CVE-2026-97957 | 25 Sep 2026 | CVSS 8.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: hinic: fix mailbox segment buffer overflow check_mbox_seq_id_and_seg_len()… | |
| CVE-2026-97958 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain(). If a netlink… | |
| CVE-2026-97959 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: cls_route: free emptied bucket on filter move route4_change can move… | |
| CVE-2026-97960 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Prevent drain_pebs() reentry The PEBS buffer is shared by all… | |
| CVE-2026-97961 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: perf/core: Allow list_del during perf_event_overflow() A PMU might use… | |
| CVE-2026-97962 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Move representor vnic reporter to eswitch devlink port The representor… | |
| CVE-2026-97946 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Fix PCI device reference counting in amd_smn_init() The local… | |
| CVE-2026-97947 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Fix potential NULL pointer dereference amd_smn_read/write() are… | |
| CVE-2026-97948 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver The… | |
| CVE-2026-97949 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: configfs: unhash the dentry before dropping the item in rmdir… | |
| CVE-2026-97950 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry… | |
| CVE-2026-97951 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands When a LUN_RESET… | |
| CVE-2026-97952 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: sunvdc: unmap LDC cookies when the descriptor send fails __send_request() maps… | |
| CVE-2026-97953 | 25 Sep 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix TX descriptor availability check for TSO traffic… | |
| CVE-2026-97937 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ftrace: fork: Initialize function graph state before copy_exec_state()… | |
| CVE-2026-97938 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: reboot: fix cad_pid use-after-free race cad_pid is a single kernel-wide struct… | |
| CVE-2026-97939 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipmr: account multicast table and route memory A netadmin in a user+net namespace… | |
| CVE-2026-97940 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipv6: fix fib6 walker UAF on seq stop ipv6_route_iter_active() treats a walker in… | |
| CVE-2026-97941 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: mm/slab: take n->list_lock in __slab_try_return_freelist() to avoid race Commit… | |
| CVE-2026-97942 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: x86/alternatives: Exclude text poking against change_page_attr() From time to… | |
| CVE-2026-97943 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF x86 implements… | |
| CVE-2026-97944 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: x86/cfi: Fix FineIBT hash offset in cfi_get_func_hash() The switch of the FineIBT… | |
| CVE-2026-97945 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix user-space data loss with MADV_FREE and THP Some of users of Polars… | |
| CVE-2026-97928 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip the VMID 0 flush for VRAM Clear-on-release only runs on VRAM… | |
| CVE-2026-97929 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: usbusx2y: validate URB actual_length in interrupt callback… | |
| CVE-2026-97930 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf The in04_last… | |
| CVE-2026-97931 | 25 Sep 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: us122l: Prevent write upgrades for read mappings The hwdep mmap callback… | |
| CVE-2026-97932 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tracing: Don't dereference trace_event_file in deferred trigger free The… | |
| CVE-2026-97933 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tracing: Take trace_array reference when opening a tracer options file When a… | |
| CVE-2026-97934 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory corruption from a "STACKTRACE" histogram key "cpu", "CPU"… | |
| CVE-2026-97935 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tracing: Set the trace clock before registering the histogram trigger… | |
| CVE-2026-97936 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory corruption from the histogram stacktrace modifier… | |
| CVE-2026-97920 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tracing: Keep the entry count when the histogram stats allocation fails… | |
| CVE-2026-97921 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram the field rejected for a bad modifier Writing a hist… | |
| CVE-2026-97922 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram var refs regardless of how often they are referenced… | |
| CVE-2026-97923 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram the var ref when its initialization fails… | |
| CVE-2026-97924 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Don't destroy fields when event removal fails… | |
| CVE-2026-97925 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tick/broadcast: Plug clockevents replacement race 朱恺乾 reported and decoded the… | |
| CVE-2026-97926 | 25 Sep 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ufs: validate cylinder group metadata before caching it ufs_read_cylinder()… | |
| CVE-2026-97927 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ufs: create the root dentry after loading cylinder metadata ufs_fill_super()… | |
