Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
56890
Total
4508
Critical
16896
High
16708
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-89999 | HIGH | 8.1 | In the Linux kernel, the following vulnerability has been resolved: HID: wacom: validate report length in wacom_intuos_pro2_bt_irq wacom_intuos_pro2_bt_irq() receives the wire report length in `len` … | Sep 16, 2026 |
| CVE-2026-89998 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent … | Sep 16, 2026 |
| CVE-2026-89997 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: dm: fix resume-vs-remove race If the user issues the resume ioctl and the remove ioctl … | Sep 16, 2026 |
| CVE-2026-89996 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds DMA_HEAP_IOCTL_ALLOC allocates a dma-buf and installs an … | Sep 16, 2026 |
| CVE-2026-89995 | HIGH | 8.8 | In the Linux kernel, the following vulnerability has been resolved: dma-direct: return struct page from dma_direct_alloc_from_pool() Commit 5b138c534fda ("dma-direct: factor out a dma_direct_alloc_from_pool helper") changed … | Sep 16, 2026 |
| CVE-2026-89994 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: tracing: no ptr dereference during log output The fsl edma events store a … | Sep 16, 2026 |
| CVE-2026-89993 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Initialize IRQ data before requesting IRQs dw_edma_irq_request() passes struct dw_edma_irq to request_irq() before … | Sep 16, 2026 |
| CVE-2026-89992 | HIGH | 8.4 | In the Linux kernel, the following vulnerability has been resolved: cpuidle: dt_idle_genpd: kfree() the original name allocation dt_idle_pd_alloc() kasprintf()s the full node path, then points … | Sep 16, 2026 |
| CVE-2026-89991 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix infinite loop in pcpu_freelist push with one possible CPU __pcpu_freelist_push() can loop forever … | Sep 16, 2026 |
| CVE-2026-89990 | CRITICAL | 9.8 | In the Linux kernel, the following vulnerability has been resolved: ceph: lock mutex in ceph_mds_check_access() MDS session OPEN handling replaces mdsc->s_cap_auths under mdsc->mutex, freeing the … | Sep 16, 2026 |
| CVE-2026-89989 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: ima: Check for ERR_PTR from dentry_path() in validate_hash_algo() dentry_path() returns ERR_PTR(-ENAMETOOLONG) when the path exceeds … | Sep 16, 2026 |
| CVE-2026-89988 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: kprobes: Protect kprobe_blacklist with RCU __within_kprobe_blacklist() traverses kprobe_blacklist without holding kprobe_mutex. When a module is … | Sep 16, 2026 |
| CVE-2026-89987 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: transfer the pmd dirty bit to the folio on zap zap_huge_pmd_folio() propagates the pmd … | Sep 16, 2026 |
| CVE-2026-89986 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave() syzbot reported a sleeping function called from invalid context … | Sep 16, 2026 |
| CVE-2026-89985 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: memcg: keep folio's objcg same as its node memcg_reparent_objcgs() has an inherent assumption that a … | Sep 16, 2026 |
| CVE-2026-89984 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix kernel address leakages in LBR stack Before Arch LBR gained CPL filtering support, … | Sep 16, 2026 |
| CVE-2026-89983 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix debugfs UAF on adapter removal i2c_del_adapter() frees the adapter's debugfs directory before … | Sep 16, 2026 |
| CVE-2026-89982 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: i2c: mux: Fix channel node leak on adapter add failure i2c_mux_add_adapter() takes a reference to … | Sep 16, 2026 |
| CVE-2026-89981 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: arm64: Don't read GMID_EL1 when MTE is disabled __cpuinfo_store_cpu() gates the GMID_EL1 read on the … | Sep 16, 2026 |
| CVE-2026-89980 | HIGH | 8.4 | In the Linux kernel, the following vulnerability has been resolved: ALSA: harmony: initialize locks before requesting IRQ snd_harmony_create() registers the IRQ before initializing h->lock and … | Sep 16, 2026 |
| CVE-2026-89979 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix race between non-atomic ops and trigger-start We protect the races of the … | Sep 16, 2026 |
| CVE-2026-89978 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: return early from a zero-length flush SYNC_BO does not constrain its size, so a … | Sep 16, 2026 |
| CVE-2026-89977 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: check MMIO mapping errors in probe devm_platform_ioremap_resource() returns an error pointer when the register … | Sep 16, 2026 |
| CVE-2026-89976 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: fix job completion fence cleanup ethosu_ioctl_submit_job() allocates done_fence before validating buffer handles. Errors after … | Sep 16, 2026 |
| CVE-2026-89975 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: nvme-fabrics: fix DHCHAP secret leak on parse failure nvmf_parse_options() duplicates dhchap_secret and dhchap_ctrl_secret with match_strdup() … | Sep 16, 2026 |