[ Vendor · 1,350 CVEs ]
Linux
CVEs affecting Linux published in the last 30 days, plus any Linux CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-98471 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do cache maintenance on the source VM during intra-host migration… | |
| CVE-2026-98472 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV… | |
| CVE-2026-98473 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config… | |
| CVE-2026-98474 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing device lock in zpci_report_status() When pdev is non-NULL… | |
| CVE-2026-98456 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix race in read_unconf_index_list() read_unconf_index_list()… | |
| CVE-2026-98457 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate frame length before control and FCS access… | |
| CVE-2026-98458 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: release unused CIS holds after channel attach hci_bind_cis() and… | |
| CVE-2026-98459 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: balance the parent hold in hci_bind_bis() hci_conn_link() takes a… | |
| CVE-2026-98460 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: reject out-of-range OCF values The raw HCI socket security… | |
| CVE-2026-98461 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: validate event length before filtering is_filtered_packet()… | |
| CVE-2026-98462 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: fix CIS hold ownership on reuse Commit 69997d50ec57… | |
| CVE-2026-98463 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags… | |
| CVE-2026-98464 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Synchronize hrtimer callback during teardown The non-Sstc hrtimer… | |
| CVE-2026-98465 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Serialize IMSIC attributes with vCPU migration KVM device ioctls are… | |
| CVE-2026-98447 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots LOLLM… | |
| CVE-2026-98448 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: release orphanage dir inode if chown fails LOLLM points out that we leak the… | |
| CVE-2026-98449 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: delete compound mids on send failure before unlock When sending a… | |
| CVE-2026-98450 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: close completed creates on compound wait errors compound_send_recv()… | |
| CVE-2026-98451 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: use finish_no_open() for non-regular inodes An O_CREAT open can find… | |
| CVE-2026-98452 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: clean up failed cached directory opens open_cached_dir() sends… | |
| CVE-2026-98453 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: close handle after create-context parsing failure SMB2_open()… | |
| CVE-2026-98454 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context out-of-bounds reads smb2_parse_contexts()… | |
| CVE-2026-98455 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO The… | |
| CVE-2026-98440 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction We… | |
| CVE-2026-98441 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: avoid modifying shared unconfirmed ct entry In a case where… | |
| CVE-2026-98442 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix helper UAF due to extensions realloc While calling the… | |
| CVE-2026-98443 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: fix cursor and pointer handling when recovering iunlink buckets LOLLM… | |
| CVE-2026-98444 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: drop dquot flush lock when we can't find a buffer to flush LOLLM noticed… | |
| CVE-2026-98445 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: don't let memory failures leak blocks and kill repairs LOLLM complains that… | |
| CVE-2026-98446 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: don't let hidden_space go negative in xfs_metafile_resv_init LOLLM points… | |
| CVE-2026-98433 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure In… | |
| CVE-2026-98434 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in proc_dointvec_ms_jiffies_minmax Add the range check to… | |
| CVE-2026-98435 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Use parent device for devres in altr_portb_setup() Anchor the devres… | |
| CVE-2026-98436 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer exporting Device buffers are never intended… | |
| CVE-2026-98437 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pm_runtime_resume_and_get()… | |
| CVE-2026-98438 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcp_write_data_fin When sending a DATA_FIN… | |
| CVE-2026-98439 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async request may… | |
| CVE-2026-99999 | 15 Oct 2026 | CVSS 9.3 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad… | |
| CVE-2026-98432 | 15 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock()… | |
| CVE-2026-98424 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: undo netns switch if renaming the wiphy fails Once all the… | |
| CVE-2026-98425 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't warn when an IBSS has no channel to scan… | |
| CVE-2026-98426 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path… | |
| CVE-2026-98427 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: codel: bound the dropping loop per dequeue call The CoDel control law… | |
| CVE-2026-98428 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: usb: 6fire: Avoid embedded URBs The USB 6fire driver uses URBs embedded in… | |
| CVE-2026-98429 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Keep EQ resources alive while IRQ is registered The completion IRQ… | |
| CVE-2026-98430 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Keep admin queues alive while IRQ is registered The management IRQ… | |
| CVE-2026-98431 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency Commit… | |
| CVE-2026-98417 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: xfrm: reject unrepresentable espintcp transport headers ESP-in-TCP can hand… | |
| CVE-2026-98418 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: sched/core: Avoid false migration warning for proxy donors Proxy execution can… | |
