Vulnerabilities in linux
17,979 resultsCVE-2026-63944HIGHBluetooth: hci_sync: fix UAF in hci_le_create_cis_syncEPSS 0.3%CVE-2026-89860HIGHscsi: qla2xxx: Initialize NVMe abort_work once at submissionEPSS 0.3%CVE-2022-48960HIGHnet: hisilicon: Fix potential use-after-free in hix5hd2_rx()EPSS 0.3%CVE-2022-48962HIGHnet: hisilicon: Fix potential use-after-free in hisi_femac_rx()EPSS 0.3%CVE-2022-48954HIGHs390/qeth: fix use-after-free in hsciEPSS 0.3%CVE-2024-36905—tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV socketsEPSS 0.3%CVE-2025-38571HIGHsunrpc: fix client side handling of tls alertsEPSS 0.3%CVE-2021-28711—Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains whEPSS 0.3%CVE-2021-47102HIGHnet: marvell: prestera: fix incorrect structure accessEPSS 0.3%CVE-2021-28713—Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains whEPSS 0.3%CVE-2021-28712—Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains whEPSS 0.3%CVE-2021-28715MEDIUMGuest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multiple CVEs; the text eEPSS 0.3%CVE-2025-38264CRITICALnvme-tcp: sanitize request list handlingEPSS 0.3%CVE-2024-58240CRITICALtls: separate no-async decryption request handling from asyncEPSS 0.3%CVE-2026-64435HIGHaudit: Fix data races of skb_queue_len() readers on audit_queueEPSS 0.3%CVE-2022-49159HIGHscsi: qla2xxx: Implement ref count for SRBEPSS 0.3%CVE-2026-90089HIGHBluetooth: btnxpuart: Validate the FW dump header lengthEPSS 0.3%CVE-2026-72227HIGHbatman-adv: mcast: avoid OOB read of num_dests headerEPSS 0.3%CVE-2025-38365CRITICALbtrfs: fix a race between renames and directory loggingEPSS 0.3%CVE-2025-37840—mtd: rawnand: brcmnand: fix PM resume warningEPSS 0.3%