112,666 indexed
CVECVE vulnerabilities
112,666 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 13,451–13,500 of 112,666 · page 270 of 2254
| ID | Title | Summary |
|---|---|---|
| CVE-2026-81001 | CVE-2026-81001 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: slip: fix use-after-free in sl_sync() slip_devs[] stores bare net_device pointers and tak… |
| CVE-2026-81000 | CVE-2026-81000 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb headroom and … |
| CVE-2026-8100 | CVE-2026-8100 | Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific conditions. This issue … |
| CVE-2026-80999 | CVE-2026-80999 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO rtl83xx_reset_assert() and… |
| CVE-2026-80998 | CVE-2026-80998 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: net: bnxt: ring the doorbell when SW USO exits early When a burst of packets is handed do… |
| CVE-2026-80997 | CVE-2026-80997 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix stalled modem TX queue after runtime resume ipa_start_xmit() unconditionall… |
| CVE-2026-80996 | CVE-2026-80996 | In the Linux kernel, the following vulnerability has been resolved: net: l2tp: do not propagate multicast notification errors The tunnel create, tunnel modif… |
| CVE-2026-80995 | CVE-2026-80995 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net: mctp: hold a reference to the route device in mctp_route_lookup() mctp_route_lookup(… |
| CVE-2026-80994 | CVE-2026-80994 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow mask use-after-free on flow deletion The commit in the Fixes t… |
| CVE-2026-80993 | CVE-2026-80993 | In the Linux kernel, the following vulnerability has been resolved: net: phylink: correctly validate returned PCS in phylink_inband_caps In phylink_inband_ca… |
| CVE-2026-80992 | CVE-2026-80992 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before t… |
| CVE-2026-80991 | CVE-2026-80991 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net: ravb: serialize PTP clock teardown ravb_ptp_interrupt() can race with ravb_ptp_stop(… |
| CVE-2026-80990 | CVE-2026-80990 | In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Release the Rx HopID that was handed out on mismatch tb_xdomain_alloc_i… |
| CVE-2026-80989 | CVE-2026-80989 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Mark the connection down when bringing it up fails Every failure path i… |
| CVE-2026-80988 | CVE-2026-80988 | In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 ("ntb: D… |
| CVE-2026-80987 | CVE-2026-80987 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Reject oversized TX buffers ntb_process_tx() handles an oversized buf… |
| CVE-2026-80986 | CVE-2026-80986 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages On a link whose device has ma… |
| CVE-2026-80985 | CVE-2026-80985 CVSS 8.2 | In the Linux kernel, the following vulnerability has been resolved: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry smc_llc_rmt_delete_rkey(… |
| CVE-2026-80984 | CVE-2026-80984 | In the Linux kernel, the following vulnerability has been resolved: net/smc: do not dereference an unset send buffer on the SMC-D teardown path smc_close_str… |
| CVE-2026-80983 | CVE-2026-80983 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket refcount leak in smc_switch_conns() smc_switch_conns() takes a refere… |
| CVE-2026-80982 | CVE-2026-80982 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free in smc_rx_pipe_buf_release() smc_rx_splice() hands RMB pages … |
| CVE-2026-80981 | CVE-2026-80981 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() smc_llc_srv_add_l… |
| CVE-2026-80980 | CVE-2026-80980 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: net/smc: stop killed, freed and out_of_sync sharing a byte The three connection state fla… |
| CVE-2026-80979 | CVE-2026-80979 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net/smc: unregister the connection before draining the rx tasklet smc_conn_free() calls s… |
| CVE-2026-80978 | CVE-2026-80978 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net: cap advertised IP tunnel headroom IP tunnel devices derive their advertised needed_h… |
| CVE-2026-80977 | CVE-2026-80977 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't touch shared zerocopy state in skb_tx_error() skb_tx_error() completes… |
| CVE-2026-80976 | CVE-2026-80976 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 decapsulation decap_and_validate() pulls the outer SRv6 head… |
| CVE-2026-80975 | CVE-2026-80975 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: mfd: qnap-mcu: keep the reply buffer alive past a command timeout qnap_mcu_exec() publish… |
| CVE-2026-80974 | CVE-2026-80974 | In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm50… |
| CVE-2026-80973 | CVE-2026-80973 | In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: bound the MIDI event length from the device usb6fire_comm_receiver_handler()… |
| CVE-2026-80972 | CVE-2026-80972 | In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Check card index validity at probe aloop driver blindly trusts that the give… |
| CVE-2026-80971 | CVE-2026-80971 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: clear the URB pointers on disconnect bcd2000_free_usb_related_resources() … |
| CVE-2026-80970 | CVE-2026-80970 | In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: do not copy out an uninitialised init response fcp_ioctl_init() allocates its … |
| CVE-2026-80969 | CVE-2026-80969 | In the Linux kernel, the following vulnerability has been resolved: ALSA: mpu401: Check card index validity at probe mpu401 driver blindly trusts that the gi… |
| CVE-2026-80968 | CVE-2026-80968 | In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: Check card index validity at probe Although mts64 driver has a check of the … |
| CVE-2026-80967 | CVE-2026-80967 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ pcxhr_probe() requests pcx… |
| CVE-2026-80966 | CVE-2026-80966 | In the Linux kernel, the following vulnerability has been resolved: ALSA: portman2x4: Check card index validity at probe Although portman2x4 driver has a che… |
| CVE-2026-80965 | CVE-2026-80965 | In the Linux kernel, the following vulnerability has been resolved: ALSA: serial-u16550: Check card index validity at probe serial-u16550 driver blindly trus… |
| CVE-2026-80964 | CVE-2026-80964 | In the Linux kernel, the following vulnerability has been resolved: ALSA: virmidi: Check card index validity at probe virmidi driver blindly trusts that the … |
| CVE-2026-80963 | CVE-2026-80963 | In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if allocation of per-cpu data fails If "dm_kvzalloc(percpu_alloc_si… |
| CVE-2026-80962 | CVE-2026-80962 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate geometry fields from on-disk cache_info cache_segs_init() iterates ca… |
| CVE-2026-80961 | CVE-2026-80961 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate kset key_num and intra-segment bounds Two more fields decoded from th… |
| CVE-2026-80960 | CVE-2026-80960 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate on-media seg_num against the cache device size seg_num is read from t… |
| CVE-2026-8096 | CVE-2026-8096 CVSS 6.5 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including… |
| CVE-2026-80959 | CVE-2026-80959 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the persisted tail-position offset cache_pos_decode() takes the persiste… |
| CVE-2026-80958 | CVE-2026-80958 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: clamp the tail kset read to the segment data region The tail-kset read in cach… |
| CVE-2026-80957 | CVE-2026-80957 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: detect a cycle in the last-kset chain during replay cache_replay() follows the… |
| CVE-2026-80956 | CVE-2026-80956 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initialized cache segments get_cache_segment() scans the segment… |
| CVE-2026-80955 | CVE-2026-80955 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: fix use-after-free and invalid seg operations in kset_replay() In kset_replay,… |
| CVE-2026-80954 | CVE-2026-80954 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode() i3c_de… |