415043CVEs tracked
4582Last 7 days
16022Last 30 days
1756CISA KEV
Published CVEs
CRITICALHIGHMEDIUMLOWUnscored
15595 CVEs in this period · counted 2026-10-25 14:13 UTC, refreshed hourly
Recently published CVEs
4582 results| CVE | CVSS | Attack conditions / Impact | EPSS | Summary | Published |
|---|---|---|---|---|---|
| CVE-2026-98985 | — | Not scored | 0.2% | namespace: check the mounts before reading their parents in pivot_root() In the Linux kernel, the following vulnerability has been resolved: namespace: check the mounts before reading their parents in pivot_root() path_pivot_root() reads the parents of new_root and of th… |
2026-10-23 |
| CVE-2026-98984 | — | Not scored | 0.2% | dcache: don't put a mountpoint on a dentry that's being removed In the Linux kernel, the following vulnerability has been resolved: dcache: don't put a mountpoint on a dentry that's being removed rmdir(), unlink() and rename() call dont_mount() on the victim and… |
2026-10-23 |
| CVE-2026-98983 | — | Not scored | 0.2% | unshare: don't drop active namespace references that were never taken In the Linux kernel, the following vulnerability has been resolved: unshare: don't drop active namespace references that were never taken Active references on the namespaces of an nsproxy are taken … |
2026-10-23 |
| CVE-2026-98982 | 7.8
CNA (via NVD) v3.1 |
LocalLoginNo interaction
C:HI:HA:H
|
0.2% | namespace: don't let a pseudo dentry become the root of a mount In the Linux kernel, the following vulnerability has been resolved: namespace: don't let a pseudo dentry become the root of a mount d_alloc_pseudo() hands out dentries for pipes, sockets and other f… |
2026-10-23 |
| CVE-2026-98981 | 8.8
CNA (via NVD) v3.1 |
LocalLoginNo interaction
Scope change
C:HI:HA:H
|
0.2% | namespace: unhash a dentry before detaching the mounts on it In the Linux kernel, the following vulnerability has been resolved: namespace: unhash a dentry before detaching the mounts on it unlink(), rmdir() and rename() remove the entry from the filesystem, … |
2026-10-23 |
| CVE-2026-98980 | 8.8
CNA (via NVD) v3.1 |
LocalLoginNo interaction
Scope change
C:HI:HA:H
|
0.2% | namei: don't reveal overmounted entries in refwalk In the Linux kernel, the following vulnerability has been resolved: namei: don't reveal overmounted entries in refwalk In rcuwalk the dentry is validated before it is accepted. step_into() step_into… |
2026-10-23 |
| CVE-2026-98979 | — | Not scored | 0.2% | namespace: refuse an automount below a mount that is in no namespace In the Linux kernel, the following vulnerability has been resolved: namespace: refuse an automount below a mount that is in no namespace It's possible to add autmounts even when the parent mount isn… |
2026-10-23 |
| CVE-2026-98978 | 8.4
CNA (via NVD) v3.1 |
LocalLoginNo interaction
Scope change
C:HI:HA:N
|
0.2% | namespace: never expire a locked mount In the Linux kernel, the following vulnerability has been resolved: namespace: never expire a locked mount Locked mounts are special. They protect the underlying files and directories from being rev… |
2026-10-23 |
| CVE-2026-98977 | — | Not scored | 0.2% | namespace: handle mount locking for automounts correctly In the Linux kernel, the following vulnerability has been resolved: namespace: handle mount locking for automounts correctly If mounts are propagated across user namespaces, attach_recursive_mnt() l… |
2026-10-23 |
| CVE-2026-98976 | 7.8
CNA (via NVD) v3.1 |
LocalLoginNo interactionConditions
Scope change
C:HI:HA:H
|
0.2% | namespace: keep the lock on a mount that a propagated copy is moved beneath In the Linux kernel, the following vulnerability has been resolved: namespace: keep the lock on a mount that a propagated copy is moved beneath attach_recursive_mnt() transfers MNT_LOCKED from the t… |
2026-10-23 |
| CVE-2026-98975 | 7.8
CNA (via NVD) v3.1 |
LocalLoginNo interaction
C:HI:HA:H
|
0.2% | xfs: stop exchanging reflink flags when exchanging mappings In the Linux kernel, the following vulnerability has been resolved: xfs: stop exchanging reflink flags when exchanging mappings When an exchange covers both files from offset 0 to i_disk_size, xmi_c… |
