410224CVEs tracked
4216Last 7 days
16059Last 30 days
1756CISA KEV
Published CVEs
CRITICALHIGHMEDIUMLOWUnscored
15669 CVEs in this period · counted 2026-10-25 16:33 UTC, refreshed hourly
Recently published CVEs
4216 results| CVE | CVSS | Attack conditions / Impact | EPSS | Summary | Published |
|---|---|---|---|---|---|
| CVE-2026-98959 | 9.8
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
0.2% | btrfs: fix xattr replace when multiple xattrs are packed in the same item In the Linux kernel, the following vulnerability has been resolved: btrfs: fix xattr replace when multiple xattrs are packed in the same item If we have a btrfs_dir_item item that packs multiple xat… |
2026-10-23 |
| CVE-2026-98958 | — | Not scored | 0.2% | wifi: mt76: account non-AQL frames per peer rather than per link In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: account non-AQL frames per peer rather than per link The driver increments wcid->non_aql_packets when a frame goes to … |
2026-10-23 |
| CVE-2026-98957 | — | Not scored | 0.2% | wifi: mt76: mt7915: disable rx napi when removing device In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: disable rx napi when removing device Unloading the mt7915e module with a MT7916 triggers multiples WARN in __n… |
2026-10-23 |
| CVE-2026-98956 | — | Not scored | 0.2% | ASoC: adau1372: allow sleepy powerdown GPIOs In the Linux kernel, the following vulnerability has been resolved: ASoC: adau1372: allow sleepy powerdown GPIOs gpiod_set_value() emits a WARN when the GPIO provider indicates that it can sleep, as… |
2026-10-23 |
| CVE-2026-98955 | — | Not scored | 0.2% | flow_dissector: avoid u16 truncation of skb->len when computing thoff In the Linux kernel, the following vulnerability has been resolved: flow_dissector: avoid u16 truncation of skb->len when computing thoff __skb_flow_dissect() computes key_control->thoff using: k… |
2026-10-23 |
| CVE-2026-98954 | — | Not scored | 0.2% | net: always dissect GSO packets in __virtio_net_hdr_to_skb() In the Linux kernel, the following vulnerability has been resolved: net: always dissect GSO packets in __virtio_net_hdr_to_skb() Commit 9e8db5913264 ("net: avoid false positives in untrusted gso val… |
2026-10-23 |
| CVE-2026-98953 | — | Not scored | 0.2% | devlink: fix devlink_rel reference leak when notify work is pending In the Linux kernel, the following vulnerability has been resolved: devlink: fix devlink_rel reference leak when notify work is pending devlink_rel_nested_in_notify_work_schedule() takes a reference… |
2026-10-23 |
| CVE-2026-98952 | 7.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:LI:LA:L
|
0.2% | pfcp: make sure the SEID is linear before reading it In the Linux kernel, the following vulnerability has been resolved: pfcp: make sure the SEID is linear before reading it pfcp_encap_recv() only makes sure that the UDP header and the 4 byte PFCP hea… |
2026-10-23 |
| CVE-2026-98951 | — | Not scored | 0.2% | riscv: ptrace: Zero-initialize regset buffers before copyin In the Linux kernel, the following vulnerability has been resolved: riscv: ptrace: Zero-initialize regset buffers before copyin user_regset_copyin() only copies `count` bytes, so a PTRACE_SETREGSET … |
2026-10-23 |
| CVE-2026-98950 | — | Not scored | 0.2% | flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() In the Linux kernel, the following vulnerability has been resolved: flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() bpf_flow_dissect() sanitizes the offsets returned by the BPF pr… |
2026-10-23 |
| CVE-2026-98949 | — | Not scored | 0.2% | drm/imagination: Fix reference and vm_bo handling in remap() In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix reference and vm_bo handling in remap() When a map overlaps part of an existing mapping, pvr_vm_gpuva_remap()… |
2026-10-23 |
| CVE-2026-98948 | — | Not scored | 0.2% | mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() mlxsw_sp_flower_tmplt_create() parses a flow_cls_offload te… |
