Search CVE reports


Toggle filters

1 – 10 of 54155 results

Status is adjusted based on your filters.


CVE-2026-99288

Medium priority
Needs evaluation

In the Linux kernel, the following vulnerability has been resolved: inet: reject unhashed sockets during established lookups TCP established ehash lookups are lockless. The socket caches involved use SLAB_TYPESAFE_BY_RCU, so...

169 affected packages

linux, linux-hwe, linux-hwe-5.4, linux-hwe-5.8, linux-hwe-5.11...

Package 20.04 LTS
linux Needs evaluation
linux-hwe —
linux-hwe-5.4 —
linux-hwe-5.8 Ignored
linux-hwe-5.11 Ignored
linux-hwe-5.13 Ignored
linux-hwe-5.15 Needs evaluation
linux-hwe-5.19 —
linux-hwe-6.2 —
linux-hwe-6.5 —
linux-hwe-6.8 —
linux-hwe-6.11 —
linux-hwe-6.14 —
linux-hwe-6.17 —
linux-hwe-7.0 —
linux-hwe-edge —
linux-lts-xenial —
linux-kvm Needs evaluation
linux-allwinner-5.19 —
linux-aws Needs evaluation
linux-aws-5.0 —
linux-aws-5.3 —
linux-aws-5.4 —
linux-aws-5.8 Ignored
linux-aws-5.11 Ignored
linux-aws-5.13 Ignored
linux-aws-5.15 Needs evaluation
linux-aws-5.19 —
linux-aws-6.2 —
linux-aws-6.5 —
linux-aws-6.8 —
linux-aws-6.14 —
linux-aws-6.17 —
linux-aws-7.0 —
linux-aws-hwe —
linux-azure Needs evaluation
linux-azure-4.15 —
linux-azure-5.3 —
linux-azure-5.4 —
linux-azure-5.8 Ignored
linux-azure-5.11 Ignored
linux-azure-5.13 Ignored
linux-azure-5.15 Needs evaluation
linux-azure-5.19 —
linux-azure-6.2 —
linux-azure-6.5 —
linux-azure-6.8 —
linux-azure-6.11 —
linux-azure-6.14 —
linux-azure-6.17 —
linux-azure-7.0 —
linux-azure-fde Ignored
linux-azure-fde-5.15 Needs evaluation
linux-azure-fde-5.19 —
linux-azure-fde-6.2 —
linux-azure-fde-6.8 —
linux-azure-fde-6.14 —
linux-azure-fde-6.17 —
linux-azure-fde-7.0 —
linux-azure-nvidia —
linux-azure-nvidia-6.14 —
linux-bluefield Needs evaluation
linux-azure-edge —
linux-fips Needs evaluation
linux-aws-fips Needs evaluation
linux-azure-fips Needs evaluation
linux-gcp-fips Needs evaluation
linux-gcp Needs evaluation
linux-gcp-4.15 —
linux-gcp-5.3 —
linux-gcp-5.4 —
linux-gcp-5.8 Ignored
linux-gcp-5.11 Ignored
linux-gcp-5.13 Ignored
linux-gcp-5.15 Needs evaluation
linux-gcp-5.19 —
linux-gcp-6.2 —
linux-gcp-6.5 —
linux-gcp-6.8 —
linux-gcp-6.11 —
linux-gcp-6.14 —
linux-gcp-6.17 —
linux-gcp-7.0 —
linux-gke Ignored
linux-gke-4.15 —
linux-gke-5.4 —
linux-gke-5.15 Ignored
linux-gkeop Ignored
linux-gkeop-5.4 —
linux-gkeop-5.15 Ignored
linux-ibm Needs evaluation
linux-ibm-5.4 —
linux-ibm-5.15 Needs evaluation
linux-ibm-6.8 —
linux-intel-5.13 Ignored
linux-intel-iotg —
linux-intel-iotg-5.15 Needs evaluation
linux-iot Needs evaluation
linux-intel-iot-realtime —
linux-lowlatency —
linux-lowlatency-hwe-5.15 Needs evaluation
linux-lowlatency-hwe-5.19 —
linux-lowlatency-hwe-6.2 —
linux-lowlatency-hwe-6.5 —
linux-lowlatency-hwe-6.8 —
linux-lowlatency-hwe-6.11 —
linux-nvidia —
linux-nvidia-6.2 —
linux-nvidia-6.5 —
linux-nvidia-6.8 —
linux-nvidia-6.11 —
linux-nvidia-6.17 —
linux-nvidia-7.0 —
linux-nvidia-bos —
linux-nvidia-lowlatency —
linux-nvidia-tegra —
linux-nvidia-tegra-5.15 Needs evaluation
linux-nvidia-tegra-igx —
linux-oracle Needs evaluation
linux-oracle-5.0 —
linux-oracle-5.3 —
linux-oracle-5.4 —
linux-oracle-5.8 Ignored
linux-oracle-5.11 Ignored
linux-oracle-5.13 Ignored
linux-oracle-5.15 Needs evaluation
linux-oracle-6.5 —
linux-oracle-6.8 —
linux-oracle-6.14 —
linux-oracle-6.17 —
linux-oracle-7.0 —
linux-oem —
linux-oem-5.6 Ignored
linux-oem-5.10 Ignored
linux-oem-5.13 Ignored
linux-oem-5.14 Ignored
linux-oem-5.17 —
linux-oem-6.0 —
linux-oem-6.1 —
linux-oem-6.5 —
linux-oem-6.8 —
linux-oem-6.11 —
linux-oem-6.14 —
linux-oem-6.17 —
linux-oem-7.0 —
linux-raspi Needs evaluation
linux-raspi2 Ignored
linux-raspi-5.4 —
linux-raspi-realtime —
linux-realtime —
linux-realtime-6.8 —
linux-realtime-6.14 —
linux-riscv Ignored
linux-riscv-5.8 Ignored
linux-riscv-5.11 Ignored
linux-riscv-5.15 Needs evaluation
linux-riscv-5.19 —
linux-riscv-6.5 —
linux-riscv-6.8 —
linux-riscv-6.14 —
linux-riscv-6.17 —
linux-riscv-7.0 —
linux-starfive-5.19 —
linux-starfive-6.2 —
linux-starfive-6.5 —
linux-vmware —
linux-xilinx —
linux-xilinx-zynqmp Needs evaluation
linux-realtime-6.17 —
Show all 169 packages Show less packages

