# cve.now: Linux

The newest entries naming Linux as an affected vendor (up to 200), of 18,386 in all, 14 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-99288](https://cve.now/CVE-2026-99288.md): inet: reject unhashed sockets during established lookups (no CVSS)
- [CVE-2026-99287](https://cve.now/CVE-2026-99287.md): xen-netback: Zero out sring pointers on unmap (no CVSS)
- [CVE-2026-99286](https://cve.now/CVE-2026-99286.md): xen-netback: Fix XenBus connection failure cleanup (no CVSS)
- [CVE-2026-99285](https://cve.now/CVE-2026-99285.md): netfilter: nft\_byteorder: remove multi-register support (no CVSS)
- [CVE-2026-99284](https://cve.now/CVE-2026-99284.md): net: skbuff: propagate shared-frag marker in skb\_zerocopy() (no CVSS)
- [CVE-2026-99283](https://cve.now/CVE-2026-99283.md): netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets (no CVSS)
- [CVE-2026-99282](https://cve.now/CVE-2026-99282.md): net/sched: sch\_teql: fix use-after-free on lower qdisc drop (no CVSS)
- [CVE-2026-99281](https://cve.now/CVE-2026-99281.md): tun: Require CAP\_NET\_ADMIN to attach to an ownerless device (CVSS 7.8)
- [CVE-2026-99280](https://cve.now/CVE-2026-99280.md): ksmbd: drain session procfs readers before dropping table references (no CVSS)
- [CVE-2026-99279](https://cve.now/CVE-2026-99279.md): ksmbd: reclaim ended sessions on logoff and expiration (no CVSS)
- [CVE-2026-99278](https://cve.now/CVE-2026-99278.md): ksmbd: limit sessions on each connection (no CVSS)
- [CVE-2026-99277](https://cve.now/CVE-2026-99277.md): ksmbd: hold a connection reference for each session channel (CVSS 7.5)
- [CVE-2026-99276](https://cve.now/CVE-2026-99276.md): ksmbd: defer connection scavenging while session locks are busy (no CVSS)
- [CVE-2026-99275](https://cve.now/CVE-2026-99275.md): smb: client: reject short SESSION\_SETUP responses (no CVSS)
- [CVE-2026-99274](https://cve.now/CVE-2026-99274.md): smb: client: fix fiemap wild read on empty truncated response (no CVSS)
- [CVE-2026-99273](https://cve.now/CVE-2026-99273.md): ksmbd: reserve space for the UTF-16 terminator in stream info (no CVSS)
- [CVE-2026-99272](https://cve.now/CVE-2026-99272.md): smb: client: validate the data area in SMB2\_read() (no CVSS)
- [CVE-2026-99271](https://cve.now/CVE-2026-99271.md): ALSA: line6: Clear prev\_fbuf on capture buffer release (no CVSS)
- [CVE-2026-100082](https://cve.now/CVE-2026-100082.md): xen-blkback: Avoid UAF when reading I/O statistics (no CVSS)
- [CVE-2026-100081](https://cve.now/CVE-2026-100081.md): xen-netback: defer xenvif\_mcast\_addr\_list\_free() (CVSS 7.8)
- [CVE-2026-100080](https://cve.now/CVE-2026-100080.md): xen-netback: Fix UAF when reading statistics data (no CVSS)
- [CVE-2026-99270](https://cve.now/CVE-2026-99270.md): tcp: Fix potential UAF in reqsk\_timer\_handler(). (CVSS 8.1)
- [CVE-2026-99269](https://cve.now/CVE-2026-99269.md): sched\_ext: Wait for SCX\_OPSS\_DISPATCHING before moving tasks off DSQs (CVSS 7.8)
- [CVE-2026-99261](https://cve.now/CVE-2026-99261.md): drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction (no CVSS)
- [CVE-2026-99260](https://cve.now/CVE-2026-99260.md): ntfs: fix resident conversion in ntfs\_new\_attr\_flags (no CVSS)
