100 entries matching linux kernel — updated 2026-11-02 · vulnfeed
| CVE / ID | Title | Severity | CVSS | EPSS | Source | Date |
|---|---|---|---|---|---|---|
| CVE-2026-99227 | In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: prevent cancel reference wrap io_ | HIGH | 7.8 | — | NVD | 2026-11-02 |
| CVE-2026-99231 | In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: own the request before clearing -> | HIGH | 7.8 | — | NVD | 2026-11-02 |
| CVE-2026-99233 | In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Verify event_call identity when | HIGH | 7.8 | — | NVD | 2026-11-02 |
| CVE-2026-99235 | In the Linux kernel, the following vulnerability has been resolved: tracing: Save the event file instead of the compati | HIGH | 7.8 | — | NVD | 2026-11-02 |
| CVE-2026-99236 | In the Linux kernel, the following vulnerability has been resolved: tracing: Reject incomplete event filter expressions | HIGH | 7.8 | — | NVD | 2026-11-02 |
| CVE-2026-99237 | In the Linux kernel, the following vulnerability has been resolved: tracing: Hold trace_types_lock when resetting last | HIGH | 7.8 | — | NVD | 2026-11-02 |
| CVE-2026-99238 | In the Linux kernel, the following vulnerability has been resolved: tracing: Hold trace_types_lock when updating module | HIGH | 7.8 | — | NVD | 2026-11-02 |
| CVE-2026-99239 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: refuse __l2cap_chan_add if chan a | HIGH | 7.8 | — | NVD | 2026-11-02 |
| CVE-2026-99218 | In the Linux kernel, the following vulnerability has been resolved: coredump: hold RCU while releasing parked threads | HIGH | 7.0 | — | NVD | 2026-11-02 |
| CVE-2026-99224 | In the Linux kernel, the following vulnerability has been resolved: keys: Protect the type name while describing a key | HIGH | 7.0 | — | NVD | 2026-11-02 |
| CVE-2026-99217 | In the Linux kernel, the following vulnerability has been resolved: fork: release the files of a failed fork after sche | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-99219 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Initialize modname and offset in print_rec( | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-99220 | In the Linux kernel, the following vulnerability has been resolved: asymmetric_keys: reject trust keys without IDs The | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-99221 | In the Linux kernel, the following vulnerability has been resolved: keys/trusted_keys: return immediately after TPM uns | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-99222 | In the Linux kernel, the following vulnerability has been resolved: keys: Protect the read method check against type re | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-99223 | In the Linux kernel, the following vulnerability has been resolved: keys: make keyring indexes independent of kernel ad | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-99225 | In the Linux kernel, the following vulnerability has been resolved: keys: Check the authorization payload in process ke | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-99226 | In the Linux kernel, the following vulnerability has been resolved: keys: Avoid the owner account dereference in named | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-99228 | In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: don't lose the signal that ends wor | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-99229 | In the Linux kernel, the following vulnerability has been resolved: io_uring/wait: don't spin on a stuck overflow list | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-99230 | In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd: don't leave list poison in ->hash_nod | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-99232 | In the Linux kernel, the following vulnerability has been resolved: tracing/syscalls: Use copy_from_user for the faulta | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-99234 | In the Linux kernel, the following vulnerability has been resolved: tracing: Unregister field variable histograms when | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-99240 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: error damos_commit_quota_goal() for | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-99241 | In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidate_lock in ntfs_filemap_page_mkw | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-99242 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix race between fallocate and mmap reads Th | UNKNOWN | — | — | NVD | 2026-11-02 |