CVE-2026-99287

Medium priority
Needs evaluation

In the Linux kernel, the following vulnerability has been resolved: xen-netback: Zero out sring pointers on unmap If xenvif_map_frontend_data_rings() fails when a ring is already mapped, it unmaps them via...

169 affected packages

linux, linux-hwe, linux-hwe-5.4, linux-hwe-5.8, linux-hwe-5.11...

Package 20.04 LTS
linux Needs evaluation
linux-hwe —
linux-hwe-5.4 —
linux-hwe-5.8 Ignored
linux-hwe-5.11 Ignored
linux-hwe-5.13 Ignored
linux-hwe-5.15 Needs evaluation
linux-hwe-5.19 —
linux-hwe-6.2 —
linux-hwe-6.5 —
linux-hwe-6.8 —
linux-hwe-6.11 —
linux-hwe-6.14 —
linux-hwe-6.17 —
linux-hwe-7.0 —
linux-hwe-edge —
linux-lts-xenial —
linux-kvm Needs evaluation
linux-allwinner-5.19 —
linux-aws Needs evaluation
linux-aws-5.0 —
linux-aws-5.3 —
linux-aws-5.4 —
linux-aws-5.8 Ignored
linux-aws-5.11 Ignored
linux-aws-5.13 Ignored
linux-aws-5.15 Needs evaluation
linux-aws-5.19 —
linux-aws-6.2 —
linux-aws-6.5 —
linux-aws-6.8 —
linux-aws-6.14 —
linux-aws-6.17 —
linux-aws-7.0 —
linux-aws-hwe —
linux-azure Needs evaluation
linux-azure-4.15 —
linux-azure-5.3 —
linux-azure-5.4 —
linux-azure-5.8 Ignored
linux-azure-5.11 Ignored
linux-azure-5.13 Ignored
linux-azure-5.15 Needs evaluation
linux-azure-5.19 —
linux-azure-6.2 —
linux-azure-6.5 —
linux-azure-6.8 —
linux-azure-6.11 —
linux-azure-6.14 —
linux-azure-6.17 —
linux-azure-7.0 —
linux-azure-fde Ignored
linux-azure-fde-5.15 Needs evaluation
linux-azure-fde-5.19 —
linux-azure-fde-6.2 —
linux-azure-fde-6.8 —
linux-azure-fde-6.14 —
linux-azure-fde-6.17 —
linux-azure-fde-7.0 —
linux-azure-nvidia —
linux-azure-nvidia-6.14 —
linux-bluefield Needs evaluation
linux-azure-edge —
linux-fips Needs evaluation
linux-aws-fips Needs evaluation
linux-azure-fips Needs evaluation
linux-gcp-fips Needs evaluation
linux-gcp Needs evaluation
linux-gcp-4.15 —
linux-gcp-5.3 —
linux-gcp-5.4 —
linux-gcp-5.8 Ignored
linux-gcp-5.11 Ignored
linux-gcp-5.13 Ignored
linux-gcp-5.15 Needs evaluation
linux-gcp-5.19 —
linux-gcp-6.2 —
linux-gcp-6.5 —
linux-gcp-6.8 —
linux-gcp-6.11 —
linux-gcp-6.14 —
linux-gcp-6.17 —
linux-gcp-7.0 —
linux-gke Ignored
linux-gke-4.15 —
linux-gke-5.4 —
linux-gke-5.15 Ignored
linux-gkeop Ignored