2026-10-23 |
| CVE-2026-98947 | — | Not scored | 0.2% | vsock: Fix memory leak in vmci_transport_recv_dgram_cb() In the Linux kernel, the following vulnerability has been resolved: vsock: Fix memory leak in vmci_transport_recv_dgram_cb() During the closure of a datagram socket, the vmci_transport_recv_dgram_cb… |
2026-10-23 |
| CVE-2026-98946 | — | Not scored | 0.2% | drm/vc4: Disable the V3D interrupt across runtime suspend In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Disable the V3D interrupt across runtime suspend vc4_irq_disable() masks the V3D interrupt sources and then calls synchro… |
2026-10-23 |
| CVE-2026-98945 | 7.8
CNA (via NVD) v3.1 |
LocalLoginNo interaction
C:HI:HA:H
|
0.2% | HID: steam: Rearrange teardown sequence In the Linux kernel, the following vulnerability has been resolved: HID: steam: Rearrange teardown sequence This fixes a narrow window during the teardown sequence where callbacks could still be sch… |
2026-10-23 |
| CVE-2026-98944 | 7.8
CNA (via NVD) v3.1 |
LocalLoginNo interaction
C:HI:HA:H
|
0.2% | HID: steam: Refactor registration In the Linux kernel, the following vulnerability has been resolved: HID: steam: Refactor registration This refactors and simplifies the registration/unregistration flow. Since we now only perform re… |
2026-10-23 |
| CVE-2026-98943 | — | Not scored | 0.2% | HID: steam: Clean up locking In the Linux kernel, the following vulnerability has been resolved: HID: steam: Clean up locking This cleans up several issues with locking behavior, including RCU accesses not being guarded behind … |
2026-10-23 |
| CVE-2026-98942 | — | Not scored | 0.2% | sched_ext: Build the cid tables privately and publish them with RCU In the Linux kernel, the following vulnerability has been resolved: sched_ext: Build the cid tables privately and publish them with RCU The cid tables are visible to the cid kfuncs while being modif… |
2026-10-23 |
| CVE-2026-98941 | 7.0
CNA (via NVD) v3.1 |
LocalLoginNo interactionConditions
C:HI:HA:H
|
0.2% | ext4: don't enable large folios on encrypted inodes In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable large folios on encrypted inodes Commit 709f0f1f1bf5 ("ext4: add checks for large folio incompatibilities when … |
2026-10-23 |
| CVE-2026-98940 | — | Not scored | 0.2% | ASoC: qcom: lpass-cpu: use DAI table index for playback constraints In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: lpass-cpu: use DAI table index for playback constraints The DAI ID is a hardware port ID and is not necessarily the in… |
2026-10-23 |
| CVE-2026-98939 | — | Not scored | 0.2% | x86/mm: Drop unnecessary PMD page copy when freeing In the Linux kernel, the following vulnerability has been resolved: x86/mm: Drop unnecessary PMD page copy when freeing On a box with a discrete GPU, lockdep reports a possible deadlock as soon as k… |
2026-10-23 |
| CVE-2026-98938 | — | Not scored | 0.2% | rust: irq: pass RegistrationInner as cookie to request_irq In the Linux kernel, the following vulnerability has been resolved: rust: irq: pass RegistrationInner as cookie to request_irq With commit ba268514ea14 ("rust: devres: fix race condition due to nest… |
2026-10-23 |
| CVE-2026-98937 | — | Not scored | 0.2% | perf/core: Check kernel access when kernel callchains are requested In the Linux kernel, the following vulnerability has been resolved: perf/core: Check kernel access when kernel callchains are requested perf_event_open() currently gates perf_allow_kernel() only on … |
2026-10-23 |
| CVE-2026-98936 | — | Not scored | 0.2% | wifi: ath11k: reset ar->num_stations on hardware start In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: reset ar->num_stations on hardware start When (multiple) hw restart occurs, we end up in a situation where we cannot… |
2026-10-23 |
