[ Vendor · 1,350 CVEs ]
Linux
CVEs affecting Linux published in the last 30 days, plus any Linux CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-98083 | 25 Sep 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction use-after-free in raid stripe insertion If allocation of a… | Fix |
| CVE-2026-98084 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks When processing… | |
| CVE-2026-98069 | 25 Sep 2026 | CVSS 8.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/rds: acquire the fastpath locks in rds_conn_shutdown() rds_conn_shutdown()… | |
| CVE-2026-98070 | 25 Sep 2026 | CVSS 8.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks()… | |
| CVE-2026-98071 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/rds: clear cp_flags bits individually in rds_conn_path_reset()… | |
| CVE-2026-98072 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/rds: use wq_has_sleeper() in release_in_xmit() release_in_xmit() clears… | |
| CVE-2026-98073 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: Remove conflicting altnames for dying netns in __dev_change_net_namespace()… | |
| CVE-2026-98074 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bonding: do not clear curr_active_slave prematurely when releasing all slaves… | |
| CVE-2026-98075 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: reject BPF_PSEUDO_FUNC reference to the main program fixups.c:jit_subprogs()… | |
| CVE-2026-98076 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tracing/probes: Fix use-after-free on field name/type of events with multiple… | |
| CVE-2026-98060 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Reject resilient lock operations in rbtree callbacks __bpf_rbtree_add()… | |
| CVE-2026-98061 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Reject tail calls directly from callback frames A tail call from a non-zero… | |
| CVE-2026-98062 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Mark signal tracepoint siginfo arguments as scalar The signal_generate and… | Fix |
| CVE-2026-98063 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL-ptr-deref in btf_var_show() btf_var_show() calls… | |
| CVE-2026-98064 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL-ptr-deref when showing a void BTF type btf_modifier_show() resolves… | |
| CVE-2026-98065 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Reject key-less BTF for hash maps map_check_btf() allows a key-less BTF… | |
| CVE-2026-98066 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Fix potential double-free at error path The fix for caiaq driver's… | |
| CVE-2026-98067 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: erofs: disable LZ4 rolling decompression for now LZ4 rolling decompression [1]… | |
| CVE-2026-98068 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/rds: don't let rds_conn_shutdown() consume a concurrent drop… | |
| CVE-2026-98051 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times The loop… | Fix |
| CVE-2026-98052 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: bcmasp: clear txcb->last before writing each descriptor bcmasp_xmit() only… | Fix |
| CVE-2026-98053 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Refactor and fix init_config access Existing code accesses… | Fix |
| CVE-2026-98054 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix unbalanced module reference count strace_open() invokes… | Fix |
| CVE-2026-98055 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Clean up the bus when fetching ML caps fails… | |
| CVE-2026-98056 | 25 Sep 2026 | CVSS 7.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: nvme: remove stale namespaces by NSID range during scan nvme_scan_ns_list() drops… | |
| CVE-2026-98057 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ring-buffer: Add checking nr_subbufs to persistent ring buffer validation Sashiko… | |
| CVE-2026-98058 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Mark syscall helpers as sleepable bpf_sys_bpf() executes the bpf(2) syscall… | |
| CVE-2026-98059 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Mark sched_process_wait argument as nullable do_wait() passes wo->wo_pid to… | |
| CVE-2026-98043 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Don't infer non-NULL from a pointer with an unbounded offset reg_not_null()… | |
| CVE-2026-98044 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Reject legacy packet loads from callbacks check_ld_abs() models a failed… | |
| CVE-2026-98045 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Mark faultable stack helpers as sleepable The faultable variants of… | |
| CVE-2026-98046 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_btf_find_by_name_kind() as sleepable When… | |
| CVE-2026-98047 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Check ancestor frames for rbtree callbacks bpf_rbtree_add() invokes its… | |
| CVE-2026-98048 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: don't rewrite bpf_fastcall patterns entered by a jump… | |
| CVE-2026-98049 | 25 Sep 2026 | CVSS 5.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: zero extend the result of an arena 32-bit cmpxchg bpf_convert_ctx_accesses()… | Fix |
| CVE-2026-98050 | 25 Sep 2026 | CVSS 7.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_ptp: Fix napi_gro_receive() call from GC workqueue context… | Fix |
| CVE-2026-98033 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Preserve inner map identity in callback frames Callback frame constructors… | |
| CVE-2026-98034 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Mark NULL kptr stores precise check_map_kptr_access() permits a scalar store… | |
| CVE-2026-98035 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields when recycling rhtab elements… | |
| CVE-2026-98036 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Preserve special fields in recycled rhtab elements rhtab_map_update_elem()… | |
| CVE-2026-98037 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Reject untrusted allocated-object pointers When the final RCU read-side… | |
| CVE-2026-98038 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Keep refcount_acquire nullable for borrowed RCU kptrs bpf_refcount_acquire()… | |
| CVE-2026-98039 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Require MEM_PERCPU for percpu kptr stores map_kptr_match_type() treats… | |
| CVE-2026-98040 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Mark the zero register precise for a register-form NULL check… | |
| CVE-2026-98041 | 25 Sep 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Don't predict JMP32 pointer vs zero comparisons Consider the following… | |
| CVE-2026-98042 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Don't resurrect a scalar id dropped by collect_linked_regs()… | |
| CVE-2026-98025 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent… | |
| CVE-2026-98026 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: properly convert mglist to rcu Sashiko reported a bug [1]… | |
| CVE-2026-98027 | 25 Sep 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size… | |
| CVE-2026-98028 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: eth: nfp: drop the replaced rule from the list when reprogramming fails… | |
