Total CVEs

126,178

Critical Severity

2,292

High Severity

7,949

Last 7 Days

1,215
Quick preset (or use dates below)
Clear Filters
๐Ÿ“… Showing Year: 2026 (January 1 - December 31, 2026) View All Years โ†’
Showing 1,941 - 1,960 of 22,583 CVEs

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent immediate PASID reuse case PASID resue could cause interrupt issue when process immediately runs into hw state left by previous process exited with the same PASID, it's possible that page faults are still ...

Vendor: Linux
Product: Linux
Published: Apr 22, 2026
Source: NVD

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix drm_edid leak in amdgpu_dm [WHAT] When a sink is connected, aconnector->drm_edid was overwritten without freeing the previous allocation, causing a memory leak on resume. [HOW] Free the previous drm_edid b...

Vendor: Linux
Product: Linux
Published: Apr 22, 2026
Source: NVD

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check if ext_caps is valid in BL setup LVDS connectors don't have extended backlight caps so check if the pointer is valid before accessing it. (cherry picked from commit 3f797396d7f4eb9bb6eded184bbc6f033628...

Vendor: Linux
Product: Linux
Published: Apr 22, 2026
Source: NVD

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx() failure Patch series "mm/damon/sysfs: fix memory leak and NULL dereference issues", v4. DAMON_SYSFS can leak memory under allocation failure, and do NULL ...

Vendor: Linux
Product: Linux
Published: Apr 22, 2026
Source: NVD

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] Multiple sysfs command paths dereference contexts_arr[0] without first verifying that kdamond->contexts->nr == 1. A user can set nr_contexts to 0 via sy...

Vendor: Linux
Product: Linux
Published: Apr 22, 2026
Source: NVD

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: check contexts->nr in repeat_call_fn damon_sysfs_repeat_call_fn() calls damon_sysfs_upd_tuned_intervals(), damon_sysfs_upd_schemes_stats(), and damon_sysfs_upd_schemes_effective_quotas() without checking context...

Vendor: Linux
Product: Linux
Published: Apr 22, 2026
Source: NVD

In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix race between concurrent split and refault The splitting of a PUD entry in walk_pud_range() can race with a concurrent thread refaulting the PUD leaf entry causing it to try walking a PMD range that has disappeared...

Vendor: Linux
Product: Linux
Published: Apr 22, 2026
Source: NVD

In the Linux kernel, the following vulnerability has been resolved: xfs: stop reclaim before pushing AIL during unmount The unmount sequence in xfs_unmount_flush_inodes() pushed the AIL while background reclaim and inodegc are still running. This is broken independently of any use-after-free issue...

Vendor: Linux
Product: Linux
Published: Apr 22, 2026
Source: NVD
CVE-2026-31454 HIGH - 7.8

In the Linux kernel, the following vulnerability has been resolved: xfs: save ailp before dropping the AIL lock in push callbacks In xfs_inode_item_push() and xfs_qm_dquot_logitem_push(), the AIL lock is dropped to perform buffer IO. Once the cluster buffer no longer protects the log item from rec...

Vendor: Linux
Product: Linux
Published: Apr 22, 2026
Source: NVD
CVE-2026-31453 HIGH - 7.8

In the Linux kernel, the following vulnerability has been resolved: xfs: avoid dereferencing log items after push callbacks After xfsaild_push_item() calls iop_push(), the log item may have been freed if the AIL lock was dropped during the push. Background inode reclaim or the dquot shrinker can f...

Vendor: Linux
Product: Linux
Published: Apr 22, 2026
Source: NVD

In the Linux kernel, the following vulnerability has been resolved: ext4: convert inline data to extents when truncate exceeds inline size Add a check in ext4_setattr() to convert files from inline data storage to extent-based storage when truncate() grows the file size beyond the inline capacity....

Vendor: Linux
Product: Linux
Published: Apr 22, 2026
Source: NVD

In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio Replace BUG_ON() with proper error handling when inline data size exceeds PAGE_SIZE. This prevents kernel panic and allows the system to continue running wh...

Vendor: Linux
Product: Linux
Published: Apr 22, 2026
Source: NVD
CVE-2026-31450 HIGH - 8.8

In the Linux kernel, the following vulnerability has been resolved: ext4: publish jinode after initialization ext4_inode_attach_jinode() publishes ei->jinode to concurrent users. It used to set ei->jinode before jbd2_journal_init_jbd_inode(), allowing a reader to observe a non-NULL jinode wi...

Vendor: Linux
Product: Linux
Published: Apr 22, 2026
Source: NVD
CVE-2026-31449 HIGH - 7.8

In the Linux kernel, the following vulnerability has been resolved: ext4: validate p_idx bounds in ext4_ext_correct_indexes ext4_ext_correct_indexes() walks up the extent tree correcting index entries when the first extent in a leaf is modified. Before accessing path[k].p_idx->ei_block, there i...

Vendor: Linux
Product: Linux
Published: Apr 22, 2026
Source: NVD
CVE-2026-31448 CRITICAL - 9.4

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid infinite loops caused by residual data On the mkdir/mknod path, when mapping logical blocks to physical blocks, if inserting a new extent into the extent tree fails (in this example, because the file system disabled th...

Vendor: Linux
Product: Linux
Published: Apr 22, 2026
Source: NVD
CVE-2026-31447 HIGH - 7.8

In the Linux kernel, the following vulnerability has been resolved: ext4: reject mount if bigalloc with s_first_data_block != 0 bigalloc with s_first_data_block != 0 is not supported, reject mounting it.

Vendor: Linux
Product: Linux
Published: Apr 22, 2026
Source: NVD
CVE-2026-31446 HIGH - 7.8

In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in update_super_work when racing with umount Commit b98535d09179 ("ext4: fix bug_on in start_this_handle during umount filesystem") moved ext4_unregister_sysfs() before flushing s_sb_upd_work to ...

Vendor: Linux
Product: Linux
Published: Apr 22, 2026
Source: NVD

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid use of half-online-committed context One major usage of damon_call() is online DAMON parameters update. It is done by calling damon_commit_ctx() inside the damon_call() callback function. damon_commit_ctx() ...

Vendor: Linux
Product: Linux
Published: Apr 22, 2026
Source: NVD
CVE-2026-31444 CRITICAL - 9.8

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() smb_grant_oplock() has two issues in the oplock publication sequence: 1) opinfo is linked into ci->m_op_list (via opinfo_add) before add_lease_global_list() is ...

Vendor: Linux
Product: Linux
Published: Apr 22, 2026
Source: NVD

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix crash when the event log is disabled If reporting errors to the event log is not supported by the hardware, and an error that causes Function Level Reset (FLR) is received, the driver will try to restore the e...

Vendor: Linux
Product: Linux
Published: Apr 22, 2026
Source: NVD