Browse CVEs

HIGH 7.1 CVE-2026-53253 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: reject short frames before parsing A BNEP peer can send a shor… Linux Kernel 5.15.210 / 6.1.176+ Fix from $1,9502026-06-25 HIGH 7.1 CVE-2026-53255 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate advertising TLV before type checks tlv_data_is_valid(… Linux Kernel 5.10.259 / 5.15.210+ Fix from $1,9502026-06-25 MEDIUM 5.5 CVE-2026-53251 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync hci_get_r… Linux Kernel 6.12 / 6.12.94+ Fix from $1,6002026-06-25 MEDIUM 5.5 CVE-2026-53252 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix memory leak in error path of hci_alloc_dev() Early failures in B… Linux Kernel 5.11 / 6.1.176+ Fix from $1,6002026-06-25 MEDIUM 5.5 CVE-2026-53257 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: enforce HE/EHT cap/oper consistency Xiang Mei reports that mac8… Linux Kernel 7.0.13+ Fix from $1,6002026-06-25 MEDIUM 5.5 CVE-2026-53258 In the Linux kernel, the following vulnerability has been resolved: wifi: fix leak if split 6 GHz scanning fails rdev->int_scan_req is leaked if cf… Linux Kernel 6.18.36 / 7.0.13+ Fix from $1,6002026-06-25 CRITICAL 9.8 CVE-2026-53246 In the Linux kernel, the following vulnerability has been resolved: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing When a l… Linux Kernel 6.18.36 / 7.0.13+ Fix from $2,3002026-06-25 CRITICAL 9.8 CVE-2026-53247 In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown mtk_fre… Linux Kernel 6.6.143 / 6.12.94+ Fix from $2,3002026-06-25 HIGH 8.8 CVE-2026-53248 In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix use-after-free in metadata dst teardown airoha_metadata_dst_fr… Linux Kernel 6.18.36 / 7.0.13+ Fix from $1,9502026-06-25 HIGH 7.8 CVE-2026-53242 In the Linux kernel, the following vulnerability has been resolved: ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams … Linux Kernel 5.10.259 / 6.1.176+ Fix from $1,9502026-06-25 HIGH 7.8 CVE-2026-53250 In the Linux kernel, the following vulnerability has been resolved: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() The TX me… Linux Kernel 6.18.36 / 7.0.13+ Fix from $1,9502026-06-25 HIGH 7.5 CVE-2026-53244 In the Linux kernel, the following vulnerability has been resolved: VFS: fix possible failure to unlock in nfsd4_create_file() atomic_create() in f… Linux Kernel 7.0.13+ Fix from $1,9502026-06-25 MEDIUM 5.5 CVE-2026-53241 In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: dummy: fix UMP event stack overread The dummy sequencer port forward… Linux Kernel 6.12.94 / 6.18.36+ Fix from $1,6002026-06-25 MEDIUM 5.5 CVE-2026-53243 In the Linux kernel, the following vulnerability has been resolved: rseq: Fix using an uninitialized stack variable in rseq_exit_user_update() Ther… Linux Kernel 7.0.13+ Fix from $1,6002026-06-25 MEDIUM 5.5 CVE-2026-53245 In the Linux kernel, the following vulnerability has been resolved: net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr In mrp_pdu_p… Linux Kernel 5.10.259 / 5.15.210+ Fix from $1,6002026-06-25 MEDIUM 5.5 CVE-2026-53249 In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options This patch restricts setting L… Linux Kernel 5.10.259 / 5.15.210+ Fix from $1,6002026-06-25 HIGH 8.8 CVE-2026-53232 In the Linux kernel, the following vulnerability has been resolved: net: phy: clean the sfp upstream if phy probing fails Sashiko reported that we … Linux Kernel 7.1+ Fix from $1,9502026-06-25 HIGH 8.8 CVE-2026-53240 In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix use-after-free on first_skb in __input_process_payload __input… Linux Kernel 6.18.36 / 7.0.13+ Fix from $1,9502026-06-25 HIGH 7.8 CVE-2026-53233 In the Linux kernel, the following vulnerability has been resolved: netdev: fix double-free in netdev_nl_bind_rx_doit() Sashiko flags that genlmsg_… Linux Kernel 6.12.94 / 6.18.36+ Fix from $1,9502026-06-25 HIGH 7.8 CVE-2026-53239 In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() Fix … Linux Kernel 5.10.259 / 5.15.210+ Fix from $1,9502026-06-25 HIGH 7.8 CVE-2026-53234 In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: Fix use-after-free during device removal The driver was using d… Linux Kernel 6.12.94 / 6.18.36+ Fix from $1,9502026-06-25 HIGH 7.5 CVE-2026-53235 In the Linux kernel, the following vulnerability has been resolved: net: add pskb_may_pull() to skb_gro_receive_list() skb_gro_receive_list() calls… Linux Kernel 6.12.94 / 6.18.36+ Fix from $1,9502026-06-25 MEDIUM 5.5 CVE-2026-53236 In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SO_ATTACH_FILTER to priv users This patch restricts the use of SO… Linux Kernel 6.1.176 / 6.6.143+ Fix from $1,6002026-06-25 MEDIUM 5.5 CVE-2026-53237 In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: fix NULL pointer dereference in suspend/resume mvebu_pwm_suspend()… Linux Kernel 6.6.143 / 6.12.94+ Fix from $1,6002026-06-25 MEDIUM 5.5 CVE-2026-53238 In the Linux kernel, the following vulnerability has been resolved: netlabel: validate unlabeled address and mask attribute lengths netlbl_unlabel_… Linux Kernel 5.10.259 / 5.15.210+ Fix from $1,6002026-06-25 MEDIUM 5.5 CVE-2026-53231 In the Linux kernel, the following vulnerability has been resolved: net: phy: don't try to setup PHY-driven SFP cages when using genphy We don't ha… Linux Kernel 7.0.13+ Fix from $1,6002026-06-25 CRITICAL 9.8 CVE-2026-53228 In the Linux kernel, the following vulnerability has been resolved: ipv6: sit: reload inner IPv6 header after GSO offloads ipip6_tunnel_xmit() cach… Linux Kernel 5.10.259 / 5.15.210+ Fix from $2,3002026-06-25 CRITICAL 9.1 CVE-2026-53224 In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded INIT chunk and address list lengths in cookie sctp_unpa… Linux Kernel 6.18.36 / 7.0.13+ Fix from $2,3002026-06-25 CRITICAL 9.1 CVE-2026-53225 In the Linux kernel, the following vulnerability has been resolved: sctp: fix uninit-value in __sctp_rcv_asconf_lookup() __sctp_rcv_asconf_lookup()… Linux Kernel 5.10.259 / 5.15.210+ Fix from $2,3002026-06-25 HIGH 8.7 CVE-2026-53230 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list mlx5_query_ni… Linux Kernel 6.6.143 / 6.12.94+ Fix from $1,9502026-06-25