| CVE-2026-97911 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM region size matches job It is possible for userspace… | |
| CVE-2026-97912 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM size is 0 on mapping failure On a mapping failure of… | |
| CVE-2026-97913 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure cmd stream ends with a stop op While the QSIZE register… | |
| CVE-2026-97914 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix ethosu_job_open() return value A WARN_ON() returns a 0 or 1… | |
| CVE-2026-97915 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Limit firmware log name prints to field size The name in struct… | |
| CVE-2026-97916 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Validate firmware log buffer metadata The tracing log headers parsed… | |
| CVE-2026-97917 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr Add a size parameter… | |
| CVE-2026-97918 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tracing: Undo the registration when enabling the histogram trigger fails Commit… | |
| CVE-2026-97919 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tracing: Take the reference before publishing the named histogram trigger… | |
| CVE-2026-97902 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: fs: don't return -EINVAL for successful nested thaw Commit 7366f8b6fc6a ("fs… | |
| CVE-2026-97903 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: exit: hold a reference to thread_pid across proc_flush_pid Commit 0a36bad01731… | |
| CVE-2026-97904 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: cpufreq: initialize policy rwsem before sysfs publication cpufreq_policy_alloc()… | |
| CVE-2026-97905 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: cpufreq: zero-initialize policy cpumask before sysfs publication… | |
| CVE-2026-97906 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in… | |
| CVE-2026-97907 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 When… | |
| CVE-2026-97908 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev The command… | |
| CVE-2026-97909 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ASoC: sti: initialize IRQ lock before requesting IRQ uni_reader_init() registers… | |
| CVE-2026-97910 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ASoC: sprd: validate compress buffer sizes against fixed allocations… | |
| CVE-2026-97618 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: io_uring/net: don't overconsume buffers when using MSG_TRUNC When a recv/recvmsg… | |
| CVE-2026-97619 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: io_uring/rw: end write accounting from ->ki_complete Commit b000145e9907 moved… | |
| CVE-2026-97620 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches… | |
| CVE-2026-97621 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogix_dp: fix unchecked bound endpoint name length… | |
| CVE-2026-97875 | 25 Sep 2026 | CVSS 8.1 | rojo-rbx rojoRojo's "rojo serve" HTTP API (default port 34872) has no Host/Origin header validation, making it vulnerable to DNS rebinding. A malicious webpage… | |
| CVE-2026-97899 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix memory leak in query_perf_config_list() When krealloc() fails, free… | |
| CVE-2026-97900 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/drm_exec: fix up contended obj when num_objects is 0 drm_exec_prepare_array()… | |
| CVE-2026-97901 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: genetlink: pin family module during policy dump The generic netlink controller's… | |
| CVE-2026-97610 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfs: Fix uninitialized return value in netfs_unbuffered_write() If preparation… | |
| CVE-2026-97611 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix use-after-free of the flow table mask array… | |
| CVE-2026-97612 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: mpls: clear inner_protocol when the last label is popped skb_mpls_push()… | |
| CVE-2026-97613 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: mana: Reserve extra CQ slot for the fence completion CQE The RX completion… | |
| CVE-2026-97614 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: dsa: tag_brcm: legacy FCS: request needed tailroom The legacy FCS tagger… | |
| CVE-2026-97615 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: bridge: use option bits for CFM/MRP frame handlers CFM and MRP register a… | |
| CVE-2026-97616 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: release all action references on NEWACTION failure When a… | |
| CVE-2026-97617 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ring-buffer: Check resize_disabled before publishing the new subbuf order… | |
| CVE-2026-97604 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: fbdev: vfb: defer cleanup until the last reference FBIOGETCMAP takes a shallow… | |
| CVE-2026-97605 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: erofs: preserve LZMA decoders on resize failure The pool-resize path frees each… | |
| CVE-2026-97606 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: fs: autofs: fix memory leak in autofs_fill_super() In autofs_fill_super(), we… | |
| CVE-2026-97607 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: vdpa: ifcvf: Put device on unsupported feature error Route unsupported… |
Page 155 of 168