| CVE-2026-98029 | 25 Sep 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: eth: nfp: bound the ntuple rule dump by the caller's buffer size… | |
| CVE-2026-98030 | 25 Sep 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size… | |
| CVE-2026-98031 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: nexthop: Initialize extack in remove_nh_grp_entry() remove_nh_grp_entry() prints… | |
| CVE-2026-98032 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tracing: Fix subbuf resize races with trace_pipe_raw readers Concurrent subbuffer… | |
| CVE-2026-98016 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free race in sample_restore_put() Concurrent teardown of… | |
| CVE-2026-98017 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: defer qdisc freeing after failed creation An RTM_NEWQDISC request can… | |
| CVE-2026-98018 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: mctp: i3c: serialize probe with bus removal mctp_i3c_probe() drops… | |
| CVE-2026-98019 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: mark a NULL call argument precise check_func_arg() allows… | |
| CVE-2026-98020 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: pds_core: fix cmd_regs access racing BAR unmap on reset pdsc_reset_prepare() and… | |
| CVE-2026-98021 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: reject oversized tx_queue_len at netlink parse time rtnl_create_link()… | |
| CVE-2026-98022 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations Several… | |
| CVE-2026-98023 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: vxlan: reject dynamic fdb entries that reference a nexthop id The commit cited in… | |
| CVE-2026-98024 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/ism: folio_put() after error dmb->cpu_addr was allocated via folio_alloc()… | |
| CVE-2026-98008 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: macb: fix NULL pointer dereference on unbind with fixed-link When the device… | |
| CVE-2026-98009 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: ets: clamp quantum in parse and fallback paths ets_qdisc_change()… | |
| CVE-2026-98010 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: drr: clamp quantum in change class drr_change_class() rejects explicit… | |
| CVE-2026-98011 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: clamp quantum in change and init paths hhf_change() accepts any… | |
| CVE-2026-98012 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum in change path sfq_change() accepts any… | |
| CVE-2026-98013 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: fq_pie: clamp quantum in change path fq_pie_change() accepts any… | |
| CVE-2026-98014 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, prevent mc_list repopulation during vport disable In… | |
| CVE-2026-98015 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put In… | |
| CVE-2026-97998 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: cope with concurrent instance destruction Instances are… | |
| CVE-2026-98000 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: hwmon: Fix potential UAF in pec_store Sashiko reports: In pec_store(), a… | |
| CVE-2026-98001 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc4282) Make sure clk_init_data is fully initialized The clk_init_data… | |
| CVE-2026-98002 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix ineffective error check in nested domain allocation… | |
| CVE-2026-98003 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: iommu/amd: Do not reallocate GA log buffers on resume Commit c5e1a1eb9279… | |
| CVE-2026-98004 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Serialize command queue publishing Serialize command queue… | |
| CVE-2026-98005 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: erofs: delimit inode_share cache key components Previously, inode_share keys were… | |
| CVE-2026-98006 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev The epq_in_urb object belonging… | |
| CVE-2026-98007 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Reject non-scalar bpf_loop iteration counts bpf_loop() declares its nr_loops… | |
| CVE-2026-97989 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: vduse: validate virtqueue alignment vduse_validate_config() only checks the upper… | |
| CVE-2026-97990 | 25 Sep 2026 | CVSS 7.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: vdpa_sim_net: check TX pull result before RX copy vringh_iov_pull_iotlb() returns… | |
| CVE-2026-97991 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: vdpa_sim_blk: reject out-of-range sector starts vdpasim_blk_check_range() logs an… | |
| CVE-2026-97992 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: protect config_ctx from being freed under the config callback… | |
| CVE-2026-97993 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx… | |
| CVE-2026-97994 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: vhost/vdpa: reject VRING_NUM larger than device max vhost_vring_set_num() accepts… | |
| CVE-2026-97995 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: virtio_console: do not free control-out buffers on remove __send_control_msg()… | |
| CVE-2026-97996 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: virtio: fix use-after-free in unregister_virtio_device() device_unregister() is… | |
| CVE-2026-97997 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: virtio_ring: fix stale descriptor flags after a failed packed add In a packed… | |
| CVE-2026-97980 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/debug: Fix NULL pointer dereference in debug_set_level() Commit a2cec6863709… | |
| CVE-2026-97981 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Count dropped frames as NAPI work The RX loop only… | |
| CVE-2026-97982 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Fix budget accounting The gmac_rx() function returns the… | |
| CVE-2026-97983 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: vduse: return compat ioctl results directly The compat handler handles… | |
| CVE-2026-97984 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: ipv6: Fix UDP length overflow with PMTU discover and big MTU This commit… | |
| CVE-2026-97985 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: af_unix: Update last skb marker in manage_oob(). Fahad Alharbi reported that… | |
| CVE-2026-97986 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: virtio_input: stop callbacks before unregistering input device virtinput_remove()… | |
| CVE-2026-97987 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: virtio_input: reset device if input_register_device() fails Probe marks the… | |
| CVE-2026-97988 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring access on IOTLB transitions When VIRTIO_F_ACCESS_PLATFORM… | |
| CVE-2026-97972 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: macb: put the "mdio" child node reference on success macb_mii_init() holds… | |
| CVE-2026-97973 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: macb: destroy the phylink instance on the probe error path macb_mii_init()… |
Page 9 of 14