2026-10-23 |
| CVE-2026-98974 | 7.8
CNA (via NVD) v3.1 |
LocalLoginNo interaction
C:HI:HA:H
|
0.2% | xfs: fix exchange-range-to-eof file size exchange In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range-to-eof file size exchange Norbert Szetei posted a patch containing an incomplete description of a bug in X… |
2026-10-23 |
| CVE-2026-98973 | — | Not scored | 0.2% | drm/bridge: Fix unlocked list_del in drm_bridge_add() In the Linux kernel, the following vulnerability has been resolved: drm/bridge: Fix unlocked list_del in drm_bridge_add() When re-adding a bridge that was previously removed, drm_bridge_add() drops … |
2026-10-23 |
| CVE-2026-98972 | — | Not scored | 0.2% | cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() After seeing the patch [1] to guard is_in_v2_mode() with RC… |
2026-10-23 |
| CVE-2026-98971 | — | Not scored | 0.2% | gpio: exar: initialize the ID before registering its cleanup In the Linux kernel, the following vulnerability has been resolved: gpio: exar: initialize the ID before registering its cleanup devm_add_action_or_reset() invokes the cleanup action immediately whe… |
2026-10-23 |
| CVE-2026-98970 | — | Not scored | 0.2% | drm/vc4: Free the BO cache size list on teardown In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Free the BO cache size list on teardown vc4_bo_cache_destroy() purges the cached BOs but never frees the size list, leaki… |
2026-10-23 |
| CVE-2026-98969 | — | Not scored | 0.2% | net/sched: em_text: reject unterminated algo before autoload In the Linux kernel, the following vulnerability has been resolved: net/sched: em_text: reject unterminated algo before autoload This is a follow-up to commit 9c572a83037a ("net/sched: fix potential… |
2026-10-23 |
| CVE-2026-98968 | 8.1
CNA (via NVD) v3.1 |
NetworkNo authNo interactionConditions
C:HI:HA:H
|
0.2% | amt: send the relay's General Query directly from the receive path In the Linux kernel, the following vulnerability has been resolved: amt: send the relay's General Query directly from the receive path An skb queued in a qdisc can outlive the tunnel it references t… |
2026-10-23 |
| CVE-2026-98967 | — | Not scored | 0.2% | cxgb4/ch_ktls: disable softirqs around tid_list erases In the Linux kernel, the following vulnerability has been resolved: cxgb4/ch_ktls: disable softirqs around tid_list erases chcr_ktls_cpl_act_open_rpl() inserts into tid_list from the receive path us… |
2026-10-23 |
| CVE-2026-98966 | — | Not scored | 0.2% | bonding: fix the program leak when XDP is replaced In the Linux kernel, the following vulnerability has been resolved: bonding: fix the program leak when XDP is replaced We need to release the reference on the old BPF prog, whether we are going to n… |
2026-10-23 |
| CVE-2026-98965 | 7.5
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:NI:NA:H
|
0.2% | ice: Restore Ordered MMIO Writes for Tx Doorbells In the Linux kernel, the following vulnerability has been resolved: ice: Restore Ordered MMIO Writes for Tx Doorbells The DQL accounting state which tracks the number of bytes queued for the NIC to … |
2026-10-23 |
| CVE-2026-98964 | 7.5
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:NI:NA:H
|
0.2% | nvmet: use the local P2P device on metadata allocation failure In the Linux kernel, the following vulnerability has been resolved: nvmet: use the local P2P device on metadata allocation failure nvmet_req_alloc_p2pmem_sgls() assigns req->p2p_dev only after the d… |
2026-10-23 |
| CVE-2026-98963 | — | Not scored | 0.2% | btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio In the Linux kernel, the following vulnerability has been resolved: btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio If all bios finish before btrfs_encoded_read_regular_fill_pa… |
2026-10-23 |
| CVE-2026-98962 | — | Not scored | 0.2% | btrfs: free iov when btrfs_uring_read_extent() fails In the Linux kernel, the following vulnerability has been resolved: btrfs: free iov when btrfs_uring_read_extent() fails After btrfs_uring_read_extent(), the caller always jumped to out_acct. That s… |
