Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,705 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-98990 | Not scored | namespace: check a submount for references right before unmounting it | Oct 23, 2026 |
| CVE-2026-98989 | Not scored | namespace: check a recursive bind mount for mount namespace loops | Oct 23, 2026 |
| CVE-2026-98988 | 8.8 High | namespace: keep covered mounts covered in OPEN_TREE_NAMESPACE | Oct 23, 2026 |
| CVE-2026-98987 | Not scored | namespace: look at the topmost mount for a mount namespace file | Oct 23, 2026 |
| CVE-2026-98986 | Not scored | namespace: remove the fsnotify marks of a mount namespace in process context | Oct 23, 2026 |
| CVE-2026-98985 | Not scored | namespace: check the mounts before reading their parents in pivot_root() | Oct 23, 2026 |
| CVE-2026-98984 | Not scored | dcache: don't put a mountpoint on a dentry that's being removed | Oct 23, 2026 |
| CVE-2026-98983 | Not scored | unshare: don't drop active namespace references that were never taken | Oct 23, 2026 |
| CVE-2026-98982 | 7.8 High | namespace: don't let a pseudo dentry become the root of a mount | Oct 23, 2026 |
| CVE-2026-98981 | 8.8 High | namespace: unhash a dentry before detaching the mounts on it | Oct 23, 2026 |
| CVE-2026-98980 | 8.8 High | namei: don't reveal overmounted entries in refwalk | Oct 23, 2026 |
| CVE-2026-98979 | Not scored | namespace: refuse an automount below a mount that is in no namespace | Oct 23, 2026 |
| CVE-2026-98978 | 8.4 High | namespace: never expire a locked mount | Oct 23, 2026 |
| CVE-2026-98977 | Not scored | namespace: handle mount locking for automounts correctly | Oct 23, 2026 |
| CVE-2026-98976 | 7.8 High | namespace: keep the lock on a mount that a propagated copy is moved beneath | Oct 23, 2026 |
| CVE-2026-98975 | 7.8 High | xfs: stop exchanging reflink flags when exchanging mappings | Oct 23, 2026 |
| CVE-2026-98974 | 7.8 High | xfs: fix exchange-range-to-eof file size exchange | Oct 23, 2026 |
| CVE-2026-98973 | Not scored | drm/bridge: Fix unlocked list_del in drm_bridge_add() | Oct 23, 2026 |
| CVE-2026-98972 | Not scored | cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() | Oct 23, 2026 |
| CVE-2026-98971 | Not scored | gpio: exar: initialize the ID before registering its cleanup | Oct 23, 2026 |
| CVE-2026-98970 | Not scored | drm/vc4: Free the BO cache size list on teardown | Oct 23, 2026 |
| CVE-2026-98969 | Not scored | net/sched: em_text: reject unterminated algo before autoload | Oct 23, 2026 |
| CVE-2026-98968 | 8.1 High | amt: send the relay's General Query directly from the receive path | Oct 23, 2026 |
| CVE-2026-98967 | Not scored | cxgb4/ch_ktls: disable softirqs around tid_list erases | Oct 23, 2026 |
| CVE-2026-98966 | Not scored | bonding: fix the program leak when XDP is replaced | Oct 23, 2026 |
| CVE-2026-98965 | 7.5 High | ice: Restore Ordered MMIO Writes for Tx Doorbells | Oct 23, 2026 |
| CVE-2026-98964 | 7.5 High | nvmet: use the local P2P device on metadata allocation failure | Oct 23, 2026 |
| CVE-2026-98963 | Not scored | btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio | Oct 23, 2026 |
| CVE-2026-98962 | Not scored | btrfs: free iov when btrfs_uring_read_extent() fails | Oct 23, 2026 |
| CVE-2026-98961 | Not scored | btrfs: unlock inode and extent in caller when io_uring read extent fails | Oct 23, 2026 |
| CVE-2026-98960 | Not scored | btrfs: don't stash io_uring encoded data across -EAGAIN | Oct 23, 2026 |
| CVE-2026-98959 | 9.8 Critical | btrfs: fix xattr replace when multiple xattrs are packed in the same item | Oct 23, 2026 |
| CVE-2026-98958 | Not scored | wifi: mt76: account non-AQL frames per peer rather than per link | Oct 23, 2026 |
| CVE-2026-98957 | Not scored | wifi: mt76: mt7915: disable rx napi when removing device | Oct 23, 2026 |
| CVE-2026-98956 | Not scored | ASoC: adau1372: allow sleepy powerdown GPIOs | Oct 23, 2026 |
| CVE-2026-98955 | Not scored | flow_dissector: avoid u16 truncation of skb->len when computing thoff | Oct 23, 2026 |
| CVE-2026-98954 | Not scored | net: always dissect GSO packets in __virtio_net_hdr_to_skb() | Oct 23, 2026 |
| CVE-2026-98953 | Not scored | devlink: fix devlink_rel reference leak when notify work is pending | Oct 23, 2026 |
| CVE-2026-98952 | 7.3 High | pfcp: make sure the SEID is linear before reading it | Oct 23, 2026 |
| CVE-2026-98951 | Not scored | riscv: ptrace: Zero-initialize regset buffers before copyin | Oct 23, 2026 |
| CVE-2026-98950 | Not scored | flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() | Oct 23, 2026 |
| CVE-2026-98949 | Not scored | drm/imagination: Fix reference and vm_bo handling in remap() | Oct 23, 2026 |
| CVE-2026-98948 | Not scored | mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() | Oct 23, 2026 |
| CVE-2026-98947 | Not scored | vsock: Fix memory leak in vmci_transport_recv_dgram_cb() | Oct 23, 2026 |
| CVE-2026-98946 | Not scored | drm/vc4: Disable the V3D interrupt across runtime suspend | Oct 23, 2026 |
| CVE-2026-98945 | 7.8 High | HID: steam: Rearrange teardown sequence | Oct 23, 2026 |
| CVE-2026-98944 | 7.8 High | HID: steam: Refactor registration | Oct 23, 2026 |
| CVE-2026-54711 | 2.4 Low | PGHoard: Password written to debug log | Oct 23, 2026 |
| CVE-2026-63120 | 8.4 High | PGHoard: Incomplete Path Traversal fix in restore.py allows Arbitrary File Write | Oct 23, 2026 |
| CVE-2026-98942 | Not scored | sched_ext: Build the cid tables privately and publish them with RCU | Oct 23, 2026 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.