Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-80860fuse: fix race between interrupt and resend
- CVE-2026-80859fuse: fix missing barrier when checking io-uring readiness
- CVE-2026-80858fuse: publish io-uring queues with release semantics
- CVE-2026-80857fuse: wait for FR_FINISHED on abort_on_kill to prevent use-after-free
- CVE-2026-80856fuse: fix invalidate lock leak on setattr writeback failure
- CVE-2026-80855fuse: fix invalidate lock leak on open O_TRUNC DAX failure
- CVE-2026-80854usb: gadget: f_tcm: keep port count until LUN teardown completes
- CVE-2026-80853KVM: SEV: Allocate full pages for {DE,EN}CRYPT ops on SNP-enabled hosts
- CVE-2026-80852tls: device: fix out-of-bounds write in tls_append_frag()
- CVE-2026-80851gtp: serialize PDP context updates
- CVE-2026-80850tcp: fix AO info use-after-free in tcp_ao_connect_init()
- CVE-2026-80849net/tcp-ao: fix use-after-free of current_key on reconnect to another peer
- CVE-2026-80848xfrm: espintcp: fix UAF during close
- CVE-2026-80847tcp: clamp route advmss to TCP_MIN_MSS
- CVE-2026-80846xfrm: drop ESP-in-TCP packets with no ingress device
- CVE-2026-80845xfrm: avoid lock inversion in nat keepalive work
- CVE-2026-80844xfrm: ah6: validate routing header segments_left
- CVE-2026-80843xfrm: fix xfrm_state_construct() auth-trunc leak
- CVE-2026-80842net: bridge: mcast: fix use-after-free of a master VLAN's multicast context
- CVE-2026-80841net/packet: defer vmalloc TX_RING free until skbs finish
- CVE-2026-80840ipv6: seg6: clear IPv4 control block on IPIP decapsulation
- CVE-2026-80839batman-adv: reject unrepresentable multicast TVLV offsets
- CVE-2026-80838vxlan: keep the last remote linked during FDB flush
- CVE-2026-80837netfilter: nf_tables: don't queue packet path object notifications
- CVE-2026-80836crypto: virtio - bound the akcipher result length
- CVE-2026-80835crypto: qcom-rng - Remove crypto_rng interface
- CVE-2026-80834crypto: sun8i-ce - Remove crypto_rng interface
- CVE-2026-80833crypto: sun8i-ss - Remove crypto_rng interface
- CVE-2026-80832crypto: qce - fix CCM AAD buffer underallocation
- CVE-2026-80831crypto: mxs-dcp - fix source scatterlist length access