| FG-IR-26-188 | Linux kernel RCE CVE-2026-98432 | HIGH | 8.1 | — | Fortinet | 2026-11-02 |
| CVE-2026-99153 | In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the ITT reflected in a Rej | CRITICAL | 9.8 | 46%ile | NVD | 2026-10-28 |
| CVE-2026-99154 | In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Reject a negative task index from p | CRITICAL | 9.8 | 44%ile | NVD | 2026-10-28 |
| CVE-2026-99170 | In the Linux kernel, the following vulnerability has been resolved: namespace: a mount that copy_tree() leaves out can' | HIGH | 8.8 | 3%ile | NVD | 2026-10-28 |
| CVE-2026-99185 | In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition in split transac | HIGH | 8.8 | 12%ile | NVD | 2026-10-28 |
| CVE-2026-99216 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Don't reset VMBus connection state on | HIGH | 8.4 | 3%ile | NVD | 2026-10-28 |
| CVE-2026-99131 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix capability check in xfs An user reported | HIGH | 8.2 | 39%ile | NVD | 2026-10-28 |
| CVE-2026-99107 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix incorrect MFT record pointer passed to nt | HIGH | 7.8 | 2%ile | NVD | 2026-10-28 |
| CVE-2026-99109 | In the Linux kernel, the following vulnerability has been resolved: smb: client: reject SetEA requests that do not fit | HIGH | 7.8 | 3%ile | NVD | 2026-10-28 |
| CVE-2026-99116 | In the Linux kernel, the following vulnerability has been resolved: net: psp: do not inherit the Rx association on clon | HIGH | 7.8 | 3%ile | NVD | 2026-10-28 |
| CVE-2026-99117 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: don't truncate the port group w | HIGH | 7.8 | 2%ile | NVD | 2026-10-28 |
| CVE-2026-99143 | In the Linux kernel, the following vulnerability has been resolved: tracing: Keep the predicate limit separate from pro | HIGH | 7.8 | 2%ile | NVD | 2026-10-28 |
| CVE-2026-99156 | In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between st_remove | HIGH | 7.8 | 3%ile | NVD | 2026-10-28 |
| CVE-2026-99163 | In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Reject non-stacktrace fields fo | HIGH | 7.8 | 3%ile | NVD | 2026-10-28 |
| CVE-2026-99164 | In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix slab corruption from undersized DMA b | HIGH | 7.8 | 3%ile | NVD | 2026-10-28 |
| CVE-2026-99167 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fix use-after-free in __tcf_action_put() | HIGH | 7.8 | 3%ile | NVD | 2026-10-28 |
| CVE-2026-99173 | In the Linux kernel, the following vulnerability has been resolved: eventfs: Free the eventfs_inode after an rcu grace | HIGH | 7.8 | 2%ile | NVD | 2026-10-28 |
| CVE-2026-99177 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Fix page dirtying in sev_gmem_post_popula | HIGH | 7.8 | 2%ile | NVD | 2026-10-28 |
| CVE-2026-99180 | In the Linux kernel, the following vulnerability has been resolved: unicode: free the map after a grace period generic | HIGH | 7.8 | 3%ile | NVD | 2026-10-28 |
| CVE-2026-99203 | In the Linux kernel, the following vulnerability has been resolved: pipe: preserve existing fasync readers on writer se | HIGH | 7.8 | 2%ile | NVD | 2026-10-28 |
| CVE-2026-99213 | In the Linux kernel, the following vulnerability has been resolved: vsock: treat TCP_CLOSING as once-established Handl | HIGH | 7.8 | 2%ile | NVD | 2026-10-28 |
| CVE-2026-99152 | In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the task named by a manage | HIGH | 7.5 | 44%ile | NVD | 2026-10-28 |
| CVE-2026-99122 | In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: validate packet source for connected so | HIGH | 7.3 | 2%ile | NVD | 2026-10-28 |
