[ Vendor · 1,350 CVEs ]
Linux
CVEs affecting Linux published in the last 30 days, plus any Linux CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-98168 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix reparse buffer bounds in cifs_query_reparse_point() In… | |
| CVE-2026-98169 | 6 Oct 2026 | CVSS 7.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOB read in smb3_enum_snapshots() If… | |
| CVE-2026-98170 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() In… | |
| CVE-2026-98171 | 6 Oct 2026 | CVSS 8.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs Fix… | |
| CVE-2026-98172 | 6 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbd_connection leak on cifs_get_tcp_session() error When an… | |
| CVE-2026-98164 | 29 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces… | Fix |
| CVE-2026-98163 | 26 Sep 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: cgroup: Avoid iteration of dying tasks with zero refcount The commit… | Fix |
| CVE-2026-98160 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init()… | Fix |
| CVE-2026-98161 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: nvdimm: pmem: keep PREFLUSH before data writes pmem_submit_bio() records a… | Fix |
| CVE-2026-98162 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb/server: fix tree connection leak in smb2_tree_connect() See the procedure… | Fix |
| CVE-2026-100079 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: unregister debugfs entries on teardown ucsi_register() creates… | Fix |
| CVE-2026-100075 | 25 Sep 2026 | CVSS 9.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters When srpt_alloc_rw_ctxs()… | Fix |
| CVE-2026-100076 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths… | Fix |
| CVE-2026-100077 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/msm: Recover HW before retire hung submit During recovery, it is not safe to… | Fix |
| CVE-2026-100078 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: pass correct argument to function The first argument to… | Fix |
| CVE-2026-100070 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet sashiko says: If… | Fix |
| CVE-2026-100071 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: hsr: free learned nodes on device setup failure hsr_dev_finalize() can fail… | Fix |
| CVE-2026-100072 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpi_bus_get_primary_device() The… | Fix |
| CVE-2026-100073 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ext4: fix transaction overflow during writeback Commit 95ad8ee45cdb ("ext4… | Fix |
| CVE-2026-100074 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_refcount field as unique BPF_REFCOUNT is not marked as a unique… | Fix |
| CVE-2026-98154 | 25 Sep 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix -EIO cleanup order in queue_rq On -EIO, the RDMA queue_rq path… | Fix |
| CVE-2026-98155 | 25 Sep 2026 | CVSS 7.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: accel/qaic: Address potential out-of-bounds read in resp_worker() Although… | Fix |
| CVE-2026-98156 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page… | Fix |
| CVE-2026-98157 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation The… | Fix |
| CVE-2026-98158 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ppp_async: drop the errored frame instead of resetting its headroom… | Fix |
| CVE-2026-98159 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate CLC firmware records The CLC region is supplied by… | Fix |
| CVE-2026-98145 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject a command chain that carries no commands A chain whose… | |
| CVE-2026-98146 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain struct… | Fix |
| CVE-2026-98147 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: printk: Don't WARN on kthread_run failure. Since __kthread_create_on_node()… | |
| CVE-2026-98148 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/gud: validate GUD_ROTATION_0 is present in supported rotations The rotation… | |
| CVE-2026-98149 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Fix percpu map update indexing with sparse CPU IDs Per-CPU array, hash, and… | Fix |
| CVE-2026-98150 | 25 Sep 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Fix BPF_F_CPU validation for sparse CPU IDs BPF_F_CPU stores the target CPU… | Fix |
| CVE-2026-98151 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic Take the… | Fix |
| CVE-2026-98152 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: fix queue leak when connect backlog is exceeded When pending… | Fix |
| CVE-2026-98153 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: nvme: fix racy access to FDP placement id array nvme_query_fdp_info() is called… | Fix |
| CVE-2026-98136 | 25 Sep 2026 | CVSS 7.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ntfs: bound $AttrDef table walk to the loaded table size… | Fix |
| CVE-2026-98137 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ntfs: treat any nonzero dio zero-range return as an error ntfs_dio_zero_range()… | Fix |
| CVE-2026-98138 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ntfs: do not mark the volume clean in sync_fs when errors were recorded… | Fix |
| CVE-2026-98139 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ntfs: only count successfully cleared runs when freeing clusters… | Fix |
| CVE-2026-98140 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local leak in write_mft_record_nolock() error paths… | |
| CVE-2026-98141 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure update_reparse_data() ignores the… | |
| CVE-2026-98142 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/cirrus-qemu: Validate BAR0 size during probe The `cirrus-qemu` driver relies… | |
| CVE-2026-98143 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Don't read the U65 rounding mode as a storage mode Bits 15:14 of… | |
| CVE-2026-98144 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: put the chained BO when its mapping fails amdxdna_cmd_set_error()… | |
| CVE-2026-98127 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for insert range smb3_insert_range() does not check… | Fix |
| CVE-2026-98128 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add()… | Fix |
| CVE-2026-98129 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add()… | Fix |
| CVE-2026-98130 | 25 Sep 2026 | CVSS 8.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START The SCTP_CMD_TIMER_START handler… | Fix |
| CVE-2026-98131 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma mapping leak in stmmac_tso_xmit() In stmmac_tso_xmit(), if… | Fix |
