Browse CVEs

HIGH 7.8 CVE-2026-68399 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF in sock clone early bailouts Similar to recent commit 9b51a6155d14… No fix yet Fix from $1,9502026-08-10 HIGH 7.8 CVE-2026-68398 In the Linux kernel, the following vulnerability has been resolved: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF pppol2tp_… No fix yet Fix from $1,9502026-08-10 HIGH 8.8 CVE-2026-68397 In the Linux kernel, the following vulnerability has been resolved: net/iucv: take a reference on the socket found in afiucv_hs_rcv() afiucv_hs_rcv… No fix yet Fix from $1,9502026-08-10 HIGH 7.8 CVE-2026-68394 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update MGMT_OP_LOAD_CONN_PAR… No fix yet Fix from $1,9502026-08-10 HIGH 8.8 CVE-2026-68393 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: extend conn_hash lookup critical sections Using RCU-protec… No fix yet Fix from $1,9502026-08-10 HIGH 7.8 CVE-2026-68392 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync Dereferencing RCU… No fix yet Fix from $1,9502026-08-10 HIGH 7.8 CVE-2026-68391 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds Dereferencing… No fix yet Fix from $1,9502026-08-10 HIGH 8.8 CVE-2026-68390 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups hci_conn_param… No fix yet Fix from $1,9502026-08-10 HIGH 8.8 CVE-2026-68389 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: Clear memdump state on invalid dump size qca_controller_mem… No fix yet Fix from $1,9502026-08-10 CRITICAL 9.8 CVE-2026-68388 In the Linux kernel, the following vulnerability has been resolved: smb/client: handle overlapping allocated ranges in fallocate smb3_simple_falloc… No fix yet Fix from $2,3002026-08-10 HIGH 7.8 CVE-2026-68387 In the Linux kernel, the following vulnerability has been resolved: can: raw: add locking for raw flags bitfield With commit 890e5198a6e5 ("can: ra… No fix yet Fix from $1,9502026-08-10 CRITICAL 9.8 CVE-2026-68385 In the Linux kernel, the following vulnerability has been resolved: s390/checksum: Fix csum_partial() without vector facility Currently csum_partia… No fix yet Fix from $2,3002026-08-10 HIGH 7.8 CVE-2026-68384 In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves xe_bo_move() a… No fix yet Fix from $1,9502026-08-10 HIGH 7.8 CVE-2026-68383 In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Keep scheduler timeline name alive The scheduler keeps a pointer to… No fix yet Fix from $1,9502026-08-10 HIGH 7.8 CVE-2026-68382 In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Hold device ref until queue teardown completes GuC exec queue destr… No fix yet Fix from $1,9502026-08-10 CRITICAL 9.8 CVE-2026-68381 In the Linux kernel, the following vulnerability has been resolved: ksmbd: pin conn during async oplock break notification smb2_oplock_break_noti()… No fix yet Fix from $2,3002026-08-10 HIGH 7.8 CVE-2026-68380 In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free of mm_struct in job scheduler amdxdna_cmd_sub… No fix yet Fix from $1,9502026-08-10 HIGH 7.5 CVE-2026-68379 In the Linux kernel, the following vulnerability has been resolved: tcp: fix TIME_WAIT socket reference leak on PSP policy failure Release the TIME… No fix yet Fix from $1,9502026-08-10 HIGH 7.8 CVE-2026-68377 In the Linux kernel, the following vulnerability has been resolved: net/sched: act_tunnel_key: Defer dst_release to RCU callback Fix a race-conditi… No fix yet Fix from $1,9502026-08-10 HIGH 8.1 CVE-2026-68376 In the Linux kernel, the following vulnerability has been resolved: sctp: fix auth_hmacs array size in struct sctp_cookie The auth_hmacs array in s… No fix yet Fix from $1,9502026-08-10 HIGH 7.8 CVE-2026-68374 In the Linux kernel, the following vulnerability has been resolved: usb: core: sysfs: add lock to bos_descriptors_read() Add a lock to the function… No fix yet Fix from $1,9502026-08-10 HIGH 8.1 CVE-2026-68373 In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() at76_guess_freq… No fix yet Fix from $1,9502026-08-10 HIGH 8.4 CVE-2026-68371 In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Do not put borrowed of_node in probe omap2430_probe() stor… No fix yet Fix from $1,9502026-08-10 HIGH 7.8 CVE-2026-68370 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback dummy_hcd embeds… No fix yet Fix from $1,9502026-08-10 HIGH 8.8 CVE-2026-68354 In the Linux kernel, the following vulnerability has been resolved: firewire: net: Fix fragmented datagram reassembly fwnet_frag_new() keeps a sort… No fix yet Fix from $1,9502026-08-10 HIGH 8.1 CVE-2026-68353 In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler The fir… No fix yet Fix from $1,9502026-08-10 HIGH 8.3 CVE-2026-68352 In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware IE lengths in connect event The firmwa… No fix yet Fix from $1,9502026-08-10 HIGH 7.1 CVE-2026-68348 In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2781: bound firmware description string parsing The TAS2781 firmware p… No fix yet Fix from $1,9502026-08-10 CRITICAL 9.1 CVE-2026-68343 In the Linux kernel, the following vulnerability has been resolved: smb: client: validate DFS referral PathConsumed parse_dfs_referrals() validates… No fix yet Fix from $2,3002026-08-10 HIGH 8.8 CVE-2026-68341 In the Linux kernel, the following vulnerability has been resolved: ovpn: fix use after free in unlock_ovpn() unlock_ovpn() iterates over the relea… No fix yet Fix from $1,9502026-08-10