Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2026-80806
    Fix available
    Packages

    , Kernel

    Summary

    ext4: don't enable DAX on new encrypted files

    Published
    4 Sept 2026
    CVE-2026-80805
    Fix available
    Packages

    , Kernel

    Summary

    xfs: validate attr entry pointer before field access

    Published
    4 Sept 2026
    CVE-2026-80804
    Fix available
    Packages

    , Kernel

    Summary

    xfs: restore nofs context unconditionally in xfs_trans_roll

    Published
    4 Sept 2026
    CVE-2026-80803
    Fix available
    Packages

    , Kernel

    Summary

    nfc: digital: clamp SENSF_RES length to the destination buffer

    Published
    4 Sept 2026
    CVE-2026-80802
    Fix available
    Packages

    , Kernel

    Summary

    nfc: fdp: bound the device-reported read length and fix an skb leak

    Published
    4 Sept 2026
    CGA-9wch-5pwm-r627
    No fix available
    Packages

    eco-java-gradle-8.12.1-default

    Summary

    Published
    4 Sept 2026
    CGA-ff4m-x3pv-f472
    No fix available
    Packages

    eco-java-gradle-8.12.1-default

    Summary

    Published
    4 Sept 2026
    CVE-2026-80801
    Fix available
    Packages

    , Kernel

    Summary

    nfc: microread: validate target discovery payload lengths

    Published
    4 Sept 2026
    CVE-2026-80800
    Fix available
    Packages

    , Kernel

    Summary

    nfc: llcp: bound the connect_sn TLV walk to the skb

    Published
    4 Sept 2026
    CVE-2026-80799
    Fix available
    Packages

    , Kernel

    Summary

    nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers

    Published
    4 Sept 2026
    CVE-2026-80798
    Fix available
    Packages

    , Kernel

    Summary

    nfc: llcp: reject PDUs shorter than the LLCP header

    Published
    4 Sept 2026
    CVE-2026-80797
    Fix available
    Packages

    , Kernel

    Summary

    nfc: pn533: purge fragmented skbs during cleanup

    Published
    4 Sept 2026
    CVE-2026-80796
    Fix available
    Packages

    , Kernel

    Summary

    nfc: nci: add data_len bound checks to activation parameter extractors

    Published
    4 Sept 2026
    CVE-2026-80795
    Fix available
    Packages

    , Kernel

    Summary

    nfc: nci: fix out-of-bounds write in nci_target_auto_activated()

    Published
    4 Sept 2026
    CVE-2026-80794
    Fix available
    Packages

    , Kernel

    Summary

    nfc: nci: fix uninit-value in the RF discover/activated NTF handlers

    Published
    4 Sept 2026
    CVE-2026-80793
    Fix available
    Packages

    , Kernel

    Summary

    ipv4: reject undersized MTUs in ip_do_fragment()

    Published
    4 Sept 2026
    CVE-2026-80792
    Fix available
    Packages

    , Kernel

    Summary

    ipv6: fix use-after-free in ip6_finish_output2()

    Published
    4 Sept 2026
    CVE-2026-80791
    Fix available
    Packages

    , Kernel

    Summary

    nvmet-auth: zero the AUTH_RECEIVE response buffer

    Published
    4 Sept 2026
    CVE-2026-80790
    Fix available
    Packages

    , Kernel

    Summary

    nvmet-fc: fix invalid free in LS IOD error path

    Published
    4 Sept 2026
    CVE-2026-80789
    Fix available
    Packages

    , Kernel

    Summary

    nvmet-tcp: bound SGL data length before allocating command buffers

    Published
    4 Sept 2026
    CVE-2026-80788
    Fix available
    Packages

    , Kernel

    Summary

    nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations

    Published
    4 Sept 2026
    CVE-2026-80787
    Fix available
    Packages

    , Kernel

    Summary

    nvmet: pci-epf: fix use-after-free in nvmet_pci_epf_exec_iod_work()

    Published
    4 Sept 2026
    CVE-2026-80786
    Fix available
    Packages

    , Kernel

    Summary

    fbdev: Wrap user-invoked calls to fb_set_var() in helper

    Published
    4 Sept 2026
    CVE-2026-80785
    Fix available
    Packages

    , Kernel

    Summary

    fbdev: serialize mode sysfs access with lock_fb_info()

    Published
    4 Sept 2026
    CVE-2026-80784
    Fix available
    Packages

    , Kernel

    Summary

    mptcp: pm: fix memory leak from alloc-during-teardown race

    Published
    4 Sept 2026
    CVE-2026-80783
    Fix available
    Packages

    , Kernel

    Summary

    HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()

