Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-99011Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata()
- CVE-2026-99010Bluetooth: RFCOMM: free the skb when the DLC has no owner
- CVE-2026-99009Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex
- CVE-2026-99008Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown
- CVE-2026-99007drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN
- CVE-2026-99006drm/i915/gem: Prevent overstepping exec array boundary
- CVE-2026-99005drm/i915/gt: Unmask interrupts only when ACTIVE is true
- CVE-2026-99004drm/imagination: Size page table preallocation by device address
- CVE-2026-99003drm/panthor: validate userspace queue count against initialized firmware slot count
- CVE-2026-99002drm/vmwgfx: validate pitch coming from userspace
- CVE-2026-99001drm/xe/i2c: cancel the client work on remove
- CVE-2026-99000drm/xe: Fix shrinker accounting double-subtraction on nested external pins
- CVE-2026-98999drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin
- CVE-2026-98998drm/bridge: th1520-dw-hdmi: Fix remove() callback
- CVE-2026-98997drm/amdgpu/userq: only accept doorbell BOs as queue doorbell
- CVE-2026-98996fs: don't silently unmount busy mounts
- CVE-2026-98995namespace: reset the old parent's ->overmount in mnt_change_mountpoint()
- CVE-2026-98994statmount: read the parent of an unmounted mount under mount_lock
- CVE-2026-98993namespace: don't inherit MNT_UMOUNT in clone_mnt()
- CVE-2026-98992namespace: don't copy an unmounted mount tree
- CVE-2026-98991namespace: queue a mount only once for mount notifications
- CVE-2026-98990namespace: check a submount for references right before unmounting it
- CVE-2026-98989namespace: check a recursive bind mount for mount namespace loops
- CVE-2026-98988namespace: keep covered mounts covered in OPEN_TREE_NAMESPACE
- CVE-2026-98987namespace: look at the topmost mount for a mount namespace file
- CVE-2026-98986namespace: remove the fsnotify marks of a mount namespace in process context
- CVE-2026-98985namespace: check the mounts before reading their parents in pivot_root()
- CVE-2026-98984dcache: don't put a mountpoint on a dentry that's being removed
- CVE-2026-98983unshare: don't drop active namespace references that were never taken
- CVE-2026-98982namespace: don't let a pseudo dentry become the root of a mount