110,684 indexed
CVECVE vulnerabilities
110,684 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 12,801–12,850 of 110,684 · page 257 of 2214
| ID | Title | Summary |
|---|---|---|
| CVE-2026-80992 | CVE-2026-80992 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before t… |
| CVE-2026-80991 | CVE-2026-80991 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net: ravb: serialize PTP clock teardown ravb_ptp_interrupt() can race with ravb_ptp_stop(… |
| CVE-2026-80990 | CVE-2026-80990 | In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Release the Rx HopID that was handed out on mismatch tb_xdomain_alloc_i… |
| CVE-2026-80989 | CVE-2026-80989 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Mark the connection down when bringing it up fails Every failure path i… |
| CVE-2026-80988 | CVE-2026-80988 | In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 ("ntb: D… |
| CVE-2026-80987 | CVE-2026-80987 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Reject oversized TX buffers ntb_process_tx() handles an oversized buf… |
| CVE-2026-80986 | CVE-2026-80986 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages On a link whose device has ma… |
| CVE-2026-80985 | CVE-2026-80985 CVSS 8.2 | In the Linux kernel, the following vulnerability has been resolved: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry smc_llc_rmt_delete_rkey(… |
| CVE-2026-80984 | CVE-2026-80984 | In the Linux kernel, the following vulnerability has been resolved: net/smc: do not dereference an unset send buffer on the SMC-D teardown path smc_close_str… |
| CVE-2026-80983 | CVE-2026-80983 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket refcount leak in smc_switch_conns() smc_switch_conns() takes a refere… |
| CVE-2026-80982 | CVE-2026-80982 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free in smc_rx_pipe_buf_release() smc_rx_splice() hands RMB pages … |
| CVE-2026-80981 | CVE-2026-80981 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() smc_llc_srv_add_l… |
| CVE-2026-80980 | CVE-2026-80980 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: net/smc: stop killed, freed and out_of_sync sharing a byte The three connection state fla… |
| CVE-2026-80979 | CVE-2026-80979 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net/smc: unregister the connection before draining the rx tasklet smc_conn_free() calls s… |
| CVE-2026-80978 | CVE-2026-80978 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net: cap advertised IP tunnel headroom IP tunnel devices derive their advertised needed_h… |
| CVE-2026-80977 | CVE-2026-80977 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't touch shared zerocopy state in skb_tx_error() skb_tx_error() completes… |
| CVE-2026-80976 | CVE-2026-80976 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 decapsulation decap_and_validate() pulls the outer SRv6 head… |
| CVE-2026-80975 | CVE-2026-80975 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: mfd: qnap-mcu: keep the reply buffer alive past a command timeout qnap_mcu_exec() publish… |
| CVE-2026-80974 | CVE-2026-80974 | In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm50… |
| CVE-2026-80973 | CVE-2026-80973 | In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: bound the MIDI event length from the device usb6fire_comm_receiver_handler()… |
| CVE-2026-80972 | CVE-2026-80972 | In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Check card index validity at probe aloop driver blindly trusts that the give… |
| CVE-2026-80971 | CVE-2026-80971 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: clear the URB pointers on disconnect bcd2000_free_usb_related_resources() … |
| CVE-2026-80970 | CVE-2026-80970 | In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: do not copy out an uninitialised init response fcp_ioctl_init() allocates its … |
| CVE-2026-80969 | CVE-2026-80969 | In the Linux kernel, the following vulnerability has been resolved: ALSA: mpu401: Check card index validity at probe mpu401 driver blindly trusts that the gi… |
| CVE-2026-80968 | CVE-2026-80968 | In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: Check card index validity at probe Although mts64 driver has a check of the … |
| CVE-2026-80967 | CVE-2026-80967 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ pcxhr_probe() requests pcx… |
| CVE-2026-80966 | CVE-2026-80966 | In the Linux kernel, the following vulnerability has been resolved: ALSA: portman2x4: Check card index validity at probe Although portman2x4 driver has a che… |
| CVE-2026-80965 | CVE-2026-80965 | In the Linux kernel, the following vulnerability has been resolved: ALSA: serial-u16550: Check card index validity at probe serial-u16550 driver blindly trus… |
| CVE-2026-80964 | CVE-2026-80964 | In the Linux kernel, the following vulnerability has been resolved: ALSA: virmidi: Check card index validity at probe virmidi driver blindly trusts that the … |
| CVE-2026-80963 | CVE-2026-80963 | In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if allocation of per-cpu data fails If "dm_kvzalloc(percpu_alloc_si… |
| CVE-2026-80962 | CVE-2026-80962 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate geometry fields from on-disk cache_info cache_segs_init() iterates ca… |
| CVE-2026-80961 | CVE-2026-80961 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate kset key_num and intra-segment bounds Two more fields decoded from th… |
| CVE-2026-80960 | CVE-2026-80960 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate on-media seg_num against the cache device size seg_num is read from t… |
| CVE-2026-8096 | CVE-2026-8096 CVSS 6.5 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including… |
| CVE-2026-80959 | CVE-2026-80959 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the persisted tail-position offset cache_pos_decode() takes the persiste… |
| CVE-2026-80958 | CVE-2026-80958 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: clamp the tail kset read to the segment data region The tail-kset read in cach… |
| CVE-2026-80957 | CVE-2026-80957 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: detect a cycle in the last-kset chain during replay cache_replay() follows the… |
| CVE-2026-80956 | CVE-2026-80956 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initialized cache segments get_cache_segment() scans the segment… |
| CVE-2026-80955 | CVE-2026-80955 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: fix use-after-free and invalid seg operations in kset_replay() In kset_replay,… |
| CVE-2026-80954 | CVE-2026-80954 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode() i3c_de… |
| CVE-2026-80953 | CVE-2026-80953 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: adi: initialize the lock before enabling interrupts adi_i3c_master_probe() r… |
| CVE-2026-80952 | CVE-2026-80952 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix info leak and UAF in device unregister path i3c_master_unregister_i3c_de… |
| CVE-2026-80951 | CVE-2026-80951 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: bound IBI payload to the requested max_payload_len svc_i3c_master_handl… |
| CVE-2026-80950 | CVE-2026-80950 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: i3c: renesas: Check that the transfer is valid before accessing it The Renesas I3C driver… |
| CVE-2026-8095 | CVE-2026-8095 CVSS 8.1 | The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary File Deletion in versions up to and including 23.6. This is due … |
| CVE-2026-80949 | CVE-2026-80949 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() The memory allocated for buf… |
| CVE-2026-80948 | CVE-2026-80948 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() In iwl_op_mode_dvm_start()… |
| CVE-2026-80947 | CVE-2026-80947 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop rtl8xxxu arms rx_urb_wq from th… |
| CVE-2026-80946 | CVE-2026-80946 | In the Linux kernel, the following vulnerability has been resolved: fuse: copy request headers via a stack buffer for io-uring The fuse-io-uring transport co… |
| CVE-2026-80945 | CVE-2026-80945 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - unmap dst before software fallback on decompress On a hardware analytics er… |