- [CVE-2026-99259](https://cve.now/CVE-2026-99259.md): soc/tegra: pmc: Fix uninitialised clock rate (no CVSS)
- [CVE-2026-99258](https://cve.now/CVE-2026-99258.md): x86/hyperv: Avoid using per-cpu output page in hv\_apicid\_to\_vp\_index() (no CVSS)
- [CVE-2026-99257](https://cve.now/CVE-2026-99257.md): gpio: shared: gracefully handle no-device lookup of shared GPIOs (no CVSS)
- [CVE-2026-99256](https://cve.now/CVE-2026-99256.md): dm cache: fix issue with background work locking (no CVSS)
- [CVE-2026-99255](https://cve.now/CVE-2026-99255.md): io\_uring/io-wq: don't hide a link from cancellations (no CVSS)
- [CVE-2026-99254](https://cve.now/CVE-2026-99254.md): io\_uring: don't flood a cancelling task with task\_work (no CVSS)
- [CVE-2026-99253](https://cve.now/CVE-2026-99253.md): io\_uring/cancel: rearm local work wake up before sleep (no CVSS)
- [CVE-2026-99251](https://cve.now/CVE-2026-99251.md): Drivers: hv: Avoid infinite retry loop in init\_vp\_index() (no CVSS)
- [CVE-2026-99250](https://cve.now/CVE-2026-99250.md): printk: Postpone kthread startup (no CVSS)
- [CVE-2026-99249](https://cve.now/CVE-2026-99249.md): pid\_namespace: make zap\_pid\_ns\_processes() freezable (no CVSS)
- [CVE-2026-99248](https://cve.now/CVE-2026-99248.md): i2c: xiic: restore non-managed runtime PM to fix clk WARN flood (no CVSS)
- [CVE-2026-99247](https://cve.now/CVE-2026-99247.md): tracing: Do not initialize tracefs work if tracing is disabled (no CVSS)
- [CVE-2026-99246](https://cve.now/CVE-2026-99246.md): tipc: protect node reset trace dump with node lock (CVSS 8.1)
- [CVE-2026-99245](https://cve.now/CVE-2026-99245.md): KEYS: Fix key\_reject\_and\_link() race with keyring restriction (no CVSS)
- [CVE-2026-99244](https://cve.now/CVE-2026-99244.md): pid\_namespace: prevent TIF\_NOTIFY\_SIGNAL from interrupting the reaper (no CVSS)
- [CVE-2026-99242](https://cve.now/CVE-2026-99242.md): ntfs: fix race between fallocate and mmap reads (no CVSS)
- [CVE-2026-99241](https://cve.now/CVE-2026-99241.md): ntfs: take invalidate\_lock in ntfs\_filemap\_page\_mkwrite() (no CVSS)
- [CVE-2026-99240](https://cve.now/CVE-2026-99240.md): mm/damon/core: error damos\_commit\_quota\_goal() for zero target\_value (no CVSS)
- [CVE-2026-99239](https://cve.now/CVE-2026-99239.md): Bluetooth: L2CAP: refuse \_\_l2cap\_chan\_add if chan already has conn (CVSS 7.8)
- [CVE-2026-99238](https://cve.now/CVE-2026-99238.md): tracing: Hold trace\_types\_lock when updating modules in persistent instances (CVSS 7.8)
- [CVE-2026-99237](https://cve.now/CVE-2026-99237.md): tracing: Hold trace\_types\_lock when resetting last boot data from readers (CVSS 7.8)
- [CVE-2026-99236](https://cve.now/CVE-2026-99236.md): tracing: Reject incomplete event filter expressions (CVSS 7.8)
- [CVE-2026-99235](https://cve.now/CVE-2026-99235.md): tracing: Save the event file instead of the compatible histogram (CVSS 7.8)
- [CVE-2026-99234](https://cve.now/CVE-2026-99234.md): tracing: Unregister field variable histograms when the command fails (no CVSS)
- [CVE-2026-99233](https://cve.now/CVE-2026-99233.md): tracing/histograms: Verify event\_call identity when updating synth\_event refcount (CVSS 7.8)
