Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-80950i3c: renesas: Check that the transfer is valid before accessing it
- CVE-2026-80949wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()
- CVE-2026-80948wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start()
- CVE-2026-80947wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop
- CVE-2026-80946fuse: copy request headers via a stack buffer for io-uring
- CVE-2026-80945crypto: iaa - unmap dst before software fallback on decompress
- CVE-2026-80944wifi: mwifiex: Detach sync cmd buffer on interrupted wait
- CVE-2026-80943wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids
- CVE-2026-80942wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vars()
- CVE-2026-80941wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb()
- CVE-2026-80940wifi: rtw88: pci: fix resource leak on failed NAPI setup
- CVE-2026-80939wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot
- CVE-2026-80938wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex
- CVE-2026-80937wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy
- CVE-2026-80936wifi: mt76: mt7925: cancel mlo_pm_work on stop
- CVE-2026-80935wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy
- CVE-2026-80934wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames
- CVE-2026-80933wifi: mt76: mt7996: validate default EEPROM firmware size
- CVE-2026-80932vsock/virtio: flush works in dependency order
- CVE-2026-80931w1: ds28e17: reject an oversize length on an I2C block read
- CVE-2026-80930tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout
- CVE-2026-80929sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[]
- CVE-2026-80928smack: fix cred UAF in smack_file_send_sigiotask()
- CVE-2026-80927timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex()
- CVE-2026-80926ksmbd: fix use-after-free in oplock break notification
- CVE-2026-80925vlan: fix skb_under_panic and races when toggling HW VLAN offload
- CVE-2026-80924crypto: krb5 - use kfree_sensitive() for derived key buffers
- CVE-2026-80923xhci: dbgtty: Fix unregister on tty_register_driver() failure
- CVE-2026-80922crypto: qcom-rng - Allow zero as a random number
- CVE-2026-80921KVM: s390: vsie: zero stale crypto bits