Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
401,254 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-98790 | Not scored | perf: Fix race between perf_event_exit_task() and perf_pending_task() | Oct 18, 2026 |
| CVE-2026-98789 | Not scored | bpf: Fix objects stuck in free_by_rcu_ttrace | Oct 18, 2026 |
| CVE-2026-98788 | Not scored | futex: Fix private hash use-after-free on resize | Oct 18, 2026 |
| CVE-2026-98787 | Not scored | bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch() | Oct 18, 2026 |
| CVE-2026-98786 | Not scored | drm/amd/display: guard dc_sink dereferences in MST mode validation | Oct 18, 2026 |
| CVE-2026-98785 | Not scored | drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend | Oct 18, 2026 |
| CVE-2026-98784 | Not scored | drm/amdgpu/gfx6: fix firmware leak on teardown | Oct 18, 2026 |
| CVE-2026-98783 | Not scored | drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device | Oct 18, 2026 |
| CVE-2026-98782 | Not scored | drm/mediatek: Fix ovl adaptor platform device leak | Oct 18, 2026 |
| CVE-2026-98781 | Not scored | drm/mediatek: Fix pdev reference leak in mtk_drm_bind() | Oct 18, 2026 |
| CVE-2026-98780 | Not scored | drm/amdgpu: fix IP instance memory leak on kobject add failure | Oct 18, 2026 |
| CVE-2026-98779 | Not scored | drm/amdgpu: fix ACP MFD device leak on init failure | Oct 18, 2026 |
| CVE-2026-98778 | Not scored | binder: fix is_failure flag for superseded transaction cleanup | Oct 18, 2026 |
| CVE-2026-98777 | Not scored | binder: fix leaked fd fixups on TF_UPDATE_TXN supersede | Oct 18, 2026 |
| CVE-2026-98776 | Not scored | binderfs: fix UAF write in binder_add_device | Oct 18, 2026 |
| CVE-2026-98775 | Not scored | nitro_enclaves: fix use-after-free on SLOT_ALLOC failure | Oct 18, 2026 |
| CVE-2026-98774 | Not scored | rust_binder: cancel deferred work items in thread exit | Oct 18, 2026 |
| CVE-2026-98773 | Not scored | USB: cdc-acm: skip URB restart in port_shutdown if disconnected | Oct 18, 2026 |
| CVE-2026-98772 | Not scored | USB: serial: fix port tear down use-after-free | Oct 18, 2026 |
| CVE-2026-98771 | Not scored | usb: storage: sierra_ms: reject short SWoC info transfers | Oct 18, 2026 |
| CVE-2026-98770 | Not scored | usb: gadget: midi2: Fix the jack descriptor array sizes | Oct 18, 2026 |
| CVE-2026-98769 | Not scored | usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd | Oct 18, 2026 |
| CVE-2026-98768 | Not scored | usb: typec: anx7411 - stop the IRQ before destroying the workqueue | Oct 18, 2026 |
| CVE-2026-98767 | Not scored | usb: dwc3: gadget: fix IRQ storm on invalid event buffer count | Oct 18, 2026 |
| CVE-2026-98766 | Not scored | usb: gadget: aspeed-vhub: cancel wake work on device removal | Oct 18, 2026 |
| CVE-2026-98765 | Not scored | USB: gadget: dummy-hcd: Fix wait for outstanding request completions | Oct 18, 2026 |
| CVE-2026-98764 | Not scored | usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC | Oct 18, 2026 |
| CVE-2026-98763 | Not scored | usb: core: clear both ep_in and ep_out for non-ep0 control endpoints | Oct 18, 2026 |
| CVE-2026-98762 | Not scored | USB: dwc2: shut down wakeup timer before freeing HCD state | Oct 18, 2026 |
| CVE-2026-98761 | Not scored | usb: typec: tcpm: recover after failure to start the frs ams | Oct 18, 2026 |
| CVE-2026-98760 | Not scored | usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() | Oct 18, 2026 |
| CVE-2026-98759 | Not scored | usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work() | Oct 18, 2026 |
| CVE-2026-98758 | Not scored | usb: typec: ucsi: glink: fix use-after-free of ucsi on remove | Oct 18, 2026 |
| CVE-2026-98757 | Not scored | usb: cdns3: fix use-after-free in cdns3_gadget_exit() | Oct 18, 2026 |
| CVE-2026-98756 | Not scored | usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe | Oct 18, 2026 |
| CVE-2026-98755 | Not scored | tty: vcc: zero-initialize control packet in vcc_send_ctl() | Oct 18, 2026 |
| CVE-2026-98754 | Not scored | tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup | Oct 18, 2026 |
| CVE-2026-98753 | Not scored | tty: tty_port: restore TTY_IO_ERROR on activation failure | Oct 18, 2026 |
| CVE-2026-98752 | Not scored | tty: port: fix tty_port_tty_vhangup() race | Oct 18, 2026 |
| CVE-2026-98751 | Not scored | tty: abort break signalling on hangup | Oct 18, 2026 |
| CVE-2026-98750 | Not scored | tty: fix saved termios reset race | Oct 18, 2026 |
| CVE-2026-98749 | Not scored | tty: serial: max3100: shut down timer before freeing port | Oct 18, 2026 |
| CVE-2026-98748 | Not scored | serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() | Oct 18, 2026 |
| CVE-2026-98747 | Not scored | serial: core: fix NULL pointer dereference in serial_core_unregister_port() | Oct 18, 2026 |
| CVE-2026-98746 | Not scored | serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() | Oct 18, 2026 |
| CVE-2026-98745 | Not scored | arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems | Oct 18, 2026 |
| CVE-2026-98744 | Not scored | ASoC: codecs: max98363: fix uninitialized stream_config->type | Oct 18, 2026 |
| CVE-2026-98743 | Not scored | ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type | Oct 18, 2026 |
| CVE-2026-98742 | Not scored | ALSA: seq: Serialize compat port-info ioctls | Oct 18, 2026 |
| CVE-2026-98741 | Not scored | ALSA: ua101: reject mismatched capture/playback packet sizes | Oct 18, 2026 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.