    Published
    4 Sept 2026
    CVE-2026-80782
    Fix available
    Packages

    , Kernel

    Summary

    HID: magicmouse: do not keep a stale msc->input if no input is claimed

    Published
    4 Sept 2026
    CVE-2026-80781
    Fix available
    Packages

    , Kernel

    Summary

    HID: core: fix OOB read of field->usage in hid_set_field()

    Published
    4 Sept 2026
    CVE-2026-80780
    Fix available
    Packages

    , Kernel

    Summary

    HID: pidff: fix OOB write when hid->inputs is empty

    Published
    4 Sept 2026
    CVE-2026-80779
    Fix available
    Packages

    , Kernel

    Summary

    net/ionic: avoid OOB TX partner lookup for hwstamp RXQ

    Published
    4 Sept 2026
    CVE-2026-80778
    Fix available
    Packages

    , Kernel

    Summary

    futex/pi: Reject cross-mm private futex owners

    Published
    4 Sept 2026
    CVE-2026-80777
    Fix available
    Packages

    , Kernel

    Summary

    futex/pi: Plug private futex exec() race

    Published
    4 Sept 2026
    CVE-2026-80776
    Fix available
    Packages

    , Kernel

    Summary

    futex: Fix race in futex_pivot_pending() during private hash resize

    Published
    4 Sept 2026
    CVE-2026-80775
    Fix available
    Packages

    , Kernel

    Summary

    futex: Fix race on the initial mm->futex.phash.ref allocation

    Published
    4 Sept 2026
    CVE-2026-80774
    Fix available
    Packages

    , Kernel

    Summary

    HID: asus: fix missing hid_is_usb() check

    Published
    4 Sept 2026
    CVE-2026-80773
    Fix available
    Packages

    , Kernel

    Summary

    HID: huawei: fix missing hid_is_usb() check

    Published
    4 Sept 2026
    CVE-2026-80772
    Fix available
    Packages

    , Kernel

    Summary

    HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()

    Published
    4 Sept 2026
    CVE-2026-80771
    Fix available
    Packages

    , Kernel

    Summary

    HID: nintendo: register input device after capabilities are set

    Published
    4 Sept 2026
    CVE-2026-80770
    Fix available
    Packages

    , Kernel

    Summary

    HID: nintendo: stop device IO before hid_hw_stop on probe failure

    Published
    4 Sept 2026
    CVE-2026-80769
    Fix available
    Packages

    , Kernel

    Summary

    HID: rapoo: fix missing hid_is_usb() check

    Published
    4 Sept 2026
    CVE-2026-80768
    Fix available
    Packages

    , Kernel

    Summary

    HID: ft260: fix stack-use-after-return write in I2C read race

    Published
    4 Sept 2026
    CVE-2026-80767
    Fix available
    Packages

    , Kernel

    Summary

    HID: sensor: custom: Fix use-after-free in enable_sensor

    Published
    4 Sept 2026
    CVE-2026-80766
    Fix available
    Packages

    , Kernel

    Summary

    HID: uclogic: fix use-after-free of inrange_timer on remove

    Published
    4 Sept 2026
    CVE-2026-80765
    Fix available
    Packages

    , Kernel

    Summary

    HID: hyperv: validate initial device info bounds

    Published
    4 Sept 2026
    CVE-2026-80764
    Fix available
    Packages

    , Kernel

    Summary

    Bluetooth: hci_event: fix LE list UAF on reset

    Published
    4 Sept 2026
    CVE-2026-80763
    Fix available
    Packages

    , Kernel

    Summary

    Bluetooth: hci_event: validate LE Set CIG Parameters response

    Published
    4 Sept 2026
    CVE-2026-80762
    Fix available
    Packages

    , Kernel

    Summary

    Bluetooth: hci_sync: Fix accept list UAF during suspend

    Published
    4 Sept 2026
    CVE-2026-80761
    Fix available
    Packages

    , Kernel

    Summary

    Bluetooth: ISO: zero the sockaddr before returning it in getname

    Published
    4 Sept 2026
    CVE-2026-80760
    Fix available
    Packages

    , Kernel

    Summary

    Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255

    Published
    4 Sept 2026
    CVE-2026-80759
    Fix available
    Packages

    , Kernel

    Summary

    Bluetooth: hci_aml: validate firmware segment lengths

    Published
    4 Sept 2026