Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-80920io_uring: defer eventfd signaling when queued from a wakeup handler
- CVE-2026-80919drm/amdgpu: fix recursive ww_mutex acquire in amdgpu_devcoredump_format
- CVE-2026-80918HID: core: fix number/pointer type confusion on long items
- CVE-2026-80917PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems
- CVE-2026-80916kcov: fix data corruption and race conditions on PREEMPT_RT
- CVE-2026-80915drm/xe: Fix DPT allocation paths.
- CVE-2026-80914Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready
- CVE-2026-80913selinux: require every boolean value to be defined
- CVE-2026-80912selinux: reject an unclaimed class value in security_get_classes()
- CVE-2026-80911ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()
- CVE-2026-80910ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses
- CVE-2026-80909drm/amdgpu: Reject UVD message with invalid number of h265 refs
- CVE-2026-80908drm/amdgpu: Reject UVD message with dimensions above 4096
- CVE-2026-80907drm/amdgpu: Fix UVD dpb min size calculation for H264
- CVE-2026-80906net: packet: fix wrong transport_header when sending VLAN-tagged frame
- CVE-2026-80905net: tap: fix wrong transport_header when sending VLAN-tagged frame
- CVE-2026-80904net/tls: Fail tls_sw_splice_read() after a failed async decrypt
- CVE-2026-80903drm/xe/oa: Fix sync entry leak on OA config emit failure
- CVE-2026-80902dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA
- CVE-2026-80901ipvs: fix the checksum validations
- CVE-2026-80900ASoC: SDCA: Make UMP message size check more robust
- CVE-2026-80899erofs: remove fscache backend entirely
- CVE-2026-80898netfs: clear PG_private_2 on copy-to-cache append failure
- CVE-2026-80897netfs: release readahead folios on iterator preparation failure
- CVE-2026-80896mshv: Fix race in mshv_irqfd_deassign
- CVE-2026-80895mshv: Order pt_vp_array publish against irqfd assertion path
- CVE-2026-80894iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults on replace
- CVE-2026-80893mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()
- CVE-2026-80892erofs: cap LZMA stream pool size
- CVE-2026-80891KVM: s390: pci: Validate AIBV and AISB before pinning guest pages