Vulnerabilities in linux
17,980 resultsCVE-2026-53224CRITICALsctp: validate embedded INIT chunk and address list lengths in cookieEPSS 0.5%CVE-2022-49872HIGHnet: gso: fix panic on frag_list with mixed head alloc typesEPSS 0.5%CVE-2025-38001HIGHnet_sched: hfsc: Address reentrant enqueue adding class to eltree twiceEPSS 0.5%CVE-2026-68170CRITICALmptcp: fix stale skb->sk reference on subflow closeEPSS 0.5%CVE-2023-3268HIGHAn out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This EPSS 0.5%CVE-2025-21945HIGHksmbd: fix use-after-free in smb2_lockEPSS 0.5%CVE-2024-56641HIGHnet/smc: initialize close_work early to avoid warningEPSS 0.5%CVE-2023-54280CRITICALcifs: fix potential race when tree connecting ipcEPSS 0.5%CVE-2026-53384CRITICALserial: 8250_dw: unregister 8250 port if clk_notifier_register() failsEPSS 0.5%CVE-2023-52636HIGHlibceph: just wait for more data to be available on the socketEPSS 0.5%CVE-2026-64551CRITICALsctp: validate STALE_COOKIE cause length before reading stalenessEPSS 0.5%CVE-2026-53186CRITICALRDMA/srp: bound SRP_RSP sense copy by the received lengthEPSS 0.5%CVE-2026-46043CRITICALRDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcvEPSS 0.5%CVE-2025-40133HIGHmptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable().EPSS 0.5%CVE-2026-89674CRITICALnfsd: fix XDR length calculation in nfsd4_ff_encode_layoutgetEPSS 0.5%CVE-2026-74398CRITICALipv6: addrconf: bail out of dad_failure when state is no longer POSTDADEPSS 0.5%CVE-2026-80561CRITICALlibceph: fix multiple unsafe decodes in decode_locker()EPSS 0.5%CVE-2026-89542CRITICALSUNRPC: harden gss_krb5_unwrap_v2 against short tokensEPSS 0.5%CVE-2026-74384CRITICALnvme-multipath: fix flex array size in struct nvme_ns_headEPSS 0.5%CVE-2026-81002CRITICALxdp: fix zero-copy frame layoutEPSS 0.5%