2026-10-23 |
| CVE-2026-98961 | — | Not scored | 0.2% | btrfs: unlock inode and extent in caller when io_uring read extent fails In the Linux kernel, the following vulnerability has been resolved: btrfs: unlock inode and extent in caller when io_uring read extent fails btrfs_uring_read_extent() runs only after btrfs_encoded_r… |
2026-10-23 |
| CVE-2026-98960 | — | Not scored | 0.2% | btrfs: don't stash io_uring encoded data across -EAGAIN In the Linux kernel, the following vulnerability has been resolved: btrfs: don't stash io_uring encoded data across -EAGAIN Returning -EAGAIN while leaving btrfs_uring_encoded_data in the cmd PDU le… |
2026-10-23 |
| CVE-2026-98959 | 9.8
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
0.2% | btrfs: fix xattr replace when multiple xattrs are packed in the same item In the Linux kernel, the following vulnerability has been resolved: btrfs: fix xattr replace when multiple xattrs are packed in the same item If we have a btrfs_dir_item item that packs multiple xat… |
2026-10-23 |
| CVE-2026-98958 | — | Not scored | 0.2% | wifi: mt76: account non-AQL frames per peer rather than per link In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: account non-AQL frames per peer rather than per link The driver increments wcid->non_aql_packets when a frame goes to … |
2026-10-23 |
| CVE-2026-98957 | — | Not scored | 0.2% | wifi: mt76: mt7915: disable rx napi when removing device In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: disable rx napi when removing device Unloading the mt7915e module with a MT7916 triggers multiples WARN in __n… |
2026-10-23 |
| CVE-2026-98956 | — | Not scored | 0.2% | ASoC: adau1372: allow sleepy powerdown GPIOs In the Linux kernel, the following vulnerability has been resolved: ASoC: adau1372: allow sleepy powerdown GPIOs gpiod_set_value() emits a WARN when the GPIO provider indicates that it can sleep, as… |
2026-10-23 |
| CVE-2026-98955 | — | Not scored | 0.2% | flow_dissector: avoid u16 truncation of skb->len when computing thoff In the Linux kernel, the following vulnerability has been resolved: flow_dissector: avoid u16 truncation of skb->len when computing thoff __skb_flow_dissect() computes key_control->thoff using: k… |
2026-10-23 |
| CVE-2026-98954 | — | Not scored | 0.2% | net: always dissect GSO packets in __virtio_net_hdr_to_skb() In the Linux kernel, the following vulnerability has been resolved: net: always dissect GSO packets in __virtio_net_hdr_to_skb() Commit 9e8db5913264 ("net: avoid false positives in untrusted gso val… |
2026-10-23 |
| CVE-2026-98953 | — | Not scored | 0.2% | devlink: fix devlink_rel reference leak when notify work is pending In the Linux kernel, the following vulnerability has been resolved: devlink: fix devlink_rel reference leak when notify work is pending devlink_rel_nested_in_notify_work_schedule() takes a reference… |
2026-10-23 |
| CVE-2026-98952 | 7.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:LI:LA:L
|
0.2% | pfcp: make sure the SEID is linear before reading it In the Linux kernel, the following vulnerability has been resolved: pfcp: make sure the SEID is linear before reading it pfcp_encap_recv() only makes sure that the UDP header and the 4 byte PFCP hea… |
2026-10-23 |
| CVE-2026-98951 | — | Not scored | 0.2% | riscv: ptrace: Zero-initialize regset buffers before copyin In the Linux kernel, the following vulnerability has been resolved: riscv: ptrace: Zero-initialize regset buffers before copyin user_regset_copyin() only copies `count` bytes, so a PTRACE_SETREGSET … |
2026-10-23 |
| CVE-2026-98950 | — | Not scored | 0.2% | flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() In the Linux kernel, the following vulnerability has been resolved: flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() bpf_flow_dissect() sanitizes the offsets returned by the BPF pr… |
2026-10-23 |
| CVE-2026-98949 | — | Not scored | 0.2% | drm/imagination: Fix reference and vm_bo handling in remap() In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix reference and vm_bo handling in remap() When a map overlaps part of an existing mapping, pvr_vm_gpuva_remap()… |
