Vulnerabilities

Linux Linux Kernel 7.3

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

73CVEs

CVE-2026-98115

ksmbd: safely drain sessions during logoff

Published 2026-09-25 · Undergoing Analysis

8.8EPSS 0.003

CVE-2026-98130

sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START

Published 2026-09-25 · Analyzed

8.1EPSS 0.005

CVE-2026-98156

drm/virtio: use the DMA API for resource backing on Xen

Published 2026-09-25 · Modified

7.8EPSS 0.001

CVE-2026-98052

net: bcmasp: clear txcb->last before writing each descriptor

Published 2026-09-25 · Analyzed

7.8EPSS 0.001

CVE-2026-98117

cachefiles: Fix potential UAF/KASAN warning

Published 2026-09-25 · Analyzed

7.8EPSS 0.001

CVE-2026-98093

ASoC: fsl_micfil: balance mclk enable/disable

Published 2026-09-25 · Analyzed

7.8EPSS 0.001

CVE-2026-98116

ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF

Published 2026-09-25 · Analyzed

7.8EPSS 0.001

CVE-2026-98122

vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del()

Published 2026-09-25 · Analyzed

7.8EPSS 0.001

CVE-2026-98149

bpf: Fix percpu map update indexing with sparse CPU IDs

Published 2026-09-25 · Analyzed

7.8EPSS 0.001

CVE-2026-98143

accel: ethosu: Don't read the U65 rounding mode as a storage mode

Published 2026-09-25 · Analyzed

7.8EPSS 0.001

CVE-2026-98163

cgroup: Avoid iteration of dying tasks with zero refcount

Published 2026-09-26 · Modified

7.8EPSS 0.001

CVE-2026-98112

ksmbd: fix listener task lifetime on netdev events

Published 2026-09-25 · Analyzed

7.8EPSS 0.001

CVE-2026-98050

mlxsw: spectrum_ptp: Fix napi_gro_receive() call from GC workqueue context

Published 2026-09-25 · Analyzed

7.5EPSS 0.002

CVE-2026-98096

ipv6: sr: restore network header before routing and forwarding

Published 2026-09-25 · Analyzed

7.4EPSS 0.005

CVE-2026-98110

Bluetooth: btintel: bound firmware ID by TLV length

Published 2026-09-25 · Analyzed

7.1EPSS 0.001

CVE-2026-98111

Bluetooth: btintel: validate version TLV value lengths

Published 2026-09-25 · Analyzed

7.1EPSS 0.001

CVE-2026-98136

ntfs: bound $AttrDef table walk to the loaded table size

Published 2026-09-25 · Analyzed

7.1EPSS 0.001

CVE-2026-98118

netfs: Fix readahead synchronisation issues by loading all folios upfront

Published 2026-09-25 · Analyzed

7.1EPSS 0.001

CVE-2026-98083

btrfs: fix transaction use-after-free in raid stripe insertion

Published 2026-09-25 · Analyzed

7.0EPSS 0.001

CVE-2026-98154

nvme-rdma: fix -EIO cleanup order in queue_rq

Published 2026-09-25 · Analyzed

7.0EPSS 0.001

CVE-2026-98150

bpf: Fix BPF_F_CPU validation for sparse CPU IDs

Published 2026-09-25 · Analyzed

7.0EPSS 0.001

CVE-2026-98124

smb/client: invalidate fscache for fallocate range operations

Published 2026-09-25 · Analyzed

5.5EPSS 0.002

CVE-2026-98062

bpf: Mark signal tracepoint siginfo arguments as scalar

Published 2026-09-25 · Undergoing Analysis

5.5EPSS 0.002

CVE-2026-98134

bpf: check_cond_jmp_op(): properly infer if register is null

Published 2026-09-25 · Modified

5.5EPSS 0.002

CVE-2026-98049

bpf: zero extend the result of an arena 32-bit cmpxchg

Published 2026-09-25 · Modified

5.5EPSS 0.002

CVE-2026-98113

ksmbd: rate limit unmapped SID errors

Published 2026-09-25 · Analyzed

5.5EPSS 0.002

CVE-2026-98119

netfs: break unbuffered write when netfs_alloc_subrequest() fails

Published 2026-09-25 · Analyzed

5.5EPSS 0.001

CVE-2026-98139

ntfs: only count successfully cleared runs when freeing clusters

Published 2026-09-25 · Analyzed

5.5EPSS 0.001

CVE-2026-98080

btrfs: do not force reloc root creation during qgroup_account_snapshot()

Published 2026-09-25 · Analyzed

5.5EPSS 0.001

CVE-2026-98127

smb/client: validate new EOF for insert range

Published 2026-09-25 · Analyzed

5.5EPSS 0.001

CVE-2026-98092

ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close()

Published 2026-09-25 · Analyzed

5.5EPSS 0.001

CVE-2026-98128

scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add()

Published 2026-09-25 · Analyzed

5.5EPSS 0.001

CVE-2026-98095

af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header().

Published 2026-09-25 · Analyzed

5.5EPSS 0.001

CVE-2026-98129

scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add()

Published 2026-09-25 · Analyzed

5.5EPSS 0.001

CVE-2026-98090

btrfs: restore active device pointers after failed sprout

Published 2026-09-25 · Analyzed

5.5EPSS 0.001

CVE-2026-98091

btrfs: detach failed sprout device from transaction update list

Published 2026-09-25 · Analyzed

5.5EPSS 0.001

CVE-2026-98059

bpf: Mark sched_process_wait argument as nullable

Published 2026-09-25 · Analyzed

5.5EPSS 0.001

CVE-2026-98121

watchdog: msc313e: Fix NULL pointer dereference in PM callbacks

Published 2026-09-25 · Analyzed

5.5EPSS 0.001

CVE-2026-98131

net: stmmac: fix dma mapping leak in stmmac_tso_xmit()

Published 2026-09-25 · Modified

5.5EPSS 0.001

CVE-2026-98126

smb/client: validate new EOF for zero range

Published 2026-09-25 · Analyzed

5.5EPSS 0.001

Linux Linux Kernel 7.3

Security check