Browse CVEs

HIGH 7.8 CVE-2026-64293 In the Linux kernel, the following vulnerability has been resolved: iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read The bound-chec… Linux Kernel 6.18.39 / 7.1.4+ Fix from $1,9502026-07-25 HIGH 7.8 CVE-2026-64296 In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfat_find_dir_entry() In exfat_find_dir_entry(… Linux Kernel 5.10.261 / 5.15.212+ Fix from $1,9502026-07-25 HIGH 7.1 CVE-2026-64298 In the Linux kernel, the following vulnerability has been resolved: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC POSIX requires wri… Linux Kernel 5.10.261 / 5.15.212+ Fix from $1,9502026-07-25 MEDIUM 5.5 CVE-2026-64294 In the Linux kernel, the following vulnerability has been resolved: mm: do file ownership checks with the proper mount idmap Ever since idmapped mo… Linux Kernel 6.6.145 / 6.12.96+ Fix from $1,6002026-07-25 MEDIUM 5.5 CVE-2026-64295 In the Linux kernel, the following vulnerability has been resolved: mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN acces… Linux Kernel 6.18.39 / 7.1.4+ Fix from $1,6002026-07-25 MEDIUM 5.5 CVE-2026-64297 In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of module_extend_max_pages() module_exte… Linux Kernel 6.1.178 / 6.6.145+ Fix from $1,6002026-07-25 HIGH 8.2 CVE-2026-64286 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU flush_hyp_… Linux Kernel 6.6.145 / 6.12.97+ Fix from $1,9502026-07-25 HIGH 8.2 CVE-2026-64287 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU flush_hyp_vcpu() cop… Linux Kernel 6.6.145 / 6.12.97+ Fix from $1,9502026-07-25 HIGH 7.1 CVE-2026-64284 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits Mov… Linux Kernel 6.12.96 / 6.18.39+ Fix from $1,9502026-07-25 MEDIUM 5.5 CVE-2026-64290 In the Linux kernel, the following vulnerability has been resolved: iommufd: Break the loop on failure in iommufd_fault_fops_read() On a copy_to_us… Linux Kernel 6.12.101 / 6.18.39+ Fix from $1,6002026-07-25 MEDIUM 5.5 CVE-2026-64291 In the Linux kernel, the following vulnerability has been resolved: iommufd: Set veventq_depth upper bound iommufd_veventq_alloc() accepts any !0 v… Linux Kernel 6.18.39 / 7.1.4+ Fix from $1,6002026-07-25 MEDIUM 5.5 CVE-2026-64292 In the Linux kernel, the following vulnerability has been resolved: iommufd: Move vevent memory allocation outside spinlock The veventq memory allo… Linux Kernel 6.18.40 / 7.1.4+ Fix from $1,6002026-07-25 MEDIUM 5.5 CVE-2026-64285 In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When p… Linux Kernel 7.1.4+ Fix from $1,6002026-07-25 MEDIUM 5.5 CVE-2026-64288 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB VNCR TLB invalidation … Linux Kernel 6.18.39 / 7.1.4+ Fix from $1,6002026-07-25 MEDIUM 5.5 CVE-2026-64289 In the Linux kernel, the following vulnerability has been resolved: iommufd: Set upper bounds on cache invalidation entry_num and entry_len iommufd… Linux Kernel 6.12.96 / 6.18.39+ Fix from $1,6002026-07-25 HIGH 8.8 CVE-2026-64280 In the Linux kernel, the following vulnerability has been resolved: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() afu_ioctl_dm… Linux Kernel 6.6.148 / 6.12.101+ Fix from $1,9502026-07-25 HIGH 7.8 CVE-2026-64276 In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count rmi_f30_map_… Linux Kernel 5.10.261 / 5.15.212+ Fix from $1,9502026-07-25 HIGH 7.8 CVE-2026-64277 In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count rmi_f3a_initiali… Linux Kernel 5.10.261 / 5.15.212+ Fix from $1,9502026-07-25 HIGH 7.8 CVE-2026-64279 In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter deregistration race Adapters can be looked up by their i… Linux Kernel 5.15.212 / 6.1.178+ Fix from $1,9502026-07-25 HIGH 7.5 CVE-2026-64281 In the Linux kernel, the following vulnerability has been resolved: svcrdma: wake sq waiters when the transport closes Threads parked in svc_rdma_s… Linux Kernel 7.1.4+ Fix from $1,9502026-07-25 HIGH 7.0 CVE-2026-64283 In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values When bin… Linux Kernel 7.1.4+ Fix from $1,9502026-07-25 MEDIUM 5.5 CVE-2026-64278 In the Linux kernel, the following vulnerability has been resolved: i2c: imx-lpi2c: mark I2C adapter when hardware is powered down On some i.MX pla… Linux Kernel 6.18.39 / 7.1.4+ Fix from $1,6002026-07-25 CRITICAL 9.8 CVE-2026-64268 In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniba… Linux Kernel 5.10.261 / 5.15.212+ Fix from $2,3002026-07-25 CRITICAL 9.1 CVE-2026-64269 In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg When the … Linux Kernel 5.15.212 / 6.1.178+ Fix from $2,3002026-07-25 HIGH 7.8 CVE-2026-64270 In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device packet size mms114_interrupt() reads… Linux Kernel 6.6.145 / 6.12.96+ Fix from $1,9502026-07-25 HIGH 7.8 CVE-2026-64271 In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index on every complete packet tw_interrupt(… Linux Kernel 5.10.261 / 5.15.212+ Fix from $1,9502026-07-25 HIGH 7.8 CVE-2026-64272 In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MMS134S and MMS136 The MMS134S and MMS13… Linux Kernel 6.6.145 / 6.12.96+ Fix from $1,9502026-07-25 HIGH 7.8 CVE-2026-64273 In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported force-feedback effect index iforce_pr… Linux Kernel 5.10.261 / 5.15.212+ Fix from $1,9502026-07-25 HIGH 7.8 CVE-2026-64274 In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contact count goodix_ts_read_input_re… Linux Kernel 5.10.261 / 5.15.212+ Fix from $1,9502026-07-25 MEDIUM 5.5 CVE-2026-64275 In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - prevent division by zero and arithmetic underflow The Elan I2… Linux Kernel 5.10.261 / 5.15.212+ Fix from $1,6002026-07-25