Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
51605
Total
4093
Critical
15302
High
14954
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-64480 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. The … | Jul 25, 2026 |
| CVE-2026-64479 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() snd_seq_event_dup() copies an incoming event into a … | Jul 25, 2026 |
| CVE-2026-64478 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: avoid kobject path lookup in DualSense match The DualSense jack-detection input handler verifies … | Jul 25, 2026 |
| CVE-2026-64477 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled The architecture updates the cpu_mask … | Jul 25, 2026 |
| CVE-2026-64476 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Latch disable_idle_d3 per device When disable_idle_d3 was introduced in vfio-pci, it directly manipulated the … | Jul 25, 2026 |
| CVE-2026-64475 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Release the VGA arbiter client on register_device() failure The re-order in the Fixes commit … | Jul 25, 2026 |
| CVE-2026-64474 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc vfio_mig_get_next_state() walks vfio_from_fsm_table[] one step at … | Jul 25, 2026 |
| CVE-2026-64473 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before releasing devres VFIO device debugfs files created with debugfs_create_devm_seqfile() store … | Jul 25, 2026 |
| CVE-2026-64472 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfields and tighten struct layout Bitfield operations are not atomic, they use … | Jul 25, 2026 |
| CVE-2026-64471 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on registration failure Make sure to release the sibling interfaces in … | Jul 25, 2026 |
| CVE-2026-64470 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on marvell probe failure Make sure to stop any TX URBs … | Jul 25, 2026 |
| CVE-2026-64469 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binder_thread_release() When a thread exits, binder_thread_release() walks its transaction stack to … | Jul 25, 2026 |
| CVE-2026-64468 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binder_free_transaction() In binder_free_transaction(), the t->to_proc is read under the t->lock. However, … | Jul 25, 2026 |
| CVE-2026-64467 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: rust_binder: use a u64 stride when cleaning up the offsets array Allocation's Drop walks the … | Jul 25, 2026 |
| CVE-2026-64466 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: rust_binder: clear freeze listener on node removal Generally userspace is supposed to explicitly clear freeze … | Jul 25, 2026 |
| CVE-2026-64465 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix sleep in atomic context in xhci_free_streams() When a USB device with active … | Jul 25, 2026 |
| CVE-2026-64464 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: fix ring sg table pages leak xhci_ring_to_sgtable() allocates a temporary pages array and … | Jul 25, 2026 |
| CVE-2026-64463 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci_rt1711h: unregister TCPCI port with devres rt1711h_probe() registers the TCPCI port before requesting … | Jul 25, 2026 |
| CVE-2026-64462 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Fix resource leaks on probe failure The chained IRQ handler is set during … | Jul 25, 2026 |
| CVE-2026-64461 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domain leak when port fails to enable When mtk_pcie_enable_port() fails, mtk_pcie_port_free() … | Jul 25, 2026 |
| CVE-2026-64460 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Skip VF Resizable BAR restore on read error sriov_restore_vf_rebar_state() uses the VF Resizable BAR … | Jul 25, 2026 |
| CVE-2026-64459 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: tcp: restore RCU grace period in tcp_ao_destroy_sock Commit 51e547e8c89c ("tcp: Free TCP-AO/TCP-MD5 info/keys without RCU") … | Jul 25, 2026 |
| CVE-2026-64458 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: handle extreme intervals in damon_hot_score() Fix three issues in damon_hot_score() that comes from wrong … | Jul 25, 2026 |
| CVE-2026-64457 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: virtio_pci: fix vq info pointer lookup via wrong index Unbinding a virtio balloon device: echo … | Jul 25, 2026 |
| CVE-2026-64456 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at copy_data() random_recv_done() stores the device-reported used.len directly into vi->data_avail. … | Jul 25, 2026 |