Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-99288inet: reject unhashed sockets during established lookups
- CVE-2026-99287xen-netback: Zero out sring pointers on unmap
- CVE-2026-99286xen-netback: Fix XenBus connection failure cleanup
- CVE-2026-99285netfilter: nft_byteorder: remove multi-register support
- CVE-2026-99284net: skbuff: propagate shared-frag marker in skb_zerocopy()
- CVE-2026-99283netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
- CVE-2026-99282net/sched: sch_teql: fix use-after-free on lower qdisc drop
- CVE-2026-99281tun: Require CAP_NET_ADMIN to attach to an ownerless device
- CVE-2026-99280ksmbd: drain session procfs readers before dropping table references
- CVE-2026-99279ksmbd: reclaim ended sessions on logoff and expiration
- CVE-2026-99278ksmbd: limit sessions on each connection
- CVE-2026-99277ksmbd: hold a connection reference for each session channel
- CVE-2026-99276ksmbd: defer connection scavenging while session locks are busy
- CVE-2026-99275smb: client: reject short SESSION_SETUP responses
- CVE-2026-99274smb: client: fix fiemap wild read on empty truncated response
- CVE-2026-99273ksmbd: reserve space for the UTF-16 terminator in stream info
- CVE-2026-99272smb: client: validate the data area in SMB2_read()
- CVE-2026-99271ALSA: line6: Clear prev_fbuf on capture buffer release
- CVE-2026-100082xen-blkback: Avoid UAF when reading I/O statistics
- CVE-2026-100081xen-netback: defer xenvif_mcast_addr_list_free()
- CVE-2026-100080xen-netback: Fix UAF when reading statistics data
- CVE-2026-99270tcp: Fix potential UAF in reqsk_timer_handler().
- CVE-2026-99269sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQs
- CVE-2026-99261drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction
- CVE-2026-99260ntfs: fix resident conversion in ntfs_new_attr_flags
- CVE-2026-99259soc/tegra: pmc: Fix uninitialised clock rate
- CVE-2026-99258x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()
- CVE-2026-99257gpio: shared: gracefully handle no-device lookup of shared GPIOs
- CVE-2026-99256dm cache: fix issue with background work locking
- CVE-2026-99255io_uring/io-wq: don't hide a link from cancellations