- [CVE-2026-99232](https://cve.now/CVE-2026-99232.md): tracing/syscalls: Use copy\_from\_user for the faultable syscall buffer (no CVSS)
- [CVE-2026-99231](https://cve.now/CVE-2026-99231.md): io\_uring/waitid: own the request before clearing -\>head (CVSS 7.8)
- [CVE-2026-99230](https://cve.now/CVE-2026-99230.md): io\_uring/cmd: don't leave list poison in -\>hash\_node (no CVSS)
- [CVE-2026-99229](https://cve.now/CVE-2026-99229.md): io\_uring/wait: don't spin on a stuck overflow list (no CVSS)
- [CVE-2026-99228](https://cve.now/CVE-2026-99228.md): io\_uring/io-wq: don't lose the signal that ends work (no CVSS)
- [CVE-2026-99227](https://cve.now/CVE-2026-99227.md): io\_uring/waitid: prevent cancel reference wrap (CVSS 7.8)
- [CVE-2026-99226](https://cve.now/CVE-2026-99226.md): keys: Avoid the owner account dereference in named keyring lookup (no CVSS)
- [CVE-2026-99225](https://cve.now/CVE-2026-99225.md): keys: Check the authorization payload in process keyring searches (no CVSS)
- [CVE-2026-99224](https://cve.now/CVE-2026-99224.md): keys: Protect the type name while describing a key (CVSS 7.0)
- [CVE-2026-99223](https://cve.now/CVE-2026-99223.md): keys: make keyring indexes independent of kernel addresses (no CVSS)
- [CVE-2026-99222](https://cve.now/CVE-2026-99222.md): keys: Protect the read method check against type removal (no CVSS)
- [CVE-2026-99221](https://cve.now/CVE-2026-99221.md): keys/trusted\_keys: return immediately after TPM unseal failure (no CVSS)
- [CVE-2026-99220](https://cve.now/CVE-2026-99220.md): asymmetric\_keys: reject trust keys without IDs (no CVSS)
- [CVE-2026-99219](https://cve.now/CVE-2026-99219.md): ftrace: Initialize modname and offset in print\_rec() (no CVSS)
- [CVE-2026-99218](https://cve.now/CVE-2026-99218.md): coredump: hold RCU while releasing parked threads (CVSS 7.0)
- [CVE-2026-99216](https://cve.now/CVE-2026-99216.md): Drivers: hv: Don't reset VMBus connection state on error/exit paths (CVSS 8.4)
- [CVE-2026-99215](https://cve.now/CVE-2026-99215.md): power: supply: core: prevent unregistering a power supply while a callback runs (no CVSS)
- [CVE-2026-99214](https://cve.now/CVE-2026-99214.md): drm/vc4: hdmi: Move packet RAM enable to PM runtime (no CVSS)
- [CVE-2026-99213](https://cve.now/CVE-2026-99213.md): vsock: treat TCP\_CLOSING as once-established (CVSS 7.8)
- [CVE-2026-99212](https://cve.now/CVE-2026-99212.md): net/rds: don't let the rdma\_cm destroy an id RDS still owns on route failure (CVSS 7.0)
- [CVE-2026-99211](https://cve.now/CVE-2026-99211.md): netlink: reset skb headers before unicast and multicast filtering (no CVSS)
- [CVE-2026-99210](https://cve.now/CVE-2026-99210.md): accel/rocket: clear rdev on device init failure (no CVSS)
- [CVE-2026-99209](https://cve.now/CVE-2026-99209.md): drm/xe: skip eviction of a BO with no resource (no CVSS)
- [CVE-2026-99208](https://cve.now/CVE-2026-99208.md): drm/xe/oa: Zero OA buffer at allocation (no CVSS)
- [CVE-2026-99207](https://cve.now/CVE-2026-99207.md): scsi: target: Disable interrupts while holding delayed\_cmd\_lock (no CVSS)
