Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
51856
Total
4111
Critical
15381
High
15070
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-53398 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFO_NO_NAME decode error cleanup nfsd4_decode_secinfo_no_name() currently initializes sin_exp after decoding sin_style. If the … | Jul 19, 2026 |
| CVE-2026-53397 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posix_acl leak on SETACL decode failure nfsaclsvc_decode_setaclargs() and nfs3svc_decode_setaclargs() each call nfs_stream_decode_acl() twice, … | Jul 19, 2026 |
| CVE-2026-53396 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posix_acl leak and ignored error in nfsd4_create_file nfsd4_create_file() has two bugs in its … | Jul 19, 2026 |
| CVE-2026-53395 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dead ACL conflict guard in nfsd4_create nfsd4_create() steals create->cr_dpacl/cr_pacl into the local nfsd_attrs … | Jul 19, 2026 |
| CVE-2026-53394 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race When find_or_alloc_open_stateowner() encounters an unconfirmed owner, … | Jul 19, 2026 |
| CVE-2026-53393 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors nfsd_vfs_write() and nfsd_commit() both call filemap_check_wb_err() to … | Jul 19, 2026 |
| CVE-2026-53392 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count ff_layout_alloc_lseg() decodes the filehandle-version array count from the flexfiles … | Jul 19, 2026 |
| CVE-2026-53391 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr nfs4_decode_mp_ds_addr() decodes the r_netid and r_addr opaques of a … | Jul 19, 2026 |
| CVE-2026-53390 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds read in smb_check_perm_dacl() The permission-check ACE walk in smb_check_perm_dacl() validates the ACE … | Jul 19, 2026 |
| CVE-2026-53389 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of key in del_async path In tcp_ao_delete_key(), the del_async path skips the … | Jul 19, 2026 |
| CVE-2026-53388 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fuse_try_move_folio() unlocks the request on entry but … | Jul 19, 2026 |
| CVE-2026-53387 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add bounds check to veml6075_it_ms index veml6075_it_ms has 5 elements but VEML6075_CONF_IT … | Jul 19, 2026 |
| CVE-2026-53386 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pga_settings index ads1298_pga_settings has 7 elements but ADS1298_MASK_CH_PGA … | Jul 19, 2026 |
| CVE-2026-53385 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write A KASAN null-ptr-deref was observed in vcs_notifier(): … | Jul 19, 2026 |
| CVE-2026-53384 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails dw8250_probe() registers the 8250 port via serial8250_register_8250_port() … | Jul 19, 2026 |
| CVE-2026-53383 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject non-VALID session in compound request branch smb2_check_user_session() takes a shortcut for any operation … | Jul 19, 2026 |
| CVE-2026-53382 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si syzbot reported a general protection fault in … | Jul 19, 2026 |
| CVE-2026-53381 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount umount iput() called from fuse_release_end() can Oops if the super … | Jul 19, 2026 |
| CVE-2026-53380 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: media: rzv2h-ivc: Fix concurrent buffer list access The list of buffers (`rzv2h_ivc::buffers.queue`) is protected by … | Jul 19, 2026 |
| CVE-2026-53379 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov8856: free control handler on error in ov8856_init_controls() The control handler wasn't freed … | Jul 19, 2026 |
| CVE-2026-53378 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property reference tracking in state lifecycle The colorop state blob property handling … | Jul 19, 2026 |
| CVE-2026-53377 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/msm: always recover the gpu Previously, in case there was no more work to do, … | Jul 19, 2026 |
| CVE-2026-53376 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add upper bound check for num_of_nodes drm/amdkfd: Add upper bound check for num_of_nodes in … | Jul 19, 2026 |
| CVE-2026-53375 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that only one of lo/hi is valid, … | Jul 19, 2026 |
| CVE-2026-53374 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: zero-initialize GART table on allocation GART TLB is flushed after unmapping but not after … | Jul 19, 2026 |