Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-80769HID: rapoo: fix missing hid_is_usb() check
- CVE-2026-80768HID: ft260: fix stack-use-after-return write in I2C read race
- CVE-2026-80767HID: sensor: custom: Fix use-after-free in enable_sensor
- CVE-2026-80766HID: uclogic: fix use-after-free of inrange_timer on remove
- CVE-2026-80765HID: hyperv: validate initial device info bounds
- CVE-2026-80764Bluetooth: hci_event: fix LE list UAF on reset
- CVE-2026-80763Bluetooth: hci_event: validate LE Set CIG Parameters response
- CVE-2026-80762Bluetooth: hci_sync: Fix accept list UAF during suspend
- CVE-2026-80761Bluetooth: ISO: zero the sockaddr before returning it in getname
- CVE-2026-80760Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255
- CVE-2026-80759Bluetooth: hci_aml: validate firmware segment lengths
- CVE-2026-80758futex: Avoid private hash use-after-free on final put
- CVE-2026-80757selinux: reject a class permission count below its inherited common
- CVE-2026-80756selinux: do not cancel a policy conversion that never started
- CVE-2026-80755selinux: reject a permission value exceeding the class permission count
- CVE-2026-80754Input: synaptics-rmi4 - fix F55 transmitter electrode count typo
- CVE-2026-80753ovpn: run deferred work on a module-owned workqueue
- CVE-2026-80752Input: psxpad-spi - set driver data before use
- CVE-2026-80751pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev()
- CVE-2026-80750pmdomain: mediatek: fix remaining %pOF after of_node_put()
- CVE-2026-80749drm/connector/hdmi: Fix out of bounds memory read
- CVE-2026-80748mmc: loongson2: Fix sg iteration in data reorder functions
- CVE-2026-80747drm/amdkfd: Add bounds check for CRAT subtype length
- CVE-2026-80746clk: qcom: dispcc-eliza: Fix disp_cc_mdss_mdp_clk_src RCG stall on Eliza EVK
- CVE-2026-80745regulator: fp9931: Fix VPOS/VNEG voltage selector table
- CVE-2026-80744netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
- CVE-2026-80743ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers
- CVE-2026-80742af_packet: Don't send zero-byte data in tpacket_snd().
- CVE-2026-80741drm/log: Fix out-of-bounds read on empty message length
- CVE-2026-80740drm/log: Fix infinite loop when scale is too large for display