| CVE-2026-98132 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: don't downgrade half-dead scalar zero spills to STACK_ZERO… | Fix |
| CVE-2026-98133 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfs_set_ea(), the exit… | Fix |
| CVE-2026-98134 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: check_cond_jmp_op(): properly infer if register is null Nicholas Carlini… | Fix |
| CVE-2026-98135 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid sectors_per_cluster in the boot sector is_boot_sector_ntfs()… | Fix |
| CVE-2026-98118 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfs: Fix readahead synchronisation issues by loading all folios upfront There… | |
| CVE-2026-98119 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfs: break unbuffered write when netfs_alloc_subrequest() fails syzbot reported… | |
| CVE-2026-98120 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfs: Fix subreq ref leak Fix a subrequest ref leak in netfs_unbuffered_write()… | |
| CVE-2026-98121 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Fix NULL pointer dereference in PM callbacks… | Fix |
| CVE-2026-98122 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del()… | Fix |
| CVE-2026-98123 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration… | Fix |
| CVE-2026-98124 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb/client: invalidate fscache for fallocate range operations smb3_zero_range()… | Fix |
| CVE-2026-98125 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page cache in insert/collapse range smb3_insert_range() and… | Fix |
| CVE-2026-98126 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for zero range When FALLOC_FL_ZERO_RANGE is used… | Fix |
| CVE-2026-98110 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: bound firmware ID by TLV length The firmware ID is treated as… | |
| CVE-2026-98111 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate version TLV value lengths… | |
| CVE-2026-98112 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifetime on netdev events The listener thread exits when… | |
| CVE-2026-98113 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ksmbd: rate limit unmapped SID errors A client can include many structurally… | |
| CVE-2026-98114 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parse_dacl() silently accepts truncated ACEs… | |
| CVE-2026-98115 | 25 Sep 2026 | CVSS 8.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for… | Fix |
| CVE-2026-98116 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF… | |
| CVE-2026-98117 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix potential UAF/KASAN warning Currently… | |
| CVE-2026-98106 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/pagemap: Prevent double migration of device pages A device-private folio… | |
| CVE-2026-98107 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect… | |
| CVE-2026-98108 | 25 Sep 2026 | CVSS 7.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan… | |
| CVE-2026-98109 | 25 Sep 2026 | CVSS 4.7 | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix race condition during device registration In… | Fix |
| CVE-2026-98103 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: igmp: convert struct ip_sf_list to RCU Commit 23d2b94043ca ("igmp: Add ip_mc_list… | |
| CVE-2026-98104 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted… | |
| CVE-2026-98105 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: ethernet: oa_tc6: Improve the error recovery When oversubscribed traffic… | |
| CVE-2026-98093 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_micfil: balance mclk enable/disable hw_params() enables mclk… | |
| CVE-2026-98094 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: staging: fbtft: make dirty_lock IRQ-safe fbtft_mkdirty() can be reached from the… | |
| CVE-2026-98095 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header(). syzbot… | |
| CVE-2026-98096 | 25 Sep 2026 | CVSS 7.4 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipv6: sr: restore network header before routing and forwarding ipv6_srh_rcv()… | |
| CVE-2026-98097 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tipc: Dont send random pad bytes in RESET/ACTIVATE messages The interface name is… | |
| CVE-2026-98098 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in tipc_named_node_up() on empty publication list User-space… | |
| CVE-2026-98099 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcu_assign_pointer() for __rcu list updates Several places in… | |
| CVE-2026-98101 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source() pmc->sflist is read… | |
| CVE-2026-98102 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src() When removing a source… | |
| CVE-2026-98085 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge Nicholas Carlini… | |
| CVE-2026-98086 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: ump: do not touch legacy_rmidi before it exists snd_ump_parse_endpoint()… | |
| CVE-2026-98087 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate A… | |
| CVE-2026-98088 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in… | |
| CVE-2026-98089 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bonding: alb: fix uninitialized transport header access in alb_determine_nd()… | |
| CVE-2026-98090 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: btrfs: restore active device pointers after failed sprout btrfs_init_new_device()… | |
| CVE-2026-98091 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: btrfs: detach failed sprout device from transaction update list When creating the… | |
| CVE-2026-98092 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() acp6x_pdm_dma_close()… | |
| CVE-2026-98077 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()… | |
| CVE-2026-98078 | 25 Sep 2026 | CVSS 4.4 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipvs: fix reversed sequence option serialization hton_seq() expects the… | Fix |
| CVE-2026-98079 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: btrfs: zstd: fix lost wakeup when waiting for a workspace A writer can sleep… | |
| CVE-2026-98080 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: btrfs: do not force reloc root creation during qgroup_account_snapshot() [BUG]… | Fix |
| CVE-2026-98081 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: finish active block group cleanup if call_zone_finish() fails… | |
| CVE-2026-98082 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: btrfs: fix the possible bioc_list memory leak during error There are two possible… | Fix |
Page 8 of 14