2026-10-23 |
| CVE-2026-98948 | — | Not scored | 0.2% | mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() mlxsw_sp_flower_tmplt_create() parses a flow_cls_offload te… |
2026-10-23 |
| CVE-2026-98947 | — | Not scored | 0.2% | vsock: Fix memory leak in vmci_transport_recv_dgram_cb() In the Linux kernel, the following vulnerability has been resolved: vsock: Fix memory leak in vmci_transport_recv_dgram_cb() During the closure of a datagram socket, the vmci_transport_recv_dgram_cb… |
2026-10-23 |
| CVE-2026-98946 | — | Not scored | 0.2% | drm/vc4: Disable the V3D interrupt across runtime suspend In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Disable the V3D interrupt across runtime suspend vc4_irq_disable() masks the V3D interrupt sources and then calls synchro… |
2026-10-23 |
| CVE-2026-98945 | 7.8
CNA (via NVD) v3.1 |
LocalLoginNo interaction
C:HI:HA:H
|
0.2% | HID: steam: Rearrange teardown sequence In the Linux kernel, the following vulnerability has been resolved: HID: steam: Rearrange teardown sequence This fixes a narrow window during the teardown sequence where callbacks could still be sch… |
2026-10-23 |
| CVE-2026-98944 | 7.8
CNA (via NVD) v3.1 |
LocalLoginNo interaction
C:HI:HA:H
|
0.2% | HID: steam: Refactor registration In the Linux kernel, the following vulnerability has been resolved: HID: steam: Refactor registration This refactors and simplifies the registration/unregistration flow. Since we now only perform re… |
2026-10-23 |
| CVE-2026-98943 | — | Not scored | 0.2% | HID: steam: Clean up locking In the Linux kernel, the following vulnerability has been resolved: HID: steam: Clean up locking This cleans up several issues with locking behavior, including RCU accesses not being guarded behind … |
2026-10-23 |
| CVE-2026-98942 | — | Not scored | 0.2% | sched_ext: Build the cid tables privately and publish them with RCU In the Linux kernel, the following vulnerability has been resolved: sched_ext: Build the cid tables privately and publish them with RCU The cid tables are visible to the cid kfuncs while being modif… |
2026-10-23 |
| CVE-2026-98941 | 7.0
CNA (via NVD) v3.1 |
LocalLoginNo interactionConditions
C:HI:HA:H
|
0.2% | ext4: don't enable large folios on encrypted inodes In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable large folios on encrypted inodes Commit 709f0f1f1bf5 ("ext4: add checks for large folio incompatibilities when … |
2026-10-23 |
| CVE-2026-98940 | — | Not scored | 0.2% | ASoC: qcom: lpass-cpu: use DAI table index for playback constraints In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: lpass-cpu: use DAI table index for playback constraints The DAI ID is a hardware port ID and is not necessarily the in… |
2026-10-23 |
| CVE-2026-98939 | — | Not scored | 0.2% | x86/mm: Drop unnecessary PMD page copy when freeing In the Linux kernel, the following vulnerability has been resolved: x86/mm: Drop unnecessary PMD page copy when freeing On a box with a discrete GPU, lockdep reports a possible deadlock as soon as k… |
2026-10-23 |
| CVE-2026-98938 | — | Not scored | 0.2% | rust: irq: pass RegistrationInner as cookie to request_irq In the Linux kernel, the following vulnerability has been resolved: rust: irq: pass RegistrationInner as cookie to request_irq With commit ba268514ea14 ("rust: devres: fix race condition due to nest… |
2026-10-23 |
| CVE-2026-98937 | — | Not scored | 0.2% | perf/core: Check kernel access when kernel callchains are requested In the Linux kernel, the following vulnerability has been resolved: perf/core: Check kernel access when kernel callchains are requested perf_event_open() currently gates perf_allow_kernel() only on … |
2026-10-23 |
| CVE-2026-98936 | — | Not scored | 0.2% | wifi: ath11k: reset ar->num_stations on hardware start In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: reset ar->num_stations on hardware start When (multiple) hw restart occurs, we end up in a situation where we cannot… |
2026-10-23 |