Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
402,116 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-98601 | Not scored | Bluetooth: btintel_pcie: validate device-supplied DMA indices | Oct 18, 2026 |
| CVE-2026-98600 | Not scored | Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() | Oct 18, 2026 |
| CVE-2026-98599 | Not scored | bpf: Reject non-negative offsets in stack_slot_obj_get_spi() | Oct 18, 2026 |
| CVE-2026-98598 | Not scored | ipv6: Prevent rt6_insert_exception() for dying fib6_info. | Oct 18, 2026 |
| CVE-2026-98597 | Not scored | net: usb: sr9700: include receive overhead in the length check | Oct 18, 2026 |
| CVE-2026-98596 | Not scored | ipv6: Fix dst leak for uncached routes. | Oct 18, 2026 |
| CVE-2026-98595 | Not scored | udp: remove a disconnected socket from the 4-tuple hash table | Oct 18, 2026 |
| CVE-2026-98594 | Not scored | tg3: clean up PHYLIB resources on probe failure | Oct 18, 2026 |
| CVE-2026-98593 | Not scored | s390/debug: Fix NULL pointer dereference in debug_info_copy() | Oct 18, 2026 |
| CVE-2026-98592 | Not scored | net: spacemit: clear TX descriptor on fragment mapping failure | Oct 18, 2026 |
| CVE-2026-98591 | Not scored | bpf: Fix bounds check for skb-backed dynptrs | Oct 18, 2026 |
| CVE-2026-98590 | Not scored | bpf: Fix bpf_sock context code generation | Oct 18, 2026 |
| CVE-2026-98589 | Not scored | bpf: Reject pkt arguments in mutating subprogs | Oct 18, 2026 |
| CVE-2026-98588 | Not scored | bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc | Oct 18, 2026 |
| CVE-2026-98587 | Not scored | firewire: cdev: fix back-transition for iso_resource_auto client resource | Oct 18, 2026 |
| CVE-2026-98586 | Not scored | sctp: hold asoc or transport before mod_timer() in timer handlers | Oct 18, 2026 |
| CVE-2026-98585 | Not scored | eth: fbnic: Avoid rounding zero ring sizes | Oct 18, 2026 |
| CVE-2026-98584 | Not scored | net/sched: fix potential stack infoleak in em_text_dump() | Oct 18, 2026 |
| CVE-2026-98583 | Not scored | nfc: nfcmrvl: validate helper command length before pull | Oct 18, 2026 |
| CVE-2026-98582 | Not scored | nfc: st21nfca: validate received frame size | Oct 18, 2026 |
| CVE-2026-98581 | Not scored | nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() | Oct 18, 2026 |
| CVE-2026-98580 | Not scored | nfc: llcp: Fix race condition in accept_queue lifecycle | Oct 18, 2026 |
| CVE-2026-98579 | Not scored | nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure | Oct 18, 2026 |
| CVE-2026-98578 | Not scored | nfc: st21nfca: validate ISO15693 inventory length | Oct 18, 2026 |
| CVE-2026-98577 | Not scored | nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() | Oct 18, 2026 |
| CVE-2026-98576 | Not scored | nfc: llcp: fix slab-out-of-bounds reads when logging service names | Oct 18, 2026 |
| CVE-2026-98575 | Not scored | nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() | Oct 18, 2026 |
| CVE-2026-98574 | Not scored | net: bcmgenet: stop Tx NAPI before disabling the queues | Oct 18, 2026 |
| CVE-2026-98573 | Not scored | net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() | Oct 18, 2026 |
| CVE-2026-98572 | Not scored | bpf: Fix immediate JMP JEQ/JNE on MIPS32 | Oct 18, 2026 |
| CVE-2026-98571 | Not scored | net: stmmac: clear stale buf->page after recycling on skb build failure | Oct 18, 2026 |
| CVE-2026-98570 | Not scored | net: ipv6: keep room for the mac header in dst_dev_overhead() | Oct 18, 2026 |
| CVE-2026-98569 | Not scored | ip_gre: Reject enabling collect metadata through changelink | Oct 18, 2026 |
| CVE-2026-98568 | Not scored | vxlan: use one headroom snapshot for neighbour replies | Oct 18, 2026 |
| CVE-2026-98567 | Not scored | net: xps: reject an out of range traffic class | Oct 18, 2026 |
| CVE-2026-98566 | Not scored | drm/imagination: clamp freelist reconstruction requests | Oct 18, 2026 |
| CVE-2026-98565 | Not scored | net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 | Oct 18, 2026 |
| CVE-2026-98564 | Not scored | net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq | Oct 18, 2026 |
| CVE-2026-98563 | Not scored | net: phylink: record the PHY only once bringup cannot fail | Oct 18, 2026 |
| CVE-2026-98562 | Not scored | net: libwx: fix races in Tx timestamp handling | Oct 18, 2026 |
| CVE-2026-98561 | Not scored | nfp: hold IPsec RX state under the XArray lock | Oct 18, 2026 |
| CVE-2026-98560 | Not scored | net/rds: size a connection's path set by the transport it ends up with | Oct 18, 2026 |
| CVE-2026-98559 | Not scored | net/smc: fix UAF on lgr list traversal in smcr_port_err() | Oct 18, 2026 |
| CVE-2026-98558 | Not scored | net: flush skb_defer_nodes in dev_cpu_dead() | Oct 18, 2026 |
| CVE-2026-98557 | Not scored | gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO | Oct 18, 2026 |
| CVE-2026-98556 | Not scored | gve: DQO: reject TSO packets with an out of range MSS | Oct 18, 2026 |
| CVE-2026-98555 | 7.5 High | llc: fix skb UAF and leaks on llc_mac_hdr_init() failure | Oct 18, 2026 |
| CVE-2026-98554 | Not scored | vlan: ensure sufficient headroom in vlan_dev_hard_header() | Oct 18, 2026 |
| CVE-2026-98553 | Not scored | autofs: fix sbi->pipe file reference leak in autofs_kill_sb() | Oct 18, 2026 |
| CVE-2026-98552 | Not scored | perf/core: Fix a refcount leak in attach_perf_ctx_data() | Oct 18, 2026 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.