| CVE-2026-98935 | — | Not scored | 0.2% | rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak In the Linux kernel, the following vulnerability has been resolved: rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak The struct rtc_wkalrm has padding holes after the 'pending… |
2026-10-23 |
| CVE-2026-98934 | — | Not scored | 0.2% | ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel() In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel() Since commit d58e468b1112 ("flow_dissector: implements flow dissector BP… |
2026-10-23 |
| CVE-2026-98933 | — | Not scored | 0.2% | usb: hub: use shorter 120ms post resume hold for SS root hubs In the Linux kernel, the following vulnerability has been resolved: usb: hub: use shorter 120ms post resume hold for SS root hubs Holding a USB3 hub PM runtime reference for 200ms at hub resume trig… |
2026-10-23 |
| CVE-2026-98932 | 7.4
CNA (via NVD) v3.1 |
LocalNo authNo interactionConditions
C:HI:HA:H
|
0.2% | EDAC/altera: Fix use-after-free in error paths In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Fix use-after-free in error paths In both altr_edac_a10_device_add() and altr_portb_setup(), the error path freed the… |
2026-10-23 |
| CVE-2026-98931 | — | Not scored | 0.2% | mtd: spinand: fix NULL pointer dereference with no ECC engine In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix NULL pointer dereference with no ECC engine When "nand-no-ecc-engine" is set in DT, nanddev_get_ecc_engine() tak… |
2026-10-23 |
| CVE-2026-98930 | — | Not scored | 0.2% | KVM: s390: Fix IRQ injection with SIGP Stop and Store Status In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix IRQ injection with SIGP Stop and Store Status When __inject_sigp_stop() is called for a Stop and Store Status opera… |
2026-10-23 |
| CVE-2026-98929 | — | Not scored | 0.2% | macsec: initialize SecY before registering the netdevice In the Linux kernel, the following vulnerability has been resolved: macsec: initialize SecY before registering the netdevice Creating a MACsec device with MAC offload over an LRO-capable lower devic… |
2026-10-23 |
| CVE-2026-98928 | — | Not scored | 0.2% | KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2 pkvm_init_features_from_host() takes KVM_ARCH_FLAG_GUEST_HAS_SVE … |
2026-10-23 |
| CVE-2026-98927 | 7.0
CNA (via NVD) v3.1 |
LocalLoginNo interactionConditions
C:HI:HA:H
|
0.2% | KVM: arm64: nv: Fix life cycle of the nested_mmus array In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix life cycle of the nested_mmus array The nested_mmus array holds the shadow page tables that are used when a gu… |
2026-10-23 |
| CVE-2026-98926 | — | Not scored | 0.2% | drm/amd/display: Remove sink usage from DPMS In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Remove sink usage from DPMS [Why] stream->sink is optional and can be null, so should always be checked before de… |
2026-10-23 |
| CVE-2026-98925 | — | Not scored | 0.2% | bpf, sockmap: Fix self-redirect copied_seq double-counting In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix self-redirect copied_seq double-counting When a BPF stream_verdict program redirects an skb back to the same soc… |
2026-10-23 |
| CVE-2026-98924 | — | Not scored | 0.2% | fs: avoid repeated scans in evict_inodes() In the Linux kernel, the following vulnerability has been resolved: fs: avoid repeated scans in evict_inodes() We observed hung tasks when users attempted to unmount a filesystem after its disk had … |
2026-10-23 |
| CVE-2026-98923 | — | Not scored | 0.2% | arm64: io: Reject non-user protection in ioremap_prot() In the Linux kernel, the following vulnerability has been resolved: arm64: io: Reject non-user protection in ioremap_prot() Mapping a stack-top page via /dev/mem with PROT_NONE and then reading that… |
2026-10-23 |
| CVE-2026-98922 | — | Not scored | 0.2% | net: emac: move setting of netops to fix crash In the Linux kernel, the following vulnerability has been resolved: net: emac: move setting of netops to fix crash fixes the following crash on driver initialization: |BUG: Kernel NULL pointer dere… |
