Vulnerabilities in linux
18,209 resultsCVE-2026-98734—Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardownEPSS 0.2%CVE-2026-74448—drm/amdkfd: fix QID bit leak in pqm_create_queue()EPSS 0.2%CVE-2026-97412—pds_core: quiesce DMA before freeing resourcesEPSS 0.2%CVE-2026-98979—namespace: refuse an automount below a mount that is in no namespaceEPSS 0.2%CVE-2026-98793—netfilter: bpf: reject invalid NAT manipulation typesEPSS 0.2%CVE-2026-98746—serial: ma35d1: Fix clock reference leak in ma35d1serial_probe()EPSS 0.2%CVE-2026-72485HIGHcoresight: platform: defer connection counter increment until alloc succeedsEPSS 0.2%CVE-2026-93211—nfsd: initialize DRC hash table before registering shrinkerEPSS 0.2%CVE-2026-98510HIGHdrm/xe/vm: nuke PTs only after unlinking contested VMAsEPSS 0.2%CVE-2026-93173—bpf,lsm: Drop bpf_prog_free from sleepable_lsm_hooksEPSS 0.2%CVE-2026-98790—perf: Fix race between perf_event_exit_task() and perf_pending_task()EPSS 0.2%CVE-2026-98102—ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src()EPSS 0.2%CVE-2026-89500HIGHring-buffer: Make cpu_buffer::free_page a buffer_data_read_pageEPSS 0.2%CVE-2026-80822—mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()EPSS 0.2%CVE-2026-98048—bpf: don't rewrite bpf_fastcall patterns entered by a jumpEPSS 0.2%CVE-2026-23041—bnxt_en: Fix NULL pointer crash in bnxt_ptp_enable during error cleanupEPSS 0.2%CVE-2026-97976—Bluetooth: btintel_pcie: validate packet_len before skb_put_dataEPSS 0.2%CVE-2026-97422—drm/amdkfd: fix SMI event cross-process information leakEPSS 0.2%CVE-2026-89718—zram: fix out-of-bounds access in writeback_store()EPSS 0.2%CVE-2026-98757—usb: cdns3: fix use-after-free in cdns3_gadget_exit()EPSS 0.2%