Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
46161
Total
3680
Critical
13653
High
13585
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-74498 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set When a USB audio … | Aug 15, 2026 |
| CVE-2026-74497 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp frame size in implicit-feedback mode snd_usb_handle_sync_urb() scales received sync packet sizes by … | Aug 15, 2026 |
| CVE-2026-74496 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: fou: Fix use-after-free in fou_create() fou_create() publishes struct fou through sk_user_data before adding the new … | Aug 15, 2026 |
| CVE-2026-74495 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping … | Aug 15, 2026 |
| CVE-2026-74494 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject repeated SMB2 NEGOTIATE requests Unauthenticated client can send multiple successful SMB2 NEGOTIATE requests … | Aug 15, 2026 |
| CVE-2026-74493 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket use-after-free during link group termination __smc_lgr_terminate() drops conns_lock after finding a connection … | Aug 15, 2026 |
| CVE-2026-74492 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: do not update comments from kernel-side hash adds mtype_resize() copies comment pointers with … | Aug 15, 2026 |
| CVE-2026-74491 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: of/address: Fix NULL bus dereference in of_pci_range_parser_one() The bus matching rework made of_match_bus() return NULL … | Aug 15, 2026 |
| CVE-2026-74490 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: tipc: avoid use-after-free in poll trace queue dumps TIPC socket tracepoints dump queue state through … | Aug 15, 2026 |
| CVE-2026-74489 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix tid_tx use-after-free on BA session stop ieee80211_stop_tx_ba_cb() hands tid_tx to kfree_rcu() through … | Aug 15, 2026 |
| CVE-2026-74488 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames mwifiex_11n_dispatch_amsdu_pkt() splits an A-MSDU … | Aug 15, 2026 |
| CVE-2026-74487 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: restore write access when removing an entry Registering an entry with the MISC_FMT_OPEN_FILE flag … | Aug 15, 2026 |
| CVE-2026-74486 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: use exe_file_deny_write_access() for the interpreter clone For MISC_FMT_OPEN_FILE entries load_misc_binary() clones the registered interpreter … | Aug 15, 2026 |
| CVE-2026-74485 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: reject a flag character as the field delimiter The registration string starts with a … | Aug 15, 2026 |
| CVE-2026-74484 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: don't let an 'F' entry pin its own instance An entry registered with 'F' … | Aug 15, 2026 |
| CVE-2026-74483 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: don't leak the user namespace when the mount fails bm_get_tree() takes a reference to … | Aug 15, 2026 |
| CVE-2026-74482 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios __folio_split() keeps dereferencing the mapping after the split: … | Aug 15, 2026 |
| CVE-2026-74481 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: mm/page_reporting: use system_freezable_wq to fix UAF during suspend During PM freeze (e.g. S3 suspend or … | Aug 15, 2026 |
| CVE-2026-74480 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleting a port group br_multicast_leave_group() iterates mp->ports with pp = … | Aug 15, 2026 |
| CVE-2026-74479 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net: pktgen: fix proc entry use-after-free pktgen_change_name() replaces pkt_dev->entry while holding t->if_lock. pktgen_remove_device() removes the … | Aug 15, 2026 |
| CVE-2026-74478 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vector_mmsg_rx() When vector_mmsg_rx() discards a packet whose overlay header fails … | Aug 15, 2026 |
| CVE-2026-74477 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: uprobes: Fix NULL pointer dereference in hprobe_expire() Forking a task that has a pending uretprobe … | Aug 15, 2026 |
| CVE-2026-74476 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: veth: convert frag_list skbs before running XDP A frag_list skb can reach veth with data_len … | Aug 15, 2026 |
| CVE-2026-74475 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: vxlan: use neigh_ha_snapshot() in route_shortcircuit() The neighbour hardware address n->ha can be updated asynchronously by … | Aug 15, 2026 |
| CVE-2026-74474 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: vxlan: use pskb_network_may_pull() for transmit path header pulls In vxlan_xmit(), arp_reduce(), and vxlan_mdb_entry_skb_get(), pskb_may_pull() was … | Aug 15, 2026 |