| CVE-2026-99112 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flower: validate mask pointer after | HIGH | 7.1 | 3%ile | NVD | 2026-10-28 |
| CVE-2026-99123 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: validate packet source for connected | HIGH | 7.1 | 2%ile | NVD | 2026-10-28 |
| CVE-2026-99142 | In the Linux kernel, the following vulnerability has been resolved: tracing: Check operator stack capacity before pushi | HIGH | 7.1 | 3%ile | NVD | 2026-10-28 |
| CVE-2026-99148 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: keep the eviction fence until the last | HIGH | 7.0 | 2%ile | NVD | 2026-10-28 |
| CVE-2026-99212 | In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let the rdma_cm destroy an id RDS st | HIGH | 7.0 | 2%ile | NVD | 2026-10-28 |
| CVE-2026-99102 | In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidate_lock in ntfs_setattr_size() | UNKNOWN | — | 5%ile | NVD | 2026-10-28 |
| CVE-2026-99103 | In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix unbound pool lifetime for pending pw | UNKNOWN | — | 7%ile | NVD | 2026-10-28 |
| CVE-2026-99104 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix the bypass dispatch claim for schedu | UNKNOWN | — | 7%ile | NVD | 2026-10-28 |
| CVE-2026-99105 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix stall when a task enqueued with SCX_ | UNKNOWN | — | 6%ile | NVD | 2026-10-28 |
| CVE-2026-99108 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix FITRIM range alignment ntfs_trim_fs() al | UNKNOWN | — | 6%ile | NVD | 2026-10-28 |
| CVE-2026-99111 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix data corruption with concurrent wr | UNKNOWN | — | 6%ile | NVD | 2026-10-28 |
| CVE-2026-99119 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: actually validate userq BOs This | UNKNOWN | — | 6%ile | NVD | 2026-10-28 |
| CVE-2026-99120 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Cope with the SS bit being set in #NP | UNKNOWN | — | 7%ile | NVD | 2026-10-28 |
| CVE-2026-99125 | In the Linux kernel, the following vulnerability has been resolved: s390/pai: Handle multiple PMU stop callback invocat | UNKNOWN | — | 5%ile | NVD | 2026-10-28 |
| CVE-2026-99129 | In the Linux kernel, the following vulnerability has been resolved: selinux: fix BPF token permission checks Avoid mul | UNKNOWN | — | 5%ile | NVD | 2026-10-28 |
| CVE-2026-99134 | In the Linux kernel, the following vulnerability has been resolved: mac802154: fix data race and NULL deref on local->a | UNKNOWN | — | 6%ile | NVD | 2026-10-28 |
| CVE-2026-99137 | In the Linux kernel, the following vulnerability has been resolved: cifs: don't update i_size in cifs_do_truncate witho | UNKNOWN | — | 6%ile | NVD | 2026-10-28 |
| CVE-2026-99141 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash in print_graph_function_event() | UNKNOWN | — | 5%ile | NVD | 2026-10-28 |
| CVE-2026-99144 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix use-after-free of a destroyed user D | UNKNOWN | — | 5%ile | NVD | 2026-10-28 |
| CVE-2026-99145 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't transfer shrinker pages for pinned bo | UNKNOWN | — | 6%ile | NVD | 2026-10-28 |
| CVE-2026-99149 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix GEM object leak on ENOMEM in userpt | UNKNOWN | — | 5%ile | NVD | 2026-10-28 |
| CVE-2026-99151 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL sink dereference in USB4 | UNKNOWN | — | 5%ile | NVD | 2026-10-28 |
| CVE-2026-99158 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix false warning in ring_buffer_map_g | UNKNOWN | — | 6%ile | NVD | 2026-10-28 |
| CVE-2026-99159 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix the sub-buffer array base in rb_me | UNKNOWN | — | 7%ile | NVD | 2026-10-28 |
| CVE-2026-99160 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not show buffer_meta for CPUs witho | UNKNOWN | — | 6%ile | NVD | 2026-10-28 |
| CVE-2026-99162 | In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix use-after-free bug when adding sh | UNKNOWN | — | 5%ile | NVD | 2026-10-28 |
