Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-80708s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()
- CVE-2026-80707can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer
- CVE-2026-80706can: softing: fw_parse(): validate firmware record spans
- CVE-2026-80705drm/amd/display: check if dml21_add_phantom_plane() is successful
- CVE-2026-80704drm/amd/display: use proper context for logging
- CVE-2026-80703drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE
- CVE-2026-80702drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size
- CVE-2026-80701drm/vmwgfx: enforce cursor size limits for MOB cursors
- CVE-2026-80700drm/vmwgfx: validate external BO copy bounds for both stride paths
- CVE-2026-80699KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context
- CVE-2026-80698dmaengine: idxd: fix double free of wq, engine, and group structs
- CVE-2026-80697erofs: ensure valid f_path for page cache sharing
- CVE-2026-80696hwmon: (ltc4282) Fix reading the minimum alarm voltage
- CVE-2026-80695hwmon: (sht3x) Fix unaligned accesses
- CVE-2026-80694net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller
- CVE-2026-80693idpf: bound interrupt-vector register fill to the allocated array
- CVE-2026-80692Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks
- CVE-2026-80691scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE
- CVE-2026-80690scsi: ufs: core: Initialize hba->rpmbs list in ufshcd
- CVE-2026-80689tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions
- CVE-2026-80688riscv: drop __init from vec_check_unaligned_access_speed_all_cpus
- CVE-2026-80687iommufd/viommu: Release the igroup lock on the vdevice_size error path
- CVE-2026-80686mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE
- CVE-2026-80685mm/util: don't read __page_2 for order-1 folios in snapshot_page()
- CVE-2026-80684KVM: s390: pci: Fix NULL dereference on AIBV allocation failure
- CVE-2026-80683Bluetooth: SCO: give the socket its own sco_conn reference
- CVE-2026-80682riscv/mm: use physical alignment for vmemmap_start_pfn
- CVE-2026-80681vxlan: re-fetch eth header after route_shortcircuit()
- CVE-2026-80680i2c: amd-mp2: Unregister callback on adapter add failure
- CVE-2026-80679s390/dasd: Fix potential NULL pointer dereference