Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
54449
Total
4308
Critical
16178
High
15893
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-98021 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net: reject oversized tx_queue_len at netlink parse time rtnl_create_link() assigns IFLA_TXQLEN directly to dev->tx_queue_len without … | Sep 25, 2026 |
| CVE-2026-98020 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: pds_core: fix cmd_regs access racing BAR unmap on reset pdsc_reset_prepare() and pdsc_reset_done()'s pdsc_map_bars() error path … | Sep 25, 2026 |
| CVE-2026-98019 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: bpf: mark a NULL call argument precise check_func_arg() allows bpf_register_is_null() for nullable arguments w/o marking … | Sep 25, 2026 |
| CVE-2026-98018 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net: mctp: i3c: serialize probe with bus removal mctp_i3c_probe() drops busdevs_lock after finding the matching … | Sep 25, 2026 |
| CVE-2026-98017 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: net/sched: defer qdisc freeing after failed creation An RTM_NEWQDISC request can make clsact bind a … | Sep 25, 2026 |
| CVE-2026-98016 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free race in sample_restore_put() Concurrent teardown of TC sample rules sharing the same … | Sep 25, 2026 |
| CVE-2026-98015 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put In mlx5_eswitch_termtbl_put(), the zero-ref cleanup check reads tt->ref_count after … | Sep 25, 2026 |
| CVE-2026-98014 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, prevent mc_list repopulation during vport disable In mlx5_esw_vport_disable(), move esw_apply_vport_rx_mode() ahead of esw_vport_change_handle_locked() … | Sep 25, 2026 |
| CVE-2026-98013 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net/sched: fq_pie: clamp quantum in change path fq_pie_change() accepts any quantum value from userspace, including … | Sep 25, 2026 |
| CVE-2026-98012 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum in change path sfq_change() accepts any non-negative quantum (only rejects (int)ctl->quantum … | Sep 25, 2026 |
| CVE-2026-98011 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: clamp quantum in change and init paths hhf_change() accepts any quantum from userspace, … | Sep 25, 2026 |
| CVE-2026-98010 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net/sched: drr: clamp quantum in change class drr_change_class() rejects explicit quantum==0 but falls back to … | Sep 25, 2026 |
| CVE-2026-98009 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: clamp quantum in parse and fallback paths ets_qdisc_change() falls back to psched_mtu() with … | Sep 25, 2026 |
| CVE-2026-98008 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net: macb: fix NULL pointer dereference on unbind with fixed-link When the device tree describes … | Sep 25, 2026 |
| CVE-2026-98007 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject non-scalar bpf_loop iteration counts bpf_loop() declares its nr_loops argument as ARG_ANYTHING. Privileged programs … | Sep 25, 2026 |
| CVE-2026-98006 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev The epq_in_urb object belonging to the caiaq device … | Sep 25, 2026 |
| CVE-2026-98005 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: erofs: delimit inode_share cache key components Previously, inode_share keys were encoded as follows: fingerprint || … | Sep 25, 2026 |
| CVE-2026-98004 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Serialize command queue publishing Serialize command queue publishing so software producer state advances only … | Sep 25, 2026 |
| CVE-2026-98003 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Do not reallocate GA log buffers on resume Commit c5e1a1eb9279 ("iommu/amd: Simplify and Consolidate … | Sep 25, 2026 |
| CVE-2026-98002 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix ineffective error check in nested domain allocation amd_iommu_pdom_id_alloc() returns an int: a domain … | Sep 25, 2026 |
| CVE-2026-98001 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc4282) Make sure clk_init_data is fully initialized The clk_init_data structure contains several mutually-exclusive members … | Sep 25, 2026 |
| CVE-2026-98000 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: hwmon: Fix potential UAF in pec_store Sashiko reports: In pec_store(), a guard(mutex)(&hwdev->lock) is taken. If … | Sep 25, 2026 |
| CVE-2026-97998 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: cope with concurrent instance destruction Instances are refcounted. However, only memory release happens … | Sep 25, 2026 |
| CVE-2026-97997 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: virtio_ring: fix stale descriptor flags after a failed packed add In a packed ring the … | Sep 25, 2026 |
| CVE-2026-97996 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: virtio: fix use-after-free in unregister_virtio_device() device_unregister() is device_del() plus put_device(). When the caller holds no … | Sep 25, 2026 |