| CVE-2026-99168 | In the Linux kernel, the following vulnerability has been resolved: mshv_vtl: Check per-CPU register page before mmap | UNKNOWN | — | 5%ile | NVD | 2026-10-28 |
| CVE-2026-99175 | In the Linux kernel, the following vulnerability has been resolved: fsnotify: prevent mark additions during connector t | UNKNOWN | — | 7%ile | NVD | 2026-10-28 |
| CVE-2026-99183 | In the Linux kernel, the following vulnerability has been resolved: accel/rocket: search every core slot when looking u | UNKNOWN | — | 5%ile | NVD | 2026-10-28 |
| CVE-2026-99184 | In the Linux kernel, the following vulnerability has been resolved: accel/rocket: search every core slot when a core is | UNKNOWN | — | 6%ile | NVD | 2026-10-28 |
| CVE-2026-99186 | In the Linux kernel, the following vulnerability has been resolved: x86/insn-eval: Fix shadowed segment index in get_se | UNKNOWN | — | 5%ile | NVD | 2026-10-28 |
| CVE-2026-99188 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac1000: clear the RGMII status inte | UNKNOWN | — | 5%ile | NVD | 2026-10-28 |
| CVE-2026-99190 | In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix memory leak in gpiod_set_array_value_c | UNKNOWN | — | 7%ile | NVD | 2026-10-28 |
| CVE-2026-99193 | In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: Move setting of netops to fi | UNKNOWN | — | 4%ile | NVD | 2026-10-28 |
| CVE-2026-99194 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: aeroflex: move setting of netops to | UNKNOWN | — | 4%ile | NVD | 2026-10-28 |
| CVE-2026-99195 | In the Linux kernel, the following vulnerability has been resolved: net: ethoc: move setting of netops to fix crash et | UNKNOWN | — | 4%ile | NVD | 2026-10-28 |
| CVE-2026-99196 | In the Linux kernel, the following vulnerability has been resolved: net: au1000: move setting of netops to fix crash a | UNKNOWN | — | 7%ile | NVD | 2026-10-28 |
| CVE-2026-99197 | In the Linux kernel, the following vulnerability has been resolved: net: mv643xx: move setting of netops to fix crash | UNKNOWN | — | 4%ile | NVD | 2026-10-28 |
| CVE-2026-99198 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: actions: Move setting of netops to f | UNKNOWN | — | 7%ile | NVD | 2026-10-28 |
| CVE-2026-99199 | In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hip04_eth: Move setting of netops t | UNKNOWN | — | 4%ile | NVD | 2026-10-28 |
| CVE-2026-99200 | In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hisi_femac: Move setting of netops | UNKNOWN | — | 4%ile | NVD | 2026-10-28 |
| CVE-2026-99202 | In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix SMP IO deadlock during HA resume | UNKNOWN | — | 7%ile | NVD | 2026-10-28 |
| CVE-2026-99205 | In the Linux kernel, the following vulnerability has been resolved: sched/core: Call wakeup_preempt() for queued tasks | UNKNOWN | — | 4%ile | NVD | 2026-10-28 |
| CVE-2026-99207 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: Disable interrupts while holding dela | UNKNOWN | — | 4%ile | NVD | 2026-10-28 |
| CVE-2026-99208 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Zero OA buffer at allocation ttm_bo_typ | UNKNOWN | — | 5%ile | NVD | 2026-10-28 |
| CVE-2026-99209 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: skip eviction of a BO with no resource xe_ | UNKNOWN | — | 5%ile | NVD | 2026-10-28 |
| CVE-2026-99210 | In the Linux kernel, the following vulnerability has been resolved: accel/rocket: clear rdev on device init failure ro | UNKNOWN | — | 5%ile | NVD | 2026-10-28 |
| CVE-2026-99214 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Move packet RAM enable to PM runtime | UNKNOWN | — | 5%ile | NVD | 2026-10-28 |
| CVE-2026-62840 | Linux Kernel Elevation of Privilege Vulnerability | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| ionstack-2026 | IonStack Part 2: Linux kernel io_uring privilege escalation exploit chain | HIGH | 7.8 | — | Featured | 2026-07-07 |
| CVE-2026-45476 | Microsoft Azure Network Adapter Elevation of Privilege Vulnerability | HIGH | 8.2 | 26%ile | Microsoft | 2026-06-09 |