Browse CVEs

CRITICAL 9.1 CVE-2026-53224 In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded INIT chunk and address list lengths in cookie sctp_unpa… Linux Kernel 6.18.36 / 7.0.13+ Fix from $2,3002026-06-25 CRITICAL 9.1 CVE-2026-53225 In the Linux kernel, the following vulnerability has been resolved: sctp: fix uninit-value in __sctp_rcv_asconf_lookup() __sctp_rcv_asconf_lookup()… Linux Kernel 5.10.259 / 5.15.210+ Fix from $2,3002026-06-25 CRITICAL 9.8 CVE-2026-53215 In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: refill RX buffers before XDP or skb use The RX error path returns t… Linux Kernel 5.8 / 5.15.210+ Fix from $2,3002026-06-25 CRITICAL 9.8 CVE-2026-53216 In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: limit XDP frame size to the RX buffer mvpp2 has short and long BM p… Linux Kernel 5.15.210 / 6.1.176+ Fix from $2,3002026-06-25 CRITICAL 9.8 CVE-2026-53221 In the Linux kernel, the following vulnerability has been resolved: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() In vti6_tnl_lookup(… Linux Kernel 5.10.259 / 5.15.210+ Fix from $2,3002026-06-25 CRITICAL 9.1 CVE-2026-53186 In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: bound SRP_RSP sense copy by the received length srp_process_rsp() cop… Linux Kernel 5.10.259 / 5.15.210+ Fix from $2,3002026-06-25 CRITICAL 9.8 CVE-2026-53175 In the Linux kernel, the following vulnerability has been resolved: inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush On netns t… Linux Kernel 6.18.36 / 7.0.13+ Fix from $2,3002026-06-25 CRITICAL 9.8 CVE-2026-53176 In the Linux kernel, the following vulnerability has been resolved: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN In drivers/infiniband… Linux Kernel 5.10.259 / 5.15.210+ Fix from $2,3002026-06-25 CRITICAL 9.8 CVE-2026-53151 In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the ACK parser to extract the SACK table for parsing Fix modificatio… Linux Kernel 6.6.144 / 6.12.95+ Fix from $2,3002026-06-25 CRITICAL 9.4 CVE-2026-53131 In the Linux kernel, the following vulnerability has been resolved: netfilter: require Ethernet MAC header before using eth_hdr() `ip6t_eui64`, `xt… Linux Kernel 5.15.210 / 6.1.176+ Fix from $2,3002026-06-25 CRITICAL 9.8 CVE-2026-53086 In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix racing timeout handler The bcmgenet_timeout handler tries to… Linux Kernel 6.1.175 / 6.6.141+ Fix from $2,3002026-06-24 CRITICAL 9.8 CVE-2026-53088 In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix off-by-one in bcmgenet_put_txcb The write_ptr points to the … Linux Kernel 3.17 / 5.10.258+ Fix from $2,3002026-06-24 CRITICAL 9.8 CVE-2026-53055 In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec2 - prevent req used-after-free for sec During packet tran… Linux Kernel 6.18.33 / 7.0.10+ Fix from $2,3002026-06-24 CRITICAL 9.8 CVE-2026-53045 In the Linux kernel, the following vulnerability has been resolved: memory: tegra124-emc: Fix dll_change check The code checking whether the specif… Linux Kernel 5.10.258 / 5.15.209+ Fix from $2,3002026-06-24 CRITICAL 9.8 CVE-2026-53046 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine ksmbd_cry… Linux Kernel 5.15.209 / 6.1.175+ Fix from $2,3002026-06-24 CRITICAL 9.8 CVE-2026-53049 In the Linux kernel, the following vulnerability has been resolved: gfs2: add some missing log locking Function gfs2_logd() calls the log flushing … Linux Kernel 5.15.209 / 6.1.175+ Fix from $2,3002026-06-24 CRITICAL 9.1 CVE-2026-53043 In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: validate qr_numregions in dlm_match_regions() Patch series "ocfs2/dl… Linux Kernel 5.10.258 / 5.15.209+ Fix from $2,3002026-06-24 CRITICAL 9.8 CVE-2026-53010 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2_open during durable reconnect In smb2_open, t… Linux Kernel 6.7 / 6.18.33+ Fix from $2,3002026-06-24 CRITICAL 9.8 CVE-2026-53006 In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr and daddr before pskb_pull… Linux Kernel 5.10.258 / 5.15.209+ Fix from $2,3002026-06-24 CRITICAL 9.8 CVE-2026-53002 In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: remove sprintf usage Replace it with scnprintf, the buffe… Linux Kernel 5.10.258 / 5.15.209+ Fix from $2,3002026-06-24 CRITICAL 9.8 CVE-2026-52993 In the Linux kernel, the following vulnerability has been resolved: tipc: fix double-free in tipc_buf_append() tipc_msg_validate() can potentially … Linux Kernel 5.10.258 / 5.15.209+ Fix from $2,3002026-06-24 CRITICAL 9.1 CVE-2026-52999 In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix out-of-bounds read on option matching In nf_osf_m… Linux Kernel 4.20 / 5.0+ Fix from $2,3002026-06-24 CRITICAL 9.8 CVE-2026-52986 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: don't use simple_strtoul Replace unsafe port parsi… Linux Kernel 5.10.258 / 5.15.209+ Fix from $2,3002026-06-24 CRITICAL 9.8 CVE-2026-52989 In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers Currentl… Linux Kernel 5.11 / 5.16+ Fix from $2,3002026-06-24 CRITICAL 9.8 CVE-2026-52982 In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() syzbot reported a… Linux Kernel 5.10.258 / 5.15.209+ Fix from $2,3002026-06-24 CRITICAL 9.1 CVE-2026-52958 In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in osdmap_decode() When decoding os… Linux Kernel 5.10.258 / 5.15.209+ Fix from $2,3002026-06-24 CRITICAL 9.8 CVE-2026-52955 In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in crush_decode() A message of type… Linux Kernel 5.10.258 / 5.15.209+ Fix from $2,3002026-06-24 CRITICAL 9.8 CVE-2026-52931 In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: avoid use of uninit sender vars batadv_tp_recv_ack() and … Linux Kernel 5.10.258 / 5.15.209+ Fix from $2,3002026-06-24 CRITICAL 9.8 CVE-2026-52924 In the Linux kernel, the following vulnerability has been resolved: sctp: purge outqueue on stale COOKIE-ECHO handling sctp_stream_update() is only… Linux Kernel 5.10.259 / 5.15.210+ Fix from $2,3002026-06-24 CRITICAL 9.8 CVE-2026-52914 In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix fragment reassembly length accounting batman-adv keeps a runnin… Linux Kernel 5.10.258 / 5.15.209+ Fix from $2,3002026-06-24