Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-80799nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers
- CVE-2026-80798nfc: llcp: reject PDUs shorter than the LLCP header
- CVE-2026-80797nfc: pn533: purge fragmented skbs during cleanup
- CVE-2026-80796nfc: nci: add data_len bound checks to activation parameter extractors
- CVE-2026-80795nfc: nci: fix out-of-bounds write in nci_target_auto_activated()
- CVE-2026-80794nfc: nci: fix uninit-value in the RF discover/activated NTF handlers
- CVE-2026-80793ipv4: reject undersized MTUs in ip_do_fragment()
- CVE-2026-80792ipv6: fix use-after-free in ip6_finish_output2()
- CVE-2026-80791nvmet-auth: zero the AUTH_RECEIVE response buffer
- CVE-2026-80790nvmet-fc: fix invalid free in LS IOD error path
- CVE-2026-80789nvmet-tcp: bound SGL data length before allocating command buffers
- CVE-2026-80788nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations
- CVE-2026-80787nvmet: pci-epf: fix use-after-free in nvmet_pci_epf_exec_iod_work()
- CVE-2026-80786fbdev: Wrap user-invoked calls to fb_set_var() in helper
- CVE-2026-80785fbdev: serialize mode sysfs access with lock_fb_info()
- CVE-2026-80784mptcp: pm: fix memory leak from alloc-during-teardown race
- CVE-2026-80783HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()
- CVE-2026-80782HID: magicmouse: do not keep a stale msc->input if no input is claimed
- CVE-2026-80781HID: core: fix OOB read of field->usage in hid_set_field()
- CVE-2026-80780HID: pidff: fix OOB write when hid->inputs is empty
- CVE-2026-80779net/ionic: avoid OOB TX partner lookup for hwstamp RXQ
- CVE-2026-80778futex/pi: Reject cross-mm private futex owners
- CVE-2026-80777futex/pi: Plug private futex exec() race
- CVE-2026-80776futex: Fix race in futex_pivot_pending() during private hash resize
- CVE-2026-80775futex: Fix race on the initial mm->futex.phash.ref allocation
- CVE-2026-80774HID: asus: fix missing hid_is_usb() check
- CVE-2026-80773HID: huawei: fix missing hid_is_usb() check
- CVE-2026-80772HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()
- CVE-2026-80771HID: nintendo: register input device after capabilities are set
- CVE-2026-80770HID: nintendo: stop device IO before hid_hw_stop on probe failure