Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
56576
Total
4483
Critical
16766
High
16609
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-90110 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: inetpeer: randomize RB-tree node comparison using SipHash The inetpeer rate limiting system stores peer entries … | Sep 17, 2026 |
| CVE-2026-90109 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue gred_enqueue(), bfifo_enqueue() and … | Sep 17, 2026 |
| CVE-2026-90108 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition When smc_llc_event_handler() transitions the … | Sep 17, 2026 |
| CVE-2026-90107 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net/smc: free pending qentry in smc_llc_flow_stop() before memset smc_llc_flow_stop() resets a flow struct with a … | Sep 17, 2026 |
| CVE-2026-90106 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net: bridge: arp/nd proxy: fix reading neigh ha Currently neigh ha address is read directly, … | Sep 17, 2026 |
| CVE-2026-90105 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: vxlan: fix reading neigh ha Currently arp/neigh_reduce read neigh ha directly which can lead to … | Sep 17, 2026 |
| CVE-2026-90104 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: zero referring call lists before decoding decode_cb_sequence_args() allocates csa_rclists with kmalloc_objs(), so each referring_call_list … | Sep 17, 2026 |
| CVE-2026-90103 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion encode_layoutstats_maxsz budgets XDR_QUADLEN(PNFS_LAYOUTSTATS_MAXSIZE), i.e. 256 bytes, for the layoutupdate4 … | Sep 17, 2026 |
| CVE-2026-90102 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: key the data server cache on the NFS version nfs4_pnfs_ds_add() keys the per-net data … | Sep 17, 2026 |
| CVE-2026-90101 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix call to hardware monitoring event handler The first parameter of hwmon_notify_event() is supposed … | Sep 17, 2026 |
| CVE-2026-90100 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: ptp: netc: fix period truncation and potential divide-by-zero in PEROUT The max_period bound in net_timer_enable_perout() … | Sep 17, 2026 |
| CVE-2026-90099 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net/sched: account classifier filter allocations to memcg Allocations in the tc classifier *_change() paths (filter … | Sep 17, 2026 |
| CVE-2026-90098 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net: sparx5: fix sleep in atomic context in MAC table access sparx5_set_rx_mode() runs with netif_addr_lock_bh … | Sep 17, 2026 |
| CVE-2026-90097 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition The VMBus module initialization … | Sep 17, 2026 |
| CVE-2026-90096 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: fuse: invalidate the correct range after O_APPEND direct write fuse_direct_write_iter() captures pos before generic_write_checks(), which … | Sep 17, 2026 |
| CVE-2026-90095 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: fuse: Fix the condition to enable over-io-uring The existing condition in fuse_uring_cmd() is there only … | Sep 17, 2026 |
| CVE-2026-90094 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: arm64: process: Fix context switching MTE store-only tag check SCTLR_EL1.TCSO0 is set when user opt-in … | Sep 17, 2026 |
| CVE-2026-90093 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: access chan->conn safely in get/setsockopt Since commit b66774b48dd9 ("Bluetooth: L2CAP: Fix UAF in … | Sep 17, 2026 |
| CVE-2026-90092 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN New sk should not be added to … | Sep 17, 2026 |
| CVE-2026-90091 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan For L2CAP sockets without owning sk->sk_socket, reading l2cap_pi(sk)->chan … | Sep 17, 2026 |
| CVE-2026-90090 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path btmtksdio_tx_packet() rounds the transfer size … | Sep 17, 2026 |
| CVE-2026-90089 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Validate the FW dump header length nxp_process_fw_dump() pulls the ACL header off the … | Sep 17, 2026 |
| CVE-2026-90088 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop rfcomm_apply_pn() accepts the MTU value … | Sep 17, 2026 |
| CVE-2026-90087 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: do not leak an hci_conn when a second LE connect is rejected create_le_conn_complete() decides … | Sep 17, 2026 |
| CVE-2026-90086 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: xsk: honor XDP_TX_METADATA in zero-copy path The zero-copy path reads TX metadata whenever the UMEM … | Sep 17, 2026 |