Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
402,087 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-98773 | Not scored | USB: cdc-acm: skip URB restart in port_shutdown if disconnected | Oct 18, 2026 |
| CVE-2026-98772 | Not scored | USB: serial: fix port tear down use-after-free | Oct 18, 2026 |
| CVE-2026-98771 | Not scored | usb: storage: sierra_ms: reject short SWoC info transfers | Oct 18, 2026 |
| CVE-2026-98770 | Not scored | usb: gadget: midi2: Fix the jack descriptor array sizes | Oct 18, 2026 |
| CVE-2026-98769 | Not scored | usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd | Oct 18, 2026 |
| CVE-2026-98768 | Not scored | usb: typec: anx7411 - stop the IRQ before destroying the workqueue | Oct 18, 2026 |
| CVE-2026-98767 | Not scored | usb: dwc3: gadget: fix IRQ storm on invalid event buffer count | Oct 18, 2026 |
| CVE-2026-98766 | Not scored | usb: gadget: aspeed-vhub: cancel wake work on device removal | Oct 18, 2026 |
| CVE-2026-98765 | Not scored | USB: gadget: dummy-hcd: Fix wait for outstanding request completions | Oct 18, 2026 |
| CVE-2026-98764 | Not scored | usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC | Oct 18, 2026 |
| CVE-2026-98763 | Not scored | usb: core: clear both ep_in and ep_out for non-ep0 control endpoints | Oct 18, 2026 |
| CVE-2026-98762 | Not scored | USB: dwc2: shut down wakeup timer before freeing HCD state | Oct 18, 2026 |
| CVE-2026-98761 | Not scored | usb: typec: tcpm: recover after failure to start the frs ams | Oct 18, 2026 |
| CVE-2026-98760 | Not scored | usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() | Oct 18, 2026 |
| CVE-2026-98759 | Not scored | usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work() | Oct 18, 2026 |
| CVE-2026-98758 | Not scored | usb: typec: ucsi: glink: fix use-after-free of ucsi on remove | Oct 18, 2026 |
| CVE-2026-98757 | Not scored | usb: cdns3: fix use-after-free in cdns3_gadget_exit() | Oct 18, 2026 |
| CVE-2026-98756 | Not scored | usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe | Oct 18, 2026 |
| CVE-2026-98755 | Not scored | tty: vcc: zero-initialize control packet in vcc_send_ctl() | Oct 18, 2026 |
| CVE-2026-98754 | Not scored | tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup | Oct 18, 2026 |
| CVE-2026-98753 | Not scored | tty: tty_port: restore TTY_IO_ERROR on activation failure | Oct 18, 2026 |
| CVE-2026-98752 | Not scored | tty: port: fix tty_port_tty_vhangup() race | Oct 18, 2026 |
| CVE-2026-98751 | Not scored | tty: abort break signalling on hangup | Oct 18, 2026 |
| CVE-2026-98750 | Not scored | tty: fix saved termios reset race | Oct 18, 2026 |
| CVE-2026-98749 | Not scored | tty: serial: max3100: shut down timer before freeing port | Oct 18, 2026 |
| CVE-2026-98748 | Not scored | serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() | Oct 18, 2026 |
| CVE-2026-98747 | Not scored | serial: core: fix NULL pointer dereference in serial_core_unregister_port() | Oct 18, 2026 |
| CVE-2026-98746 | Not scored | serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() | Oct 18, 2026 |
| CVE-2026-98745 | Not scored | arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems | Oct 18, 2026 |
| CVE-2026-98744 | Not scored | ASoC: codecs: max98363: fix uninitialized stream_config->type | Oct 18, 2026 |
| CVE-2026-98743 | Not scored | ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type | Oct 18, 2026 |
| CVE-2026-98742 | Not scored | ALSA: seq: Serialize compat port-info ioctls | Oct 18, 2026 |
| CVE-2026-98741 | Not scored | ALSA: ua101: reject mismatched capture/playback packet sizes | Oct 18, 2026 |
| CVE-2026-98740 | Not scored | EDAC/altera: Drop __init from ECC setup paths for re-probe safety | Oct 18, 2026 |
| CVE-2026-98739 | Not scored | Bluetooth: RFCOMM: Fix initial port reference race | Oct 18, 2026 |
| CVE-2026-98738 | Not scored | Bluetooth: Serialize SMP remote OOB data access | Oct 18, 2026 |
| CVE-2026-98737 | Not scored | Bluetooth: hci_sync: Fix inquiry cache use-after-free | Oct 18, 2026 |
| CVE-2026-98736 | Not scored | Bluetooth: hci_conn: Lock parent access during enhanced SCO setup | Oct 18, 2026 |
| CVE-2026-98735 | Not scored | Bluetooth: hci_core: Serialize ACL scheduling with channel deletion | Oct 18, 2026 |
| CVE-2026-98734 | Not scored | Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown | Oct 18, 2026 |
| CVE-2026-98733 | Not scored | Bluetooth: hci_core: Serialize fragmented ISO packet queueing | Oct 18, 2026 |
| CVE-2026-98732 | Not scored | Bluetooth: btintel: fix buffer over-read in btintel_hw_error() | Oct 18, 2026 |
| CVE-2026-98731 | Not scored | Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() | Oct 18, 2026 |
| CVE-2026-98730 | Not scored | Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() | Oct 18, 2026 |
| CVE-2026-98729 | Not scored | x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h | Oct 18, 2026 |
| CVE-2026-98728 | Not scored | tpm: fix off-by-four bounds check in tpm2_get_random() | Oct 18, 2026 |
| CVE-2026-98727 | Not scored | nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known | Oct 18, 2026 |
| CVE-2026-98726 | Not scored | nvme-multipath: fix underflow in ANA log bounds checks | Oct 18, 2026 |
| CVE-2026-98725 | Not scored | nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() | Oct 18, 2026 |
| CVE-2026-98724 | Not scored | nvmet: pci-epf: reject too-short SGL segments | Oct 18, 2026 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.