[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-97511 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: avoid out-of-bounds access in monitor In NAN, we don't know on… | |
| CVE-2026-97494 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw Change… | |
| CVE-2026-97495 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on allocate_doorbell allocated_doorbell has an option to… | |
| CVE-2026-97496 | 24 Sep 2026 | CVSS 7.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in get_wave_state() The get_wave_state()… | |
| CVE-2026-97497 | 24 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id… | |
| CVE-2026-97498 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction mqd and fw objects… | |
| CVE-2026-97499 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: coresight: perf: Retrieve path and source from event data ETM perf callbacks… | |
| CVE-2026-97500 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report… | |
| CVE-2026-97501 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction… | |
| CVE-2026-97502 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: mmc: davinci: avoid NULL deref of host->data in IRQ handler mmc_davinci_irq()… | |
| CVE-2026-97485 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: omfs: handle set_blocksize failures omfs uses buffer_heads, which don't handle… | |
| CVE-2026-97486 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: hpfs: handle set_blocksize failures hpfs uses buffer_heads, which don't handle… | |
| CVE-2026-97487 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: jfs: handle set_blocksize failures jfs uses buffer_heads, which don't handle… | |
| CVE-2026-97488 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: qnx4: handle set_blocksize failures qnx4 uses buffer_heads, which don't handle… | |
| CVE-2026-97489 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bfs: handle set_blocksize failures bfs uses buffer_heads, which don't handle… | |
| CVE-2026-97490 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: affs: handle set_blocksize failures affs uses buffer_heads, which don't handle… | |
| CVE-2026-97491 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/rds: Don't sleep inside rds_ib_conn_path_shutdown New rds rdma self tests… | |
| CVE-2026-97492 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed In… | |
| CVE-2026-97493 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Bound GPIO I2C table entry count from VBIOS Reject undersized tables… | |
| CVE-2026-97477 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() When… | |
| CVE-2026-97478 | 24 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: virt: acrn: Fix irqfd use-after-free during eventfd shutdown… | |
| CVE-2026-97479 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: driver core: Avoid warning when removing a device while its supplier is unbinding… | |
| CVE-2026-97480 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: protect against NULL uart->port.dev in register… | |
| CVE-2026-97481 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix possible ISR soft lockup There are rare cases in which the host… | |
| CVE-2026-97482 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log… | |
| CVE-2026-97483 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: usb: core: hcd: fix possible deadlock in rh control transfers >From within the… | |
| CVE-2026-97484 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: usbip: vhci_hcd: fix NULL deref in status_show_vhci platform_get_drvdata() can… | |
| CVE-2026-97456 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix condition check in acpi_ps_parse_loop() Fix condition check for… | |
| CVE-2026-97472 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: fix temp address generation after prefix deprecation When a… | |
| CVE-2026-97473 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() When… | |
| CVE-2026-97474 | 24 Sep 2026 | CVSS 7.4 | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: purge async notifications upon nic error This fixes a kernel… | |
| CVE-2026-97475 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: thermal/drivers/tegra/soctherma: Switch to devm cooling device registration Use… | |
| CVE-2026-97476 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: rds: filter RDS_INFO_* getsockopt by caller's netns The RDS_INFO_* family of… | |
| CVE-2026-97448 | 24 Sep 2026 | CVSS 7.7 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ACPICA: Add validation for node in acpi_ns_build_normalized_path() Add validation… | |
| CVE-2026-97449 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ACPICA: Add package limit checks in parser functions Add package limit checks in… | |
| CVE-2026-97450 | 24 Sep 2026 | CVSS 8.4 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ACPICA: validate handler object type in two places ACPICA: validate handler… | |
| CVE-2026-97451 | 24 Sep 2026 | CVSS 8.4 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) Add overflow… | |
| CVE-2026-97452 | 24 Sep 2026 | CVSS 8.4 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ACPICA: Prevent adding invalid references Prevent adding references for local… | |
| CVE-2026-97453 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ACPICA: validate byte_count in acpi_ps_get_next_package_length() Validate package… | |
| CVE-2026-97454 | 24 Sep 2026 | CVSS 7.7 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in acpi_ps_get_next_field() Add boundary checks in… | |
| CVE-2026-97455 | 24 Sep 2026 | CVSS 8.4 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() Fix… | |
| CVE-2026-97439 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib [BUG] A corrupted… | |
| CVE-2026-97440 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure… | |
| CVE-2026-97441 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ata: ahci: fail probe if BAR too small for claimed ports When an AHCI controller… | |
| CVE-2026-97442 | 24 Sep 2026 | CVSS 8.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi In certain… | |
| CVE-2026-97443 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: perf/ftrace: Fix WARNING in __unregister_ftrace_function… | |
| CVE-2026-97444 | 24 Sep 2026 | CVSS 7.7 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in two places Add boundary checks in… | |
| CVE-2026-97445 | 24 Sep 2026 | CVSS 7.7 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() Enhance buffer… | |
| CVE-2026-97446 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package()… | |
| CVE-2026-97447 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() Enhance… | |
| CVE-2026-97430 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xhci: Prevent queuing new commands if xhci is inaccessible Refuse to queue a new… | |
