Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-80890sctp: reject stale cookies with mismatched verification tags
- CVE-2026-80889can: isotp: fix timer drain order, wakeup handling and tx_gen ordering
- CVE-2026-80888drm/vmwgfx: drop dma_buf reference on foreign-fd prime import
- CVE-2026-80887drm/vmwgfx: use check_add_overflow for shader size+offset bound
- CVE-2026-80886serial: msm: Disable DMA for kernel console UART
- CVE-2026-80885afs: Fix uncancelled rxrpc OOB message handler
- CVE-2026-80884ntb: Store original DMA address for future release
- CVE-2026-80883drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered
- CVE-2026-80882crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm
- CVE-2026-80881ocfs2: fix buffer head management in ocfs2_read_blocks()
- CVE-2026-80880IB/mlx5: Properly support implicit ODP rereg_mr
- CVE-2026-80879ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write
- CVE-2026-80878afs: Fix leak of ungot volume
- CVE-2026-80877afs: Fix vllist leak
- CVE-2026-80876ring-buffer: Fix event length with forced 8-byte alignment
- CVE-2026-80875ipvs: use parsed transport offset in TCP state lookup
- CVE-2026-80874arm64: dts: renesas: ironhide: Describe inline ECC carveouts
- CVE-2026-80873KVM: arm64: nv: Write ESR_EL2 for injected nested SError exceptions
- CVE-2026-80872ALSA: hda/tas2781: Cancel async firmware request at unbind
- CVE-2026-80871crypto: xilinx-trng - Remove crypto_rng interface
- CVE-2026-80870drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
- CVE-2026-80869ntfs: bound the attribute-list entry in ntfs_read_inode_mount()
- CVE-2026-80868ntfs3: Allocate iomap inline_data using alloc_page
- CVE-2026-80867alpha/PCI: Add security_locked_down() check to pci_mmap_resource()
- CVE-2026-80866tipc: avoid busy looping in tipc_exit_net()
- CVE-2026-80865bpf: Add missing access_ok call to copy_user_syms
- CVE-2026-80864RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp
- CVE-2026-80863RDMA/rxe: Fix OOB in free_rd_atomic_resources()
- CVE-2026-80862nvme-tcp: fix usage of page_frag_cache
- CVE-2026-80861usb: xhci: bail out of setup if the controller is inaccessible