[ Vendor · 1,350 CVEs ]
Linux
CVEs affecting Linux published in the last 30 days, plus any Linux CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-98762 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: USB: dwc2: shut down wakeup timer before freeing HCD state dwc2_wakeup_detected()… | |
| CVE-2026-98763 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: usb: core: clear both ep_in and ep_out for non-ep0 control endpoints In… | |
| CVE-2026-98764 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC When… | |
| CVE-2026-98765 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: USB: gadget: dummy-hcd: Fix wait for outstanding request completions The… | |
| CVE-2026-98766 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wake_work is armed… | |
| CVE-2026-98767 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: fix IRQ storm on invalid event buffer count When… | |
| CVE-2026-98768 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: usb: typec: anx7411 - stop the IRQ before destroying the workqueue The IRQ is… | |
| CVE-2026-98769 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd… | |
| CVE-2026-98770 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: usb: gadget: midi2: Fix the jack descriptor array sizes The jack in/out… | |
| CVE-2026-98753 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tty: tty_port: restore TTY_IO_ERROR on activation failure Make sure to restore… | |
| CVE-2026-98754 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup vcc_cleanup()… | |
| CVE-2026-98755 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tty: vcc: zero-initialize control packet in vcc_send_ctl() The stack-allocated… | |
| CVE-2026-98756 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe The Cadence USBSS… | |
| CVE-2026-98757 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix use-after-free in cdns3_gadget_exit() cdns3_gadget_start() arms… | |
| CVE-2026-98758 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix use-after-free of ucsi on remove The pmic_glink… | |
| CVE-2026-98759 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()… | |
| CVE-2026-98760 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()… | |
| CVE-2026-98761 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: recover after failure to start the frs ams Reset the port if… | |
| CVE-2026-98743 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type… | |
| CVE-2026-98744 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: max98363: fix uninitialized stream_config->type stream_config is… | |
| CVE-2026-98745 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems When… | |
| CVE-2026-98746 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() of_clk_get()… | |
| CVE-2026-98747 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: serial: core: fix NULL pointer dereference in serial_core_unregister_port()… | |
| CVE-2026-98748 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: serial: 8250_bcm7271: fix use-after-free in brcmuart_remove()… | |
| CVE-2026-98749 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tty: serial: max3100: shut down timer before freeing port max3100_shutdown()… | |
| CVE-2026-98750 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tty: fix saved termios reset race Resetting saved termios state on device… | |
| CVE-2026-98751 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tty: abort break signalling on hangup The break ioctls can race with hangup and… | |
| CVE-2026-98752 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tty: port: fix tty_port_tty_vhangup() race Drivers rely on tty_port_tty_vhangup()… | |
| CVE-2026-98734 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown… | |
| CVE-2026-98735 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Serialize ACL scheduling with channel deletion… | |
| CVE-2026-98736 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Lock parent access during enhanced SCO setup Bluetooth… | |
| CVE-2026-98737 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix inquiry cache use-after-free The sync command worker… | |
| CVE-2026-98738 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: Serialize SMP remote OOB data access build_pairing_cmd() looks up… | |
| CVE-2026-98739 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix initial port reference race For RFCOMM_RELEASE_ONHUP… | |
| CVE-2026-98740 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Drop __init from ECC setup paths for re-probe safety Sashiko… | |
| CVE-2026-98741 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: ua101: reject mismatched capture/playback packet sizes detect_usb_format()… | |
| CVE-2026-98742 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize compat port-info ioctls The native sequencer ioctl path… | |
| CVE-2026-98724 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: reject too-short SGL segments The host controls an SGL segment's… | |
| CVE-2026-98725 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()… | |
| CVE-2026-98726 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix underflow in ANA log bounds checks The number of ANA groups… | |
| CVE-2026-98727 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known The… | |
| CVE-2026-98728 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tpm: fix off-by-four bounds check in tpm2_get_random() When the response carries… | |
| CVE-2026-98729 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h get_align_mask()… | |
| CVE-2026-98730 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()… | |
| CVE-2026-98731 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() plen is… | |
| CVE-2026-98732 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: fix buffer over-read in btintel_hw_error() The "Exception… | |
| CVE-2026-98733 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Serialize fragmented ISO packet queueing The fragmented path… | |
| CVE-2026-98715 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN Don't… | |
| CVE-2026-98716 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted… | |
| CVE-2026-98717 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy When… | |
| CVE-2026-98718 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state… | |
| CVE-2026-98719 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it Nullify… | |
