Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-80830usb: core: Add lock to usb_wakeup_notification()
- CVE-2026-80829ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()
- CVE-2026-80828ALSA: usb-audio: Complete cleanup after system-resume errors
- CVE-2026-80827USB: serial: option: fix slab OOB read in interrupt URB callback
- CVE-2026-80826USB: c67x00: fix use-after-free in c67x00_add_iso_urb()
- CVE-2026-80825wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb
- CVE-2026-80824usb: usbfs: fix use-after-free of usb_device in usbdev_release()
- CVE-2026-80823nfc: st21nfca: validate ATR_REQ length against the received frame
- CVE-2026-80822mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()
- CVE-2026-80821nvmet: pci-epf: put CQ ref on create_cq mapping failure
- CVE-2026-80820xfs: don't livelock in scrub on a circular unlinked list
- CVE-2026-80819Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept
- CVE-2026-80818iommu/tegra241-cmdqv: Fix CMD_SYNC use-after-free on teardown
- CVE-2026-80817iommu/iommufd: Fix NULL pointer deref in iommufd_ioas_change_process when racing with iopt_map_file_pages
- CVE-2026-80816ALSA: FCP: Use a private URB for the notification endpoint
- CVE-2026-80815ALSA: scarlett2: Use a private URB for the notification endpoint
- CVE-2026-80814rndis_host: add overflow check in rndis_rx_fixup()
- CVE-2026-80813nvmet: fix NULL pointer dereference in nvmet_execute_identify_nslist()
- CVE-2026-80812ALSA: dummy: Check card index validity at probe
- CVE-2026-80810io_uring/rsrc: fix folio size overflow in io_vec_fill_bvec()
- CVE-2026-80809ocfs2: fix missing metadata reservation for large xattrs
- CVE-2026-80808ext4: stop retrying saturated xattr cache entries
- CVE-2026-80807nilfs2: reject invalid block index in GC ioctl
- CVE-2026-80806ext4: don't enable DAX on new encrypted files
- CVE-2026-80805xfs: validate attr entry pointer before field access
- CVE-2026-80804xfs: restore nofs context unconditionally in xfs_trans_roll
- CVE-2026-80803nfc: digital: clamp SENSF_RES length to the destination buffer
- CVE-2026-80802nfc: fdp: bound the device-reported read length and fix an skb leak
- CVE-2026-80801nfc: microread: validate target discovery payload lengths
- CVE-2026-80800nfc: llcp: bound the connect_sn TLV walk to the skb