linux-gkeop-5.4 —
linux-gkeop-5.15 Ignored
linux-ibm Needs evaluation
linux-ibm-5.4 —
linux-ibm-5.15 Needs evaluation
linux-ibm-6.8 —
linux-intel-5.13 Ignored
linux-intel-iotg —
linux-intel-iotg-5.15 Needs evaluation
linux-iot Needs evaluation
linux-intel-iot-realtime —
linux-lowlatency —
linux-lowlatency-hwe-5.15 Needs evaluation
linux-lowlatency-hwe-5.19 —
linux-lowlatency-hwe-6.2 —
linux-lowlatency-hwe-6.5 —
linux-lowlatency-hwe-6.8 —
linux-lowlatency-hwe-6.11 —
linux-nvidia —
linux-nvidia-6.2 —
linux-nvidia-6.5 —
linux-nvidia-6.8 —
linux-nvidia-6.11 —
linux-nvidia-6.17 —
linux-nvidia-7.0 —
linux-nvidia-bos —
linux-nvidia-lowlatency —
linux-nvidia-tegra —
linux-nvidia-tegra-5.15 Needs evaluation
linux-nvidia-tegra-igx —
linux-oracle Needs evaluation
linux-oracle-5.0 —
linux-oracle-5.3 —
linux-oracle-5.4 —
linux-oracle-5.8 Ignored
linux-oracle-5.11 Ignored
linux-oracle-5.13 Ignored
linux-oracle-5.15 Needs evaluation
linux-oracle-6.5 —
linux-oracle-6.8 —
linux-oracle-6.14 —
linux-oracle-6.17 —
linux-oracle-7.0 —
linux-oem —
linux-oem-5.6 Ignored
linux-oem-5.10 Ignored
linux-oem-5.13 Ignored
linux-oem-5.14 Ignored
linux-oem-5.17 —
linux-oem-6.0 —
linux-oem-6.1 —
linux-oem-6.5 —
linux-oem-6.8 —
linux-oem-6.11 —
linux-oem-6.14 —
linux-oem-6.17 —
linux-oem-7.0 —
linux-raspi Needs evaluation
linux-raspi2 Ignored
linux-raspi-5.4 —
linux-raspi-realtime —
linux-realtime —
linux-realtime-6.8 —
linux-realtime-6.14 —
linux-riscv Ignored
linux-riscv-5.8 Ignored
linux-riscv-5.11 Ignored
linux-riscv-5.15 Needs evaluation
linux-riscv-5.19 —
linux-riscv-6.5 —
linux-riscv-6.8 —
linux-riscv-6.14 —
linux-riscv-6.17 —
linux-riscv-7.0 —
linux-starfive-5.19 —
linux-starfive-6.2 —
linux-starfive-6.5 —
linux-vmware —
linux-xilinx —
linux-xilinx-zynqmp Needs evaluation
linux-realtime-6.17 —
Show all 169 packages Show less packages

CVE-2026-99286

Medium priority
Needs evaluation

In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix XenBus connection failure cleanup xenvif_get_stats and xenvif_get_ethtool_stats capture vif->num_queues under rcu_read_lock. We need to unpublish...

169 affected packages

linux, linux-hwe, linux-hwe-5.4, linux-hwe-5.8, linux-hwe-5.11...

