112,666 indexed
CVECVE vulnerabilities
112,666 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 13,851–13,900 of 112,666 · page 278 of 2254
| ID | Title | Summary |
|---|---|---|
| CVE-2026-80622 | CVE-2026-80622 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: char: tlclk: fix use-after-free in tlclk_cleanup() This patch improves the module cleanup… |
| CVE-2026-80621 | CVE-2026-80621 | In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference when no RAS DES capabili… |
| CVE-2026-80620 | CVE-2026-80620 | In the Linux kernel, the following vulnerability has been resolved: Revert "PCI/MSI: Unmap MSI-X region on error" This reverts commit 1a8d4c6ecb4c81261bcdf13… |
| CVE-2026-80619 | CVE-2026-80619 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix potential UAF in aa_replace_profiles The function aa_replace_profiles was a… |
| CVE-2026-80618 | CVE-2026-80618 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free amdgpu_amdkfd_gpuvm_free_memo… |
| CVE-2026-80617 | CVE-2026-80617 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foe_check_time allocation size foe_check_time is declared as u16 pointer… |
| CVE-2026-80616 | CVE-2026-80616 | In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns() It's pointless… |
| CVE-2026-80615 | CVE-2026-80615 CVSS 8.2 | In the Linux kernel, the following vulnerability has been resolved: net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone kmalloc_flex() i… |
| CVE-2026-80614 | CVE-2026-80614 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: net: emac: Fix NULL pointer dereference in emac_probe Move devm_request_irq() after devm_… |
| CVE-2026-80613 | CVE-2026-80613 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path During XDP enablement in veth, if xdp_rxq_in… |
| CVE-2026-80612 | CVE-2026-80612 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: net: lwtunnel: Drop skb metadata before LWT encapsulation skb metadata is meant for passi… |
| CVE-2026-80611 | CVE-2026-80611 | In the Linux kernel, the following vulnerability has been resolved: ACPI: processor_idle: Mark LPI enter functions as __cpuidle When function tracing or Kpro… |
| CVE-2026-80610 | CVE-2026-80610 | In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix potential divide-by-zero when num_vsi is zero For i.MX94 series, all the … |
| CVE-2026-80609 | CVE-2026-80609 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe->len_list[] Move index check before element access. |
| CVE-2026-80608 | CVE-2026-80608 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When force_iova mode … |
| CVE-2026-80607 | CVE-2026-80607 | In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg Sashiko found that user can cause … |
| CVE-2026-80606 | CVE-2026-80606 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifier_lock for write on inject test path When CONFIG_DRM_XE_USERP… |
| CVE-2026-80605 | CVE-2026-80605 | In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() In picolcd_send… |
| CVE-2026-80604 | CVE-2026-80604 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hid_get_report for numbered reports When a caller passes a siz… |
| CVE-2026-80603 | CVE-2026-80603 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read parse_dcc() treats data_… |
| CVE-2026-80602 | CVE-2026-80602 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/lbr: Fix kernel address leakage A user-only branch stack can contain branche… |
| CVE-2026-80601 | CVE-2026-80601 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: gw: acquire ethernet header only after skb realloc The pskb_may_pull() called… |
| CVE-2026-80600 | CVE-2026-80600 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after skb realloc The pskb_may_pull() called … |
| CVE-2026-80599 | CVE-2026-80599 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: ensure accessible eth_hdr proto field When batadv_get_vid() accesses the… |
| CVE-2026-80598 | CVE-2026-80598 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in decompress_lznt decompress_lznt() does not validate arra… |
| CVE-2026-80597 | CVE-2026-80597 | In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization The mtd_info contain… |
| CVE-2026-80596 | CVE-2026-80596 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - only expose sysfs attributes on control interface When the driver was co… |
| CVE-2026-80595 | CVE-2026-80595 | In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - add response length checks The driver processes response data from devic… |
| CVE-2026-80594 | CVE-2026-80594 | In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing The driver p… |
| CVE-2026-80593 | CVE-2026-80593 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_atk0110) Check package count before accessing element atk_ec_present() walks… |
| CVE-2026-80592 | CVE-2026-80592 | In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: fail early if address range parameters are invalid The comment on to… |
| CVE-2026-80591 | CVE-2026-80591 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before r… |
| CVE-2026-80590 | CVE-2026-80590 CVSS 8.6 | In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtio_net_hdr (tun/tap, … |
| CVE-2026-8059 | CVE-2026-8059 CVSS 6.1ibm | IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting. This vulnerability allows an unaut… |
| CVE-2026-80589 | CVE-2026-80589 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: block: stop the timeout timer when releasing a never added disk disk_release() undoes blk… |
| CVE-2026-80588 | CVE-2026-80588 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: mptcp: reclaim forward-allocated memory on RX path errors After commit 9db5b3cec4ec ("mpt… |
| CVE-2026-80587 | CVE-2026-80587 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid combining some incoming suboptions Some MPTCP suboptions are mutually exclus… |
| CVE-2026-80586 | CVE-2026-80586 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpected size A remote peer could send a ma… |
| CVE-2026-80585 | CVE-2026-80585 CVSS 9.4 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fastopen: only mark MPTFO subflows with SYN data Passive TCP Fast Open accepts a v… |
| CVE-2026-80584 | CVE-2026-80584 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: s390/qeth: validate user buffer length in SNMP and ARP query ioctls qeth_snmp_command() a… |
| CVE-2026-80583 | CVE-2026-80583 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses The "DEC0 MODE" to "DEC7 MODE" c… |
| CVE-2026-80582 | CVE-2026-80582 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: drm/shmem_helper: Check VMA boundaries for PMD mappings In the ->huge_fault handler do no… |
| CVE-2026-80581 | CVE-2026-80581 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Ignore IPC erro… |
| CVE-2026-80580 | CVE-2026-80580 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: fbdev: bound mode sysfs output to the sysfs buffer mode_string() uses snprintf() which ca… |
| CVE-2026-8058 | CVE-2026-8058 CVSS 4.5ibm | IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password i… |
| CVE-2026-80579 | CVE-2026-80579 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: fbdev: clear fb_info->mode before deleting a videomode fb_set_var() can delete a mode fro… |
| CVE-2026-80578 | CVE-2026-80578 CVSS 7.3 | In the Linux kernel, the following vulnerability has been resolved: fbdev: core: Fix pointer desynchronization in fb_io_read() In fb_io_read(), if copy_to_us… |
| CVE-2026-80577 | CVE-2026-80577 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: skip zero-sized firmware sections panthor_fw_load_section_entry() skips BO c… |
| CVE-2026-80576 | CVE-2026-80576 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: reject oversized IBs with per-ring packet limits On GFX rings, amdgpu_cs_p2_i… |
| CVE-2026-80575 | CVE-2026-80575 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: Input: cs40l50-vibra - validate custom data from user space cs40l50_add() copies the cust… |