| CVE-2026-98419 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix out-of-bounds write in reset_per_cpu_data() In… | |
| CVE-2026-98420 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ksmbd: follow SMB2 session expiration semantics ksmbd_session_register() destroys… | |
| CVE-2026-98421 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: require a peer station for TDLS setup confirm It's nonsense for… | |
| CVE-2026-98422 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown On ifup, AP_VLAN… | |
| CVE-2026-98423 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping The code… | |
| CVE-2026-98409 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: watchdog: rtd119x: Avoid division by zero clk_get_rate() could return 0. Avoid a… | |
| CVE-2026-98410 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog… | |
| CVE-2026-98411 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() If… | |
| CVE-2026-98412 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() If memory… | |
| CVE-2026-98413 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: selinux: always fill AVC decision in avc_has_perm_noaudit()… | |
| CVE-2026-98414 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: memcg: avoid charging the root memcg from obj_cgroup_charge_pages()… | |
| CVE-2026-98415 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node The… | |
| CVE-2026-98416 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: fix NULL dereference in… | |
| CVE-2026-98400 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in kdump without re-IPL parm block Some IPL types, like… | |
| CVE-2026-98401 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: iptunnel: fix stale transport header during tunnel decapsulation Syzbot… | |
| CVE-2026-98402 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: icmp: avoid invalid transport header access in icmp_send tracepoint syzbot… | |
| CVE-2026-98403 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/boot: Avoid IPL parameter append past command line A command line may occupy… | |
| CVE-2026-98404 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()… | |
| CVE-2026-98405 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check in parse_posix_sids() In… | |
| CVE-2026-98406 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver… | |
| CVE-2026-98407 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix heap OOB write on key removal When a key is removed (data ==… | |
| CVE-2026-98408 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: watchdog: rzv2h: Avoid division by zero clk_get_rate() could return 0. Avoid a… | |
| CVE-2026-98392 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one Valid indices into… | |
| CVE-2026-98393 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: ipv4: Fix UDP length overflow with PMTU discover and big MTU This commit… | |
| CVE-2026-98394 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer… | |
| CVE-2026-98395 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit When… | |
| CVE-2026-98396 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare() KUAP means… | |
| CVE-2026-98397 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: hold device reference for secondary fwnode… | |
| CVE-2026-98398 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: locking/lockdep: Invalidate stale class_cache entries for zapped classes syzbot… | |
| CVE-2026-98399 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block Unlike kdump… | |
| CVE-2026-98386 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot For QLAFX00 the… | |
| CVE-2026-98387 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix skcipher_walk return code handling in aes_s390 The return codes… | |
| CVE-2026-98388 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: exec: do_close_on_exec() before taking exec_update_lock do_close_on_exec()… | |
| CVE-2026-98389 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip gfx switch_power_profile during GPU reset During resume from GPU… | |
| CVE-2026-98390 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Avoid divide by zero on virtualized systems On a virtualized… | |
| CVE-2026-98391 | 14 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/xe: Guard page-fault worker with runtime PM check During VM teardown, the… | |
| CVE-2026-98385 | 12 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple sched_cache_group from mm to fix UAF Currently the sched… | |
| CVE-2026-98377 | 9 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: vlan: require the MAC header to be present in __vlan_insert_inner_tag()… | |
| CVE-2026-98378 | 9 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled links in link iterator bpf_link_prime() inserts a link into… | |
| CVE-2026-98379 | 9 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_rpfilter: reject routes without inet6_dev ip6_route_lookup() can… | |
| CVE-2026-98380 | 9 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: reject IDR error pointers when deleting actions tcf_action_delete()… | |
| CVE-2026-98381 | 9 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: veth: manage XDP program pointers during channel resize veth_set_channels() tears… | |
| CVE-2026-98382 | 9 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on other devices __bpf_offload_dev_match()… | |
| CVE-2026-98383 | 9 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL An LWT_SEG6LOCAL program can… | |
| CVE-2026-98384 | 9 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() sk_protocol… | |
| CVE-2026-98375 | 9 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header… | |
| CVE-2026-98376 | 9 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Use array_map_meta_equal for percpu array inner map replacement… | |
| CVE-2026-98374 | 7 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() When… | |
| CVE-2026-98373 | 7 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: preserve mremap address delta when skipping page tables… | |
| CVE-2026-98368 | 6 Oct 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: esp: downgrade zerocopy managed frags before mutating skb frags On the… | |
| CVE-2026-98369 | 6 Oct 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for… |
Page 5 of 14