Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-80980net/smc: stop killed, freed and out_of_sync sharing a byte
- CVE-2026-80979net/smc: unregister the connection before draining the rx tasklet
- CVE-2026-80978net: cap advertised IP tunnel headroom
- CVE-2026-80977net: skbuff: don't touch shared zerocopy state in skb_tx_error()
- CVE-2026-80976seg6: reset IP6CB after IPv6 decapsulation
- CVE-2026-80975mfd: qnap-mcu: keep the reply buffer alive past a command timeout
- CVE-2026-80974mfd: sm501: Fix potential memory leaks during remove
- CVE-2026-80973ALSA: 6fire: bound the MIDI event length from the device
- CVE-2026-80972ALSA: aloop: Check card index validity at probe
- CVE-2026-80971ALSA: bcd2000: clear the URB pointers on disconnect
- CVE-2026-80970ALSA: FCP: do not copy out an uninitialised init response
- CVE-2026-80969ALSA: mpu401: Check card index validity at probe
- CVE-2026-80968ALSA: mts64: Check card index validity at probe
- CVE-2026-80967ALSA: pcxhr: initialize mutexes before requesting threaded IRQ
- CVE-2026-80966ALSA: portman2x4: Check card index validity at probe
- CVE-2026-80965ALSA: serial-u16550: Check card index validity at probe
- CVE-2026-80964ALSA: virmidi: Check card index validity at probe
- CVE-2026-80963dm-stats: fix a crash if allocation of per-cpu data fails
- CVE-2026-80962dm-pcache: validate geometry fields from on-disk cache_info
- CVE-2026-80961dm-pcache: validate kset key_num and intra-segment bounds
- CVE-2026-80960dm-pcache: validate on-media seg_num against the cache device size
- CVE-2026-80959dm-pcache: bound the persisted tail-position offset
- CVE-2026-80958dm-pcache: clamp the tail kset read to the segment data region
- CVE-2026-80957dm-pcache: detect a cycle in the last-kset chain during replay
- CVE-2026-80956dm-pcache: only hand out initialized cache segments
- CVE-2026-80955dm-pcache: fix use-after-free and invalid seg operations in kset_replay()
- CVE-2026-80954i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode()
- CVE-2026-80953i3c: master: adi: initialize the lock before enabling interrupts
- CVE-2026-80952i3c: master: Fix info leak and UAF in device unregister path
- CVE-2026-80951i3c: master: svc: bound IBI payload to the requested max_payload_len