Vulnerabilities

Linux Kernel 7.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

643CVEs

CVE-2026-53330

drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()

Published 2026-07-01 · Analyzed

7.1EPSS 0.001

CVE-2026-53346

rust: arm64: set uwtable llvm module flag for CONFIG_UNWIND_TABLES

Published 2026-07-01 · Analyzed

7.1EPSS 0.001

CVE-2026-53223

net: guard timestamp cmsgs to real error queue skbs

Published 2026-06-25 · Modified

7.1EPSS 0.001

CVE-2026-52942

netfilter: nf_log: validate MAC header was set before dumping it

Published 2026-06-24 · Modified

7.1EPSS 0.001

CVE-2026-53138

drm/amd/display: Bound VBIOS record-chain walk loops

Published 2026-06-25 · Analyzed

7.1EPSS 0.001

CVE-2026-53149

thunderbolt: Bound root directory content to block size

Published 2026-06-25 · Analyzed

7.1EPSS 0.001

CVE-2026-52917

sctp: diag: reject stale associations in dump_one path

Published 2026-06-24 · Analyzed

7.1EPSS 0.001

CVE-2026-53179

staging: rtl8723bs: fix buffer over-read in rtw_update_protection

Published 2026-06-25 · Analyzed

7.1EPSS 0.001

CVE-2026-53205

accel/ivpu: Add bounds checks for firmware log indices

Published 2026-06-25 · Analyzed

7.1EPSS 0.001

CVE-2026-53187

RDMA/core: Validate cpu_id against nr_cpu_ids in DMAH alloc

Published 2026-06-25 · Analyzed

7.1EPSS 0.001

CVE-2026-53255

Bluetooth: MGMT: validate advertising TLV before type checks

Published 2026-06-25 · Analyzed

7.1EPSS 0.001

CVE-2026-46309

drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise

Published 2026-06-08 · Analyzed

7.0EPSS 0.002

CVE-2026-64219

drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async

Published 2026-07-24 · Analyzed

7.0EPSS 0.002

CVE-2026-64222

octeontx2-pf: avoid double free of pool->stack on AQ init failure

Published 2026-07-24 · Analyzed

7.0EPSS 0.002

CVE-2026-46029

mm/slab: return NULL early from kmalloc_nolock() in NMI on UP

Published 2026-05-27 · Analyzed

7.0EPSS 0.002

CVE-2026-46154

sched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup setters

Published 2026-05-28 · Analyzed

7.0EPSS 0.002

CVE-2026-53329

drm/amd/display: Use krealloc_array() in dal_vector_reserve()

Published 2026-07-01 · Analyzed

7.0EPSS 0.001

CVE-2026-53196

USB: serial: io_ti: fix heap overflow in get_manuf_info()

Published 2026-06-25 · Modified

6.8EPSS 0.003

CVE-2026-52961

ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size

Published 2026-06-24 · Modified

5.5EPSS 0.002

CVE-2026-52944

ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE

Published 2026-06-24 · Modified

5.5EPSS 0.002

CVE-2026-64139

ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow

Published 2026-07-19 · Modified

5.5EPSS 0.002

CVE-2026-52966

drm: Replace old pointer to new idr

Published 2026-06-24 · Analyzed

5.5EPSS 0.002

CVE-2026-46202

HID: appletb-kbd: run inactivity autodim from workqueues

Published 2026-05-28 · Analyzed

5.5EPSS 0.002

CVE-2026-46132

net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo

Published 2026-05-28 · Undergoing Analysis

5.5EPSS 0.002

CVE-2026-46101

netfilter: reject zero shift in nft_bitwise

Published 2026-05-27 · Modified

5.5EPSS 0.002

CVE-2026-53295

mailbox: add sanity check for channel array

Published 2026-06-26 · Modified

5.5EPSS 0.002

CVE-2026-46172

ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()

Published 2026-05-28 · Modified

5.5EPSS 0.002

CVE-2026-52970

netfilter: nft_ct: fix missing expect put in obj eval

Published 2026-06-24 · Modified

5.5EPSS 0.002

CVE-2026-46216

drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status()

Published 2026-05-28 · Analyzed

5.5EPSS 0.002

CVE-2026-46131

KVM: x86: check for nEPT/nNPT in slow flush hypercalls

Published 2026-05-28 · Undergoing Analysis

5.5EPSS 0.002

CVE-2026-46220

drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission

Published 2026-05-28 · Analyzed

5.5EPSS 0.002

CVE-2026-53287

audit: fix incorrect inheritable capability in CAPSET records

Published 2026-06-26 · Analyzed

5.5EPSS 0.002

CVE-2026-45844

netfilter: arp_tables: fix IEEE1394 ARP payload parsing

Published 2026-05-27 · Analyzed

5.5EPSS 0.002

CVE-2026-64064

netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone

Published 2026-07-19 · Analyzed

5.5EPSS 0.002

CVE-2026-46231

batman-adv: bla: put backbone reference on failed claim hash insert

Published 2026-05-28 · Analyzed

5.5EPSS 0.002

CVE-2026-45846

bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()

Published 2026-05-27 · Analyzed

5.5EPSS 0.002

CVE-2026-46233

batman-adv: bla: only purge non-released claims

Published 2026-05-28 · Analyzed

5.5EPSS 0.002

CVE-2026-64052

block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user()

Published 2026-07-19 · Analyzed

5.5EPSS 0.002

CVE-2026-53364

Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate()

Published 2026-07-13 · Modified

5.5EPSS 0.002

CVE-2026-46139

smb: client: use kzalloc to zero-initialize security descriptor buffer

Published 2026-05-28 · Undergoing Analysis

5.5EPSS 0.002

Linux Kernel 7.1

Security check