| CVE-2026-98720 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified Force… | |
| CVE-2026-98721 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ The Cadence… | |
| CVE-2026-98722 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: mtd: block2mtd: Fix divide error when erase_size is zero The erase size is parsed… | |
| CVE-2026-98723 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: nvmet: copy the hostid into the ctrl before creating PR pc_refs Commit… | |
| CVE-2026-98705 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: account proxy paths against the mesh path limit Proxy-path churn… | |
| CVE-2026-98706 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drain PS delivery work during station teardown Removing an AP or… | |
| CVE-2026-98707 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: shut down RX BA session timer on teardown Tearing down an RX BA… | |
| CVE-2026-98708 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: keep paired old chanctx alive An in-place replacement keeps… | |
| CVE-2026-98709 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: count only matching reservations in reserved switch… | |
| CVE-2026-98710 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: iwlegacy: 3945: free EEPROM data on remove il3945_pci_probe() calls… | |
| CVE-2026-98711 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: cw1200: fix TX padding OOB read leaking heap data to device The TX path… | |
| CVE-2026-98712 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq Referencing… | |
| CVE-2026-98713 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT FGUs don't actually… | |
| CVE-2026-98714 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded Leave… | |
| CVE-2026-98696 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: USB: serial: fix driver deregistration order USB serial driver modules register… | |
| CVE-2026-98697 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: USB: serial: fix dynamic id driver deregistration race Only free the dynamic ids… | |
| CVE-2026-98698 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: handle empty FILS association request payload… | |
| CVE-2026-98699 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix mesh fast xmit path deletion UAF mesh_fast_tx_cache() stores… | |
| CVE-2026-98700 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: set info->band for 802.3 encap offload frames Unlike the 802.11… | |
| CVE-2026-98701 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: release mesh path quota on failed additions Repeated failed or… | |
| CVE-2026-98702 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject invalid 320 MHz CSA bandwidth The HT/VHT channel… | |
| CVE-2026-98703 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: minstrel_ht: validate fixed rate index The fixed_rate_idx debugfs… | |
| CVE-2026-98704 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: keep fallback association elements alive Associating to a… | |
| CVE-2026-98687 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject oversized XDomain properties responses… | |
| CVE-2026-98688 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix NULL dereference in tb_remove_work() There is a slight race… | |
| CVE-2026-98689 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: thunderbolt: Don't access a DP tunnel after its DPRX read was canceled… | |
| CVE-2026-98690 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix domain reference leak when DPRX read is canceled… | |
| CVE-2026-98691 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: thunderbolt: Tear down inactive DP tunnels when the domain is stopped tb_stop()… | |
| CVE-2026-98692 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: thunderbolt: Make the DP tunnel activation callback mandatory… | |
| CVE-2026-98693 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: thunderbolt: Hold a router reference for each allocated HopID tb_stop() drops the… | |
| CVE-2026-98694 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix KASAN reported use-after-free when request is canceled Alan… | |
| CVE-2026-98695 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: USB: serial: fix ioctl hangup race The tty ioctls can race with hangup and end up… | |
| CVE-2026-98677 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fix use-after-free on unbind ad_sd_buffer_postenable()… | |
| CVE-2026-98678 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4030: fix invalid oversampling_ratio validation In… | |
| CVE-2026-98679 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not… | |
| CVE-2026-98680 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: iio: accel: kionix-kx022a: Prevent memory leak and fix state The driver allocates… | |
| CVE-2026-98681 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races The… | |
| CVE-2026-98682 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: drain and invalidate before server-side copy/clone… | |
| CVE-2026-98683 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: flush dirty data before zeroing a range smb3_zero_range() emulates… | |
| CVE-2026-98684 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: flush and commit data before querying allocated ranges The mode 0 /… | |
| CVE-2026-98685 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache when extending a file via clone range… | |
| CVE-2026-98686 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache when extending a file via zero range… | |
| CVE-2026-98668 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: iio: buffer: Ensure bounce buffer used for unaligned case is zeroed… | |
| CVE-2026-98669 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: iio: buffer: serialize buffer teardown with mode claims Buffer-mode claims hold… | |
| CVE-2026-98670 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind The… | |
| CVE-2026-98671 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure If… | |
| CVE-2026-98672 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: iio: adc: stm32-adc: fix possible division by zero in processed channel In case… | |
| CVE-2026-98673 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: iio: adc: pac1934: check ACPI label duplication A label duplication failure… |
Page 2 of 14