- [CVE-2026-99206](https://cve.now/CVE-2026-99206.md): scsi: target: iscsi: Fix race in discovery auth updates (no CVSS)
- [CVE-2026-99205](https://cve.now/CVE-2026-99205.md): sched/core: Call wakeup\_preempt() for queued tasks during class change (no CVSS)
- [CVE-2026-99204](https://cve.now/CVE-2026-99204.md): ocfs2/dlm: Protect the recovery list during debugfs reads (no CVSS)
- [CVE-2026-99203](https://cve.now/CVE-2026-99203.md): pipe: preserve existing fasync readers on writer setup failure (CVSS 7.8)
- [CVE-2026-99202](https://cve.now/CVE-2026-99202.md): scsi: libsas: Fix SMP IO deadlock during HA resume (no CVSS)
- [CVE-2026-99201](https://cve.now/CVE-2026-99201.md): netlink: avoid hashing the network namespace pointer (no CVSS)
- [CVE-2026-99200](https://cve.now/CVE-2026-99200.md): net: hisilicon: hisi\_femac: Move setting of netops to fix crash (no CVSS)
- [CVE-2026-99199](https://cve.now/CVE-2026-99199.md): net: hisilicon: hip04\_eth: Move setting of netops to fix crash (no CVSS)
- [CVE-2026-99198](https://cve.now/CVE-2026-99198.md): net: ethernet: actions: Move setting of netops to fix crash (no CVSS)
- [CVE-2026-99197](https://cve.now/CVE-2026-99197.md): net: mv643xx: move setting of netops to fix crash (no CVSS)
- [CVE-2026-99196](https://cve.now/CVE-2026-99196.md): net: au1000: move setting of netops to fix crash (no CVSS)
- [CVE-2026-99195](https://cve.now/CVE-2026-99195.md): net: ethoc: move setting of netops to fix crash (no CVSS)
- [CVE-2026-99194](https://cve.now/CVE-2026-99194.md): net: ethernet: aeroflex: move setting of netops to fix crash (no CVSS)
- [CVE-2026-99193](https://cve.now/CVE-2026-99193.md): net: ti: icssm-prueth: Move setting of netops to fix crash (no CVSS)
- [CVE-2026-99192](https://cve.now/CVE-2026-99192.md): net: bcmgenet: unshare the skb before writing the control block (no CVSS)
- [CVE-2026-99191](https://cve.now/CVE-2026-99191.md): calipso: keep BIG TCP payload\_len in calipso\_skbuff\_setattr() (no CVSS)
- [CVE-2026-99190](https://cve.now/CVE-2026-99190.md): gpiolib: fix memory leak in gpiod\_set\_array\_value\_complex() on error paths (no CVSS)
- [CVE-2026-99189](https://cve.now/CVE-2026-99189.md): gpio: mxc: fix race between chained IRQ handler install and probe completion (no CVSS)
- [CVE-2026-99188](https://cve.now/CVE-2026-99188.md): net: stmmac: dwmac1000: clear the RGMII status interrupt (no CVSS)
- [CVE-2026-99187](https://cve.now/CVE-2026-99187.md): perf: Fix perf\_pmu\_migrate\_context() leaving events behind (no CVSS)
- [CVE-2026-99186](https://cve.now/CVE-2026-99186.md): x86/insn-eval: Fix shadowed segment index in get\_seg\_reg\_override\_idx() (no CVSS)
- [CVE-2026-99185](https://cve.now/CVE-2026-99185.md): firewire: core: fix race condition in split transaction handling (CVSS 8.8)
- [CVE-2026-99184](https://cve.now/CVE-2026-99184.md): accel/rocket: search every core slot when a core is removed (no CVSS)
- [CVE-2026-99183](https://cve.now/CVE-2026-99183.md): accel/rocket: search every core slot when looking up a scheduler (no CVSS)
- [CVE-2026-99182](https://cve.now/CVE-2026-99182.md): ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture (no CVSS)
