Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-80739net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock
- CVE-2026-80738bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie
- CVE-2026-80737serial: amba-pl011: synchronize DMA teardown
- CVE-2026-80736thunderbolt: Fix bandwidth group reservation indexing
- CVE-2026-80735ovpn: ensure socket is owned by ovpn before deref sk_user_data
- CVE-2026-80734btrfs: initialize inode mapping flags for cached inodes
- CVE-2026-80733net: remove WARN_ON_ONCE() from sk_mc_loop()
- CVE-2026-80732ata: pata_sl82c105: fix bridge revision use-after-free
- CVE-2026-80731net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header
- CVE-2026-80730ring-buffer: Fix crash passing ERR_PTR to kthread_stop()
- CVE-2026-80729mm/huge_memory: initialise workingset state before folio split
- CVE-2026-80728Revert "drm/amdgpu: fix aperture mapping leak"
- CVE-2026-80727x86/mce: Set up the polling timer before CMCI discovery
- CVE-2026-80725net: gro: properly validate BIG TCP aggregation criteria
- CVE-2026-80724ptp: vmclock: prevent read-only mappings from becoming writable
- CVE-2026-80723of: reserved_mem: prevent OOB when too many dynamic regions are defined
- CVE-2026-80722wifi: mac80211: validate individual TWT params before driver setup
- CVE-2026-80721Bluetooth: ISO: ensure no dangling hcon references in iso_conn
- CVE-2026-80720iomap: add a separate bio_set for iomap_split_ioend
- CVE-2026-80719mm: mglru: fix stale batch updates after memcg reparenting
- CVE-2026-80718mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk()
- CVE-2026-80717sctp: validate Adaptation Indication parameter length
- CVE-2026-80716ALSA: pcm: wake linked drain waiters on unlink
- CVE-2026-80715igc: remove napi_synchronize() in igc_down()
- CVE-2026-80714ipvs: do not propagate one-packet flag to synced conns
- CVE-2026-80713io_uring: preserve task restrictions across exec
- CVE-2026-80712spi: spi-qpic-snand: write the feature value before executing SET_FEATURE
- CVE-2026-80711power: supply: max17040: handle missing status supplier
- CVE-2026-80710s390/dasd: Fix undersized format-check buffer
- CVE-2026-80709s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs