Browse CVEs

HIGH 7.8 CVE-2026-64188 In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() rmnet_dell… Linux Kernel 5.10.260 / 5.15.211+ Fix from $1,9502026-07-20 HIGH 8.8 CVE-2026-64178 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev->name bnep_add_connection() needs to keep … Linux Kernel 5.10.258 / 5.15.209+ Fix from $1,9502026-07-19 CRITICAL 9.8 CVE-2026-64142 In the Linux kernel, the following vulnerability has been resolved: ksmbd: close durable scavenger races against m_fp_list lookups ksmbd_durable_sc… Linux Kernel No fix yet Fix from $2,3002026-07-19 CRITICAL 9.8 CVE-2026-64132 In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: refresh hdr pointer before ioam6_event() Reported by Sashiko: In i… Linux Kernel 6.12.92 / 6.18.34+ Fix from $2,3002026-07-19 HIGH 8.8 CVE-2026-64117 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb ieee80211_invok… Linux Kernel No fix yet Fix from $1,9502026-07-19 CRITICAL 9.8 CVE-2026-64122 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover mlx5e_tx_rep… Linux Kernel 6.18.34 / 7.0.11+ Fix from $2,3002026-07-19 HIGH 7.8 CVE-2026-64123 In the Linux kernel, the following vulnerability has been resolved: net: hsr: defer node table free until after RCU readers HSR node-list and node-… Linux Kernel 5.10.259 / 5.15.210+ Fix from $1,9502026-07-19 HIGH 8.8 CVE-2026-64109 In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix UAF read of tail->len in unix_stream_data_wait() unix_stream_data_… Linux Kernel 6.6.143 / 6.12.92+ Fix from $1,9502026-07-19 CRITICAL 9.8 CVE-2026-64113 In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix use-after-free in VEPA multicast source pruning ixgbevf_clean_rx_i… Linux Kernel 5.10.258 / 5.15.209+ Fix from $2,3002026-07-19 HIGH 8.8 CVE-2026-64115 In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix UAF when peer resets connection during handshake vmci_transport… Linux Kernel 5.10.258 / 5.15.209+ Fix from $1,9502026-07-19 HIGH 7.8 CVE-2026-64103 In the Linux kernel, the following vulnerability has been resolved: scsi: isci: Fix use-after-free in device removal path The ISCI completion taskl… Linux Kernel 5.10.258 / 5.15.209+ Fix from $1,9502026-07-19 HIGH 8.8 CVE-2026-64096 In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: fix use-after-free in orig_node RCU release batadv_mcast_pur… Linux Kernel 5.10.258 / 5.15.209+ Fix from $1,9502026-07-19 HIGH 7.8 CVE-2026-64099 In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix use-after-free of CPU job query arrays on error path The CPU job i… Linux Kernel 6.12.93 / 6.18.34+ Fix from $1,9502026-07-19 HIGH 7.8 CVE-2026-63804 In the Linux kernel, the following vulnerability has been resolved: gfs2: fix use-after-free in gfs2_qd_dealloc gfs2_qd_dealloc(), called as an RCU… Linux Kernel 6.6.144 / 6.12.95+ Fix from $1,9502026-07-19 HIGH 8.4 CVE-2026-63797 In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fix use-after-free on probe error path rpmsg_chrdev_probe() stores… Linux Kernel 6.1.178 / 6.6.144+ Fix from $1,9502026-07-19 CRITICAL 9.8 CVE-2026-63800 In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix use-after-free in pnfs_update_layout() When hitting the NFS_LAYOUT_RE… Linux Kernel 5.5 / 5.10.260+ Fix from $2,3002026-07-19 HIGH 8.8 CVE-2026-63801 In the Linux kernel, the following vulnerability has been resolved: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done tipc_aead_decrypt(… Linux Kernel 5.10.260 / 5.15.211+ Fix from $1,9502026-07-19 HIGH 7.8 CVE-2026-63802 In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF in __blkcg_rstat_flush() When multiple blkgs in the same bl… Linux Kernel 6.4 / 6.6.144+ Fix from $1,9502026-07-19 HIGH 7.8 CVE-2026-63803 In the Linux kernel, the following vulnerability has been resolved: hdlc_ppp: sync per-proto timers before freeing hdlc state Each PPP control prot… Linux Kernel 5.10.261 / 5.15.211+ Fix from $1,9502026-07-19 HIGH 7.8 CVE-2026-53401 In the Linux kernel, the following vulnerability has been resolved: fbdev: omap2: fix use-after-free in omapfb_mmap omapfb_mmap() has a race condit… Linux Kernel 7.1.3+ Fix from $1,9502026-07-19 HIGH 7.8 CVE-2026-63793 In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize volume label accesses Protect vol->volume_label with a mutex an… Linux Kernel 7.1.3+ Fix from $1,9502026-07-19 CRITICAL 10.0 CVE-2026-63795 In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9_client_walk() error path When p9_client_walk() i… Linux Kernel 6.1.177 / 6.6.144+ Fix from $2,3002026-07-19 CRITICAL 9.8 CVE-2026-53384 In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails dw8250_p… Linux Kernel 6.1.177 / 6.6.144+ Fix from $2,3002026-07-19 HIGH 7.8 CVE-2026-53388 In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fuse_try_move_folio() u… Linux Kernel 5.15.211 / 6.1.177+ Fix from $1,9502026-07-19 HIGH 7.8 CVE-2026-53389 In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of key in del_async path In tcp_ao_delete_key(),… Linux Kernel 6.12.95 / 6.18.38+ Fix from $1,9502026-07-19 HIGH 7.8 CVE-2026-53381 In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount umount iput() called from fuse_release_end() can … Linux Kernel 5.10.260 / 5.15.211+ Fix from $1,9502026-07-19 HIGH 7.0 CVE-2026-58598 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to… Windows 10 21h2 10.0.19044.7548 / 10.0.19045.7548+ Fix from $1,9502026-07-16 HIGH 7.8 CVE-2026-57076 YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key in syck_hdlr_add_anchor. In t… No fix yet Fix from $1,9502026-07-16 MEDIUM 6.2 CVE-2026-13713 YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stack. In t… No fix yet Fix from $1,6002026-07-16 MEDIUM 5.9 CVE-2026-55406 Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Prior to 0.7.0, a soundness bug in the OwnedView<V> … No fix yet Fix from $1,6002026-07-16