- [CVE-2026-99181](https://cve.now/CVE-2026-99181.md): autofs: ignore notification errors from a replaced pipe (no CVSS)
- [CVE-2026-99180](https://cve.now/CVE-2026-99180.md): unicode: free the map after a grace period (CVSS 7.8)
- [CVE-2026-99179](https://cve.now/CVE-2026-99179.md): watch\_queue: Fix note pool publication race in watch\_queue\_set\_size() (no CVSS)
- [CVE-2026-99178](https://cve.now/CVE-2026-99178.md): x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context (no CVSS)
- [CVE-2026-99177](https://cve.now/CVE-2026-99177.md): KVM: SEV: Fix page dirtying in sev\_gmem\_post\_populate() (CVSS 7.8)
- [CVE-2026-99176](https://cve.now/CVE-2026-99176.md): KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry (no CVSS)
- [CVE-2026-99175](https://cve.now/CVE-2026-99175.md): fsnotify: prevent mark additions during connector teardown (no CVSS)
- [CVE-2026-99174](https://cve.now/CVE-2026-99174.md): ext4: free the sbi after a grace period (no CVSS)
- [CVE-2026-99173](https://cve.now/CVE-2026-99173.md): eventfs: Free the eventfs\_inode after an rcu grace period too (CVSS 7.8)
- [CVE-2026-99172](https://cve.now/CVE-2026-99172.md): ipc: drop the mqueue mount with kern\_unmount() on setup failure (no CVSS)
- [CVE-2026-99171](https://cve.now/CVE-2026-99171.md): ntfs3: free the sbi after a grace period (no CVSS)
- [CVE-2026-99170](https://cve.now/CVE-2026-99170.md): namespace: a mount that copy\_tree() leaves out can't take over a lock (CVSS 8.8)
- [CVE-2026-99169](https://cve.now/CVE-2026-99169.md): futex: Fix mm reuse handling for FUT\_OFF\_MMSHARED (no CVSS)
- [CVE-2026-99168](https://cve.now/CVE-2026-99168.md): mshv\_vtl: Check per-CPU register page before mmap (no CVSS)
- [CVE-2026-99167](https://cve.now/CVE-2026-99167.md): net/sched: fix use-after-free in \_\_tcf\_action\_put() (CVSS 7.8)
- [CVE-2026-99166](https://cve.now/CVE-2026-99166.md): net: rds: fix uninitialized trans dereference in CM event handler (no CVSS)
- [CVE-2026-99165](https://cve.now/CVE-2026-99165.md): sctp: revalidate output stream after association connect wait (no CVSS)
- [CVE-2026-99164](https://cve.now/CVE-2026-99164.md): spi: imx: fix slab corruption from undersized DMA bounce buffers (CVSS 7.8)
- [CVE-2026-99163](https://cve.now/CVE-2026-99163.md): tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields (CVSS 7.8)
- [CVE-2026-99162](https://cve.now/CVE-2026-99162.md): gpio: shared: fix use-after-free bug when adding shared proxies (no CVSS)
- [CVE-2026-99161](https://cve.now/CVE-2026-99161.md): i2c: viai2c-wmt: Fix clock leak in wmt\_i2c\_probe() (no CVSS)
- [CVE-2026-99160](https://cve.now/CVE-2026-99160.md): ring-buffer: Do not show buffer\_meta for CPUs without a buffer (no CVSS)
- [CVE-2026-99159](https://cve.now/CVE-2026-99159.md): ring-buffer: Fix the sub-buffer array base in rb\_meta\_subbuf\_idx() (no CVSS)
- [CVE-2026-99158](https://cve.now/CVE-2026-99158.md): ring-buffer: Fix false warning in ring\_buffer\_map\_get\_reader() (no CVSS)
- [CVE-2026-99157](https://cve.now/CVE-2026-99157.md): scsi: bsg: Pass reply\_len to bsg\_setup\_queue() to fit UFS ARPMB replies (no CVSS)
