Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
51856
Total
4111
Critical
15381
High
15070
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-16221 | HIGH | 7.5 | Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2) do not treat a … | Jul 19, 2026 |
| CVE-2026-63836 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd The cwnd is always MSS <= cwnd <= 0x20000000. … | Jul 19, 2026 |
| CVE-2026-63835 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an interface gets disabled, the worker … | Jul 19, 2026 |
| CVE-2026-63834 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: restrict number of unacked list entries When the unacked_list is unbound, an attacker … | Jul 19, 2026 |
| CVE-2026-63833 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: ntfs3: reject direct userspace writes to reserved $LX* xattrs NTFS3 uses $LXUID, $LXGID, $LXMOD and … | Jul 19, 2026 |
| CVE-2026-63832 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: add wcid publish check in mt76_sta_add Since mt7925_mac_sta_add publishes wcid, add publish check … | Jul 19, 2026 |
| CVE-2026-63831 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skb_cow_data() before in-place crypto llsec_do_encrypt_unauth(), llsec_do_encrypt_auth(), llsec_do_decrypt_unauth(), and llsec_do_decrypt_auth() all perform in-place … | Jul 19, 2026 |
| CVE-2026-63830 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net: skmsg: preserve sg.copy across SG transforms The sk_msg sg.copy bitmap is part of the … | Jul 19, 2026 |
| CVE-2026-63829 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink A tunnel changelink() operates on … | Jul 19, 2026 |
| CVE-2026-63828 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: apparmor: mediate the implicit connect of TCP fast open sendmsg sendmsg()/sendto() with MSG_FASTOPEN is a … | Jul 19, 2026 |
| CVE-2026-63827 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix use-after-free in rawdata dedup loop aa_replace_profiles() walks ns->rawdata_list to dedup the incoming policy … | Jul 19, 2026 |
| CVE-2026-63826 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: fbdev: fix use-after-free in store_modes() store_modes() replaces a framebuffer's modelist with modes from userspace. On … | Jul 19, 2026 |
| CVE-2026-63825 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: gcov: use atomic counter updates to fix concurrent access crashes GCC's GCOV instrumentation can merge … | Jul 19, 2026 |
| CVE-2026-63824 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: KEYS: fix overflow in keyctl_pkey_params_get_2() The length for the internal output buffer is calculated incorrectly, … | Jul 19, 2026 |
| CVE-2026-63823 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: keys: Pin request_key_auth payload in instantiate paths A: request_key() B: KEYCTL_INSTANTIATE_IOV ================ ========================= create auth … | Jul 19, 2026 |
| CVE-2026-63822 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix warning when unbinding If there is an error during some initialization related … | Jul 19, 2026 |
| CVE-2026-63821 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: usb: fix memory leaks on USB write failures When rtw_usb_write_port() fails to submit … | Jul 19, 2026 |
| CVE-2026-63820 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix missing read bio submission on large folio error f2fs_read_data_large_folio() can keep a read … | Jul 19, 2026 |
| CVE-2026-63819 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on f2fs_get_node_folio_ra() kernel BUG at fs/f2fs/file.c:845! Oops: invalid opcode: … | Jul 19, 2026 |
| CVE-2026-63818 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: f2fs: validate orphan inode entry count f2fs_recover_orphan_inodes() trusts the orphan block entry_count when replaying orphan … | Jul 19, 2026 |
| CVE-2026-63817 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: f2fs: validate compress cache inode only when enabled F2FS_COMPRESS_INO() uses NM_I(sbi)->max_nid as the synthetic inode … | Jul 19, 2026 |
| CVE-2026-63816 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode - ioctl(F2FS_IOC_GARBAGE_COLLECT_RANGE) - shrink - f2fs_gc - gc_data_segment … | Jul 19, 2026 |
| CVE-2026-63815 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: f2fs: bound i_inline_xattr_size for non-inline-xattr inodes When the flexible_inline_xattr feature is enabled, do_read_inode() loads the … | Jul 19, 2026 |
| CVE-2026-63814 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: f2fs: validate ACL entry sizes in f2fs_acl_from_disk() f2fs_acl_count() only validates the aggregate ACL xattr length. … | Jul 19, 2026 |
| CVE-2026-63813 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: Revert "f2fs: remove non-uptodate folio from the page cache in move_data_block" This reverts commit 9609dd704725a40cd63d915f2ab6c44248a44598. … | Jul 19, 2026 |