| CVE-2026-97431 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid DPMS-on for phantom stream [Why & How] Calling… | |
| CVE-2026-97432 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix P2P-Device binding handling Our binding handling for… | |
| CVE-2026-97433 | 24 Sep 2026 | CVSS 8.2 | LinuxIn the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while… | |
| CVE-2026-97434 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix handling of NAPI on the remove path All the NAPI instances for… | |
| CVE-2026-97435 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: flower: reject cross-chip redirect dsa_port_from_netdev() may… | |
| CVE-2026-97436 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: rework FDB management on the bridge leave path On bridge leave, the… | |
| CVE-2026-97437 | 24 Sep 2026 | CVSS 7.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e() The bounds… | |
| CVE-2026-97438 | 24 Sep 2026 | CVSS 7.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate index entry key bounds [BUG] A malformed NTFS directory index… | |
| CVE-2026-97422 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix SMI event cross-process information leak kfd_smi_ev_enabled()… | |
| CVE-2026-97423 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access construct_region() reads… | |
| CVE-2026-97424 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq… | |
| CVE-2026-97425 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix buffer overflow during vBIOS update Clamp the buffer postion to… | |
| CVE-2026-97426 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error Return… | |
| CVE-2026-97427 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: bound pp_dpm_set_pp_table() memcpy The powerplay path allocates… | |
| CVE-2026-97428 | 24 Sep 2026 | CVSS 7.7 | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: harden FRU PIA parsing with bounded helpers Replace the open-coded… | |
| CVE-2026-97429 | 24 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix UAF race in destroy_queue_cpsch wait_on_destroy_queue() drops… | |
| CVE-2026-97414 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in… | |
| CVE-2026-97415 | 24 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF ROOT_REF and… | |
| CVE-2026-97416 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()… | |
| CVE-2026-97417 | 24 Sep 2026 | CVSS 7.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() The… | |
| CVE-2026-97418 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: es18xx: check control allocation before private data setup… | |
| CVE-2026-97419 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: hsr: broadcast netlink notifications in the device's net namespace The HSR… | |
| CVE-2026-97420 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: NUL-terminate replaced sysctl value When writing to sysctls… | |
| CVE-2026-97421 | 24 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()… | |
| CVE-2026-97231 | 24 Sep 2026 | CVSS 7.3 | volotat AnagnorisisA vulnerability was found in volotat Anagnorisis up to 0.3.1/0.4.0. Affected is an unknown function of the file app.py of the component Socket.IO… | |
| CVE-2026-97407 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt… | |
| CVE-2026-97408 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate connectionless PSM length Connectionless L2CAP frames… | |
| CVE-2026-97409 | 24 Sep 2026 | CVSS 8.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: nvme-fc: Do not cancel requests in io target before it is initialized A new… | |
| CVE-2026-97410 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: netconsole: take target_cleanup_list_lock in drop_netconsole_target()… | |
| CVE-2026-97411 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in mal_remove() napi_disable() is… | |
| CVE-2026-97412 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: pds_core: quiesce DMA before freeing resources pdsc_teardown() frees DMA buffers… | |
| CVE-2026-97413 | 24 Sep 2026 | CVSS 9.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write usr_len is… | |
| CVE-2026-94606 | 24 Sep 2026 | CVSS 8.9 | goauthentik authentikauthentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik email authenticator enrollment during an… | |
| CVE-2026-94609 | 24 Sep 2026 | CVSS 8.8 | goauthentik authentikauthentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an account with delegated permission to manage a group… | |
| CVE-2026-94611 | 24 Sep 2026 | CVSS 8.1 | goauthentik authentikauthentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik API serializers return stored credentials when an… | |
| CVE-2026-94612 | 24 Sep 2026 | CVSS 7.4 | goauthentik authentikauthentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an authentik SAML Source verifies an assertion's signature… | |
| CVE-2026-94613 | 24 Sep 2026 | CVSS 7.5 | goauthentik authentikauthentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an unauthenticated attacker can submit a malformed SAML… | |
| CVE-2026-93824 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tls: reject the combination of TLS and sockmap TLS and sockmap (BPF psock)… | |
| CVE-2026-93825 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data()… | |
| CVE-2026-93826 | 24 Sep 2026 | CVSS 7.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: HID: hidpp: fix potential UAF in hidpp_connect_event() If input_register_device()… | |
| CVE-2026-93827 | 24 Sep 2026 | CVSS 8.4 | LinuxIn the Linux kernel, the following vulnerability has been resolved: virtio-fs: avoid double-free on failed queue setup virtio_fs_setup_vqs()… | |
| CVE-2026-93828 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: exfat: fix handling of damaged volume in exfat_create_upcase_table() When the… | |
| CVE-2026-93829 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix races in cifsd thread creation The cifsd demultiplex thread can… | |
| CVE-2026-93830 | 24 Sep 2026 | CVSS 7.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask Enabling the RX… | |
| CVE-2026-94281 | 24 Sep 2026 | CVSS 6.5 | x.org libXiAn out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X… | |
| CVE-2026-93815 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: au1000: move free_irq out of the close-time spinlocked section… | |
| CVE-2026-93816 | 24 Sep 2026 | CVSS 7.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: f2fs: validate inline dentry name lengths before conversion Inline dentry… | |
| CVE-2026-93817 | 24 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: perf: Fix addr_filter_ranges lifetime Lee Jia Jie reported that since… | |
| CVE-2026-93818 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: PCI: plda: Protect root bus removal with rescan lock Hold the… |
Page 159 of 168