- [CVE-2026-99156](https://cve.now/CVE-2026-99156.md): scsi: st: Fix use-after-free race between st\_remove() and st\_open() (CVSS 7.8)
- [CVE-2026-99155](https://cve.now/CVE-2026-99155.md): scsi: xen/scsifront: Check for a NULL shadow entry on a backend response (no CVSS)
- [CVE-2026-99154](https://cve.now/CVE-2026-99154.md): scsi: libiscsi: Reject a negative task index from parse\_pdu\_itt (CVSS 9.8)
- [CVE-2026-99153](https://cve.now/CVE-2026-99153.md): scsi: libiscsi: Validate the ITT reflected in a Reject PDU (CVSS 9.8)
- [CVE-2026-99152](https://cve.now/CVE-2026-99152.md): scsi: libiscsi: Validate the task named by a management response (CVSS 7.5)
- [CVE-2026-99151](https://cve.now/CVE-2026-99151.md): drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions (no CVSS)
- [CVE-2026-99150](https://cve.now/CVE-2026-99150.md): drm/amdgpu: don't drop the runtime PM reference twice in amdgpu\_gpr (no CVSS)
- [CVE-2026-99149](https://cve.now/CVE-2026-99149.md): drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl (no CVSS)
- [CVE-2026-99148](https://cve.now/CVE-2026-99148.md): drm/amdgpu: keep the eviction fence until the last handle is closed (CVSS 7.0)
- [CVE-2026-99147](https://cve.now/CVE-2026-99147.md): drm/exec: don't immediately add prelocked obj to array of locked objs (no CVSS)
- [CVE-2026-99146](https://cve.now/CVE-2026-99146.md): drm/i915/dmc: Add sanity check for DMC load address (no CVSS)
- [CVE-2026-99145](https://cve.now/CVE-2026-99145.md): drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state change (no CVSS)
- [CVE-2026-99144](https://cve.now/CVE-2026-99144.md): sched\_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue (no CVSS)
- [CVE-2026-99143](https://cve.now/CVE-2026-99143.md): tracing: Keep the predicate limit separate from program capacity (CVSS 7.8)
- [CVE-2026-99142](https://cve.now/CVE-2026-99142.md): tracing: Check operator stack capacity before pushing (CVSS 7.1)
- [CVE-2026-99141](https://cve.now/CVE-2026-99141.md): tracing: Fix crash in print\_graph\_function\_event() (no CVSS)
- [CVE-2026-99140](https://cve.now/CVE-2026-99140.md): tracing: Fix hist trigger timestamps for buffered events (no CVSS)
- [CVE-2026-99139](https://cve.now/CVE-2026-99139.md): tcp: fix use-after-free in do\_tcp\_getsockopt(TCP\_CONGESTION) (no CVSS)
- [CVE-2026-99138](https://cve.now/CVE-2026-99138.md): tcp: fix use-after-free in do\_tcp\_getsockopt(TCP\_CC\_INFO) (no CVSS)
- [CVE-2026-99137](https://cve.now/CVE-2026-99137.md): cifs: don't update i\_size in cifs\_do\_truncate without a cached handle (no CVSS)
- [CVE-2026-99136](https://cve.now/CVE-2026-99136.md): dm-crypt: fix a tiny race condition in crypt\_dec\_pending (CVSS 7.0)
- [CVE-2026-99135](https://cve.now/CVE-2026-99135.md): dm-integrity: fix infinite loop on discard with large tag size (no CVSS)
- [CVE-2026-99134](https://cve.now/CVE-2026-99134.md): mac802154: fix data race and NULL deref on local-\>assoc\_dev (no CVSS)
- [CVE-2026-99133](https://cve.now/CVE-2026-99133.md): net/iucv: fix the recvmsg window update (no CVSS)
- [CVE-2026-99132](https://cve.now/CVE-2026-99132.md): xfs: don't hold buffer locks across sync transaction commit in xfs\_sync\_sb\_buf (no CVSS)