Package 20.04 LTS
linux Needs evaluation
linux-hwe —
linux-hwe-5.4 —
linux-hwe-5.8 Ignored
linux-hwe-5.11 Ignored
linux-hwe-5.13 Ignored
linux-hwe-5.15 Needs evaluation
linux-hwe-5.19 —
linux-hwe-6.2 —
linux-hwe-6.5 —
linux-hwe-6.8 —
linux-hwe-6.11 —
linux-hwe-6.14 —
linux-hwe-6.17 —
linux-hwe-7.0 —
linux-hwe-edge —
linux-lts-xenial —
linux-kvm Needs evaluation
linux-allwinner-5.19 —
linux-aws Needs evaluation
linux-aws-5.0 —
linux-aws-5.3 —
linux-aws-5.4 —
linux-aws-5.8 Ignored
linux-aws-5.11 Ignored
linux-aws-5.13 Ignored
linux-aws-5.15 Needs evaluation
linux-aws-5.19 —
linux-aws-6.2 —
linux-aws-6.5 —
linux-aws-6.8 —
linux-aws-6.14 —
linux-aws-6.17 —
linux-aws-7.0 —
linux-aws-hwe —
linux-azure Needs evaluation
linux-azure-4.15 —
linux-azure-5.3 —
linux-azure-5.4 —
linux-azure-5.8 Ignored
linux-azure-5.11 Ignored
linux-azure-5.13 Ignored
linux-azure-5.15 Needs evaluation
linux-azure-5.19 —
linux-azure-6.2 —
linux-azure-6.5 —
linux-azure-6.8 —
linux-azure-6.11 —
linux-azure-6.14 —
linux-azure-6.17 —
linux-azure-7.0 —
linux-azure-fde Ignored
linux-azure-fde-5.15 Needs evaluation
linux-azure-fde-5.19 —
linux-azure-fde-6.2 —
linux-azure-fde-6.8 —
linux-azure-fde-6.14 —
linux-azure-fde-6.17 —
linux-azure-fde-7.0 —
linux-azure-nvidia —
linux-azure-nvidia-6.14 —
linux-bluefield Needs evaluation
linux-azure-edge —
linux-fips Needs evaluation
linux-aws-fips Needs evaluation
linux-azure-fips Needs evaluation
linux-gcp-fips Needs evaluation
linux-gcp Needs evaluation
linux-gcp-4.15 —
linux-gcp-5.3 —
linux-gcp-5.4 —
linux-gcp-5.8 Ignored
linux-gcp-5.11 Ignored
linux-gcp-5.13 Ignored
linux-gcp-5.15 Needs evaluation
linux-gcp-5.19 —
linux-gcp-6.2 —
linux-gcp-6.5 —
linux-gcp-6.8 —
linux-gcp-6.11 —
linux-gcp-6.14 —
linux-gcp-6.17 —
linux-gcp-7.0 —
linux-gke Ignored
linux-gke-4.15 —
linux-gke-5.4 —
linux-gke-5.15 Ignored
linux-gkeop Ignored
linux-gkeop-5.4 —
linux-gkeop-5.15 Ignored
linux-ibm Needs evaluation
linux-ibm-5.4 —
linux-ibm-5.15 Needs evaluation
linux-ibm-6.8 —
linux-intel-5.13 Ignored
linux-intel-iotg —
linux-intel-iotg-5.15 Needs evaluation
linux-iot Needs evaluation
linux-intel-iot-realtime —
linux-lowlatency —
linux-lowlatency-hwe-5.15 Needs evaluation
linux-lowlatency-hwe-5.19 —
linux-lowlatency-hwe-6.2 —
linux-lowlatency-hwe-6.5 —
linux-lowlatency-hwe-6.8 —
linux-lowlatency-hwe-6.11 —
linux-nvidia —
linux-nvidia-6.2 —
linux-nvidia-6.5 —
linux-nvidia-6.8 —
linux-nvidia-6.11 —
linux-nvidia-6.17 —
linux-nvidia-7.0 —
linux-nvidia-bos —
linux-nvidia-lowlatency —
linux-nvidia-tegra —
linux-nvidia-tegra-5.15 Needs evaluation
linux-nvidia-tegra-igx —
linux-oracle Needs evaluation
linux-oracle-5.0 —
linux-oracle-5.3 —
linux-oracle-5.4 —
linux-oracle-5.8 Ignored
linux-oracle-5.11 Ignored
linux-oracle-5.13 Ignored
linux-oracle-5.15 Needs evaluation
linux-oracle-6.5 —
linux-oracle-6.8 —
linux-oracle-6.14 —
linux-oracle-6.17 —
linux-oracle-7.0 —
linux-oem —
linux-oem-5.6 Ignored
linux-oem-5.10 Ignored
linux-oem-5.13 Ignored
linux-oem-5.14 Ignored
linux-oem-5.17 —
linux-oem-6.0 —
linux-oem-6.1 —
linux-oem-6.5 —
linux-oem-6.8 —
linux-oem-6.11 —
linux-oem-6.14 —
linux-oem-6.17 —
linux-oem-7.0 —
linux-raspi Needs evaluation
linux-raspi2 Ignored
linux-raspi-5.4 —
linux-raspi-realtime —
linux-realtime —
linux-realtime-6.8 —
linux-realtime-6.14 —
linux-riscv Ignored
linux-riscv-5.8 Ignored
linux-riscv-5.11 Ignored
linux-riscv-5.15 Needs evaluation
linux-riscv-5.19 —
linux-riscv-6.5 —
linux-riscv-6.8 —
linux-riscv-6.14 —
linux-riscv-6.17 —
linux-riscv-7.0 —
linux-starfive-5.19 —
linux-starfive-6.2 —
linux-starfive-6.5 —
linux-vmware —
linux-xilinx —
linux-xilinx-zynqmp Needs evaluation
linux-realtime-6.17 —
Show all 169 packages Show less packages