2026-10-23 |
| CVE-2026-98921 | — | Not scored | 0.2% | ovl: fix UAF in ovl_do_mkdir() debug print In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl_do_mkdir() debug print ovl_do_mkdir() prints the input dentry with %pd after vfs_mkdir(). Since commit fe497f0… |
2026-10-23 |
| CVE-2026-98920 | — | Not scored | 0.2% | netfs: Fix missing alloc tagging of direct mempool allocations In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing alloc tagging of direct mempool allocations Commit 1d78d56c43ef ("netfs: Fix folio_queue ENOMEM in writeback by… |
2026-10-23 |
| CVE-2026-98919 | — | Not scored | 0.2% | drm/xe: harden adjust_idledly() against divide-by-zero and overflow In the Linux kernel, the following vulnerability has been resolved: drm/xe: harden adjust_idledly() against divide-by-zero and overflow adjust_idledly() has several corner-case issues flagged during… |
2026-10-23 |
| CVE-2026-98918 | — | Not scored | 0.2% | mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold() In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold() __damon_va_prepare_access_check() picks a random byte addres… |
2026-10-23 |
| CVE-2026-98917 | — | Not scored | 0.2% | parisc: Increase kernel stack size to 32kb In the Linux kernel, the following vulnerability has been resolved: parisc: Increase kernel stack size to 32kb For 64-bit Linux kernels, increase the default kernel stack size (THREAD_SIZE_ORDER) to… |
2026-10-23 |
| CVE-2026-63120 | 8.4
CNA (via NVD) v3.1 |
NetworkAdminUser action
Scope change
C:HI:HA:H
|
0.5% | PGHoard: Incomplete Path Traversal fix in restore.py allows Arbitrary File Write pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.2, an incomplete path traversal fix in pghoard allows an attacker with wr… |
2026-10-23 |
| CVE-2026-57210 | 7.0
CNA (via NVD) v4.0 |
NetworkNo authNo interactionConditions
Scope change
C:NI:NA:N
|
0.4% | Heimdall: IP Spoofing via Unvalidated Forwarding Headers Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when the trusted_proxies option is configured, heimdall extracts client IP addresses from… |
2026-10-23 |
| CVE-2026-57209 | 7.0
CNA (via NVD) v4.0 |
NetworkNo authNo interactionConditions
Scope change
C:NI:NA:N
|
0.5% | Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when Heimdall operates in proxy mode, it constructs the Forwarded HTTP header after execu… |
2026-10-23 |
| CVE-2026-57146 | 7.5
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:NA:N
|
0.5% | PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated b… PraisonAI is a multi-agent teams system. From version 4.5.115 to before version 4.6.61, the published A2U advisory GHSA-f292-66h9-fpmf says unauthenticated A2U event streaming was fixed in praisonai 4… |
2026-10-23 |
| CVE-2026-57144 | 8.8
CNA (via NVD) v3.1 |
LocalLoginNo interaction
Scope change
C:HI:HA:H
|
0.2% | PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is… PraisonAI is a multi-agent teams system. From version 4.5.110 to before version 4.6.61, praisonai.sandbox.SandlockSandbox is documented and implemented as the kernel-enforced sandbox backend for untru… |
2026-10-23 |
| CVE-2026-57142 | 7.8
CNA (via NVD) v3.1 |
LocalNo authUser action
C:HI:HA:H
|
0.2% | PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous… PraisonAI is a multi-agent teams system. From version 4.5.87 to before version 4.6.61, PraisonAI recipe execution has a dangerous-tool policy that is supposed to block default-denied tools unless the … |
2026-10-23 |
| CVE-2026-57121 | 8.1
CNA (via NVD) v3.1 |
NetworkLoginNo interaction
C:NI:HA:H
|
0.4% | PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' co… PraisonAI is a multi-agent teams system. From version 0.1.4 to before version 0.1.5 in praisonai-platform, a workspace member can permanently delete any resource — projects, agents, issues, labels, is… |
2026-10-23 |