- [CVE-2026-99131](https://cve.now/CVE-2026-99131.md): xfs: fix capability check in xfs (CVSS 8.2)
- [CVE-2026-99130](https://cve.now/CVE-2026-99130.md): io\_uring/cancel: don't spin on local work the task can't run (no CVSS)
- [CVE-2026-99129](https://cve.now/CVE-2026-99129.md): selinux: fix BPF token permission checks (no CVSS)
- [CVE-2026-99128](https://cve.now/CVE-2026-99128.md): sctp: validate chunk length in the inqueue parser (no CVSS)
- [CVE-2026-99127](https://cve.now/CVE-2026-99127.md): page\_pool: keep frag\_offset aligned for odd-sized requests (no CVSS)
- [CVE-2026-99126](https://cve.now/CVE-2026-99126.md): s390/ctcm: Prevent XID null dereference (no CVSS)
- [CVE-2026-99125](https://cve.now/CVE-2026-99125.md): s390/pai: Handle multiple PMU stop callback invocations (no CVSS)
- [CVE-2026-99124](https://cve.now/CVE-2026-99124.md): s390/pci: Fix leak of uninitialized kernel data in SCLP report (no CVSS)
- [CVE-2026-99123](https://cve.now/CVE-2026-99123.md): vsock/virtio: validate packet source for connected sockets (CVSS 7.1)
- [CVE-2026-99122](https://cve.now/CVE-2026-99122.md): vsock/vmci: validate packet source for connected sockets (CVSS 7.3)
- [CVE-2026-99121](https://cve.now/CVE-2026-99121.md): ipv4: avoid divide by zero in fib\_rebalance (no CVSS)
- [CVE-2026-99120](https://cve.now/CVE-2026-99120.md): KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes (no CVSS)
- [CVE-2026-99119](https://cve.now/CVE-2026-99119.md): drm/amdgpu/userq: actually validate userq BOs (no CVSS)
- [CVE-2026-99118](https://cve.now/CVE-2026-99118.md): drm/i915/dmc: Harden DMC firmware payload parsing (no CVSS)
- [CVE-2026-99117](https://cve.now/CVE-2026-99117.md): net: bridge: mcast: don't truncate the port group walk on teardown (CVSS 7.8)
- [CVE-2026-99116](https://cve.now/CVE-2026-99116.md): net: psp: do not inherit the Rx association on clone (CVSS 7.8)
- [CVE-2026-99115](https://cve.now/CVE-2026-99115.md): ksmbd: fill in FileSysIdentifier in FS\_POSIX\_INFORMATION (no CVSS)
- [CVE-2026-99114](https://cve.now/CVE-2026-99114.md): ksmbd: initialize FileSystemControlFlags in FS\_CONTROL\_INFORMATION (no CVSS)
- [CVE-2026-99113](https://cve.now/CVE-2026-99113.md): ksmbd: zero the FS\_OBJECT\_ID\_INFORMATION buffer before filling it in (no CVSS)
- [CVE-2026-99112](https://cve.now/CVE-2026-99112.md): net/sched: cls\_flower: validate mask pointer after nla\_next() (CVSS 7.1)
- [CVE-2026-99111](https://cve.now/CVE-2026-99111.md): smb: client: fix data corruption with concurrent writes and O\_TRUNC (no CVSS)
- [CVE-2026-99110](https://cve.now/CVE-2026-99110.md): smb: client: fix heap overflow in cifs\_do\_set\_acl() (CVSS 7.0)
- [CVE-2026-99109](https://cve.now/CVE-2026-99109.md): smb: client: reject SetEA requests that do not fit the request buffer (CVSS 7.8)
- [CVE-2026-99108](https://cve.now/CVE-2026-99108.md): ntfs: fix FITRIM range alignment (no CVSS)
- [CVE-2026-99107](https://cve.now/CVE-2026-99107.md): ntfs: fix incorrect MFT record pointer passed to ntfs\_attr\_record\_resize (CVSS 7.8)
- [CVE-2026-99106](https://cve.now/CVE-2026-99106.md): drm/amdgpu: free the userptr ranges when a CS fails after parser\_bos (no CVSS)