CVE-2026-90591

Medium priority
Needs evaluation

The NXP ENET-QOS Ethernet driver's receive work handler eth_nxp_enet_qos_rx() in drivers/ethernet/eth_nxp_enet_qos hands each processed descriptor back to the DMA by writing desc->read.control = rx_desc_refresh_flags, which sets...

1 affected package

zephyr

Package 20.04 LTS
zephyr Needs evaluation
Show less packages

CVE-2026-90590

Medium priority
Needs evaluation

The NXP ENET QoS Ethernet driver in drivers/ethernet/eth_nxp_enet_qos serialises transmission with a binary semaphore, data->tx.tx_sem, taken in eth_nxp_enet_qos_tx() and returned only by the transmit-completion interrupt handler...

1 affected package

zephyr

Package 20.04 LTS
zephyr Needs evaluation
Show less packages

CVE-2026-90589

Medium priority
Needs evaluation

When CONFIG_THREAD_STACK_MEM_MAPPED is enabled, each thread stack is mapped into the kernel virtual address space with a guard page on either side, and the mapping is released during abort cleanup. k_thread_abort_cleanup()...

1 affected package

zephyr

Package 20.04 LTS
zephyr Needs evaluation
Show less packages

CVE-2026-90588

Medium priority
Needs evaluation

The HTTP client's debug helper print_header_field() in subsys/net/lib/http/http_client.c formatted an http_parser data-callback slice with a %s conversion: snprintk(output, len + 1, "%s", str). The parser hands its callbacks a...

1 affected package

zephyr

Package 20.04 LTS
zephyr Needs evaluation
Show less packages

CVE-2026-90587

Medium priority
Needs evaluation

usbh_device_init() in subsys/usb/host/usbh_device.c rejects a device whose device descriptor advertises bNumConfigurations == 0, but it only logs the error and jumps to the cleanup label without setting the return code. At that...

1 affected package

zephyr

Package 20.04 LTS
zephyr Needs evaluation
Show less packages

CVE-2026-90586

Medium priority
Needs evaluation

The Xtensa MMU userspace port never initialized the per-thread page-table pointer thread->arch.ptables during thread setup, while arch_mem_domain_thread_add() in arch/xtensa/core/ptables.c uses a non-NULL value of that field as...

1 affected package

zephyr

Package 20.04 LTS
zephyr Needs evaluation
Show less packages

CVE-2026-90585

Medium priority
Needs evaluation

The Renesas RA SCI UART driver's receive-error ISR, uart_ra_sci_eri_isr() in drivers/serial/uart_renesas_ra_sci.c, acknowledged the error condition only when a Zephyr interrupt-driven callback had already been registered. With...

1 affected package

zephyr

Package 20.04 LTS
zephyr Needs evaluation
Show less packages