- [CVE-2026-99105](https://cve.now/CVE-2026-99105.md): sched\_ext: Fix stall when a task enqueued with SCX\_ENQ\_LAST lands back on its CPU's local DSQ (no CVSS)
- [CVE-2026-99104](https://cve.now/CVE-2026-99104.md): sched\_ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor (no CVSS)
- [CVE-2026-99103](https://cve.now/CVE-2026-99103.md): workqueue: Fix unbound pool lifetime for pending pwqs (no CVSS)
- [CVE-2026-99102](https://cve.now/CVE-2026-99102.md): ntfs: take invalidate\_lock in ntfs\_setattr\_size() (no CVSS)
- [CVE-2026-99101](https://cve.now/CVE-2026-99101.md): ntfs: move attribute payload before shrinking its record (no CVSS)
- [CVE-2026-99100](https://cve.now/CVE-2026-99100.md): wifi: p54: validate firmware record lengths (no CVSS)
- [CVE-2026-99099](https://cve.now/CVE-2026-99099.md): x86/CPU/AMD: Fix AMD TLBI Erratum #1718 (CVSS 7.8)
- [CVE-2026-99098](https://cve.now/CVE-2026-99098.md): dm-integrity: fix buffer overflow in inline mode with large tag size (no CVSS)
- [CVE-2026-99097](https://cve.now/CVE-2026-99097.md): tee: shm: reject zero-sized allocations in tee\_dyn\_shm\_alloc\_helper() (no CVSS)
- [CVE-2026-99096](https://cve.now/CVE-2026-99096.md): io\_uring/register: don't exempt disabled rings from task restrictions (no CVSS)
- [CVE-2026-99095](https://cve.now/CVE-2026-99095.md): drm/vc4: drain the hangcheck timer and works on V3D unbind (no CVSS)
- [CVE-2026-99094](https://cve.now/CVE-2026-99094.md): Bluetooth: btintel\_pcie: fix TX descriptor bounds check (CVSS 7.5)
- [CVE-2026-99093](https://cve.now/CVE-2026-99093.md): mm: don't schedule deferred kernel page table freeing while booting (no CVSS)
- [CVE-2026-99092](https://cve.now/CVE-2026-99092.md): riscv: patch: fix handling of bpf-jit execmem addresses (no CVSS)
- [CVE-2026-99091](https://cve.now/CVE-2026-99091.md): Bluetooth: MGMT: Fix status of pending commands flushed on power off (no CVSS)
- [CVE-2026-99090](https://cve.now/CVE-2026-99090.md): drm/amdgpu: serialize vblank counter reads against GPU reset (no CVSS)
- [CVE-2026-99089](https://cve.now/CVE-2026-99089.md): ASoC: samsung: i2s: enable op\_clk in probe to balance runtime PM (no CVSS)
- [CVE-2026-99088](https://cve.now/CVE-2026-99088.md): net: openvswitch: validate transport header presence in set\_ipv6\_addr (no CVSS)
- [CVE-2026-99087](https://cve.now/CVE-2026-99087.md): dm-integrity: fix NULL pointer dereference when the 'R' flag is used (no CVSS)
- [CVE-2026-99086](https://cve.now/CVE-2026-99086.md): dm-integrity: validate the superblock on resume (no CVSS)
- [CVE-2026-99085](https://cve.now/CVE-2026-99085.md): sched\_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler (no CVSS)
- [CVE-2026-99084](https://cve.now/CVE-2026-99084.md): readdir: take no inode lock on an immutable directory (no CVSS)
- [CVE-2026-99083](https://cve.now/CVE-2026-99083.md): ksmbd: fix heap out-of-bounds write in krb5\_authenticate() (CVSS 8.8)
- [CVE-2026-99082](https://cve.now/CVE-2026-99082.md): KVM: x86: Use active memslots for the per-vCPU MMIO cache (CVSS 8.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/linux
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.