Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98981namespace: unhash a dentry before detaching the mounts on it
- CVE-2026-98980namei: don't reveal overmounted entries in refwalk
- CVE-2026-98979namespace: refuse an automount below a mount that is in no namespace
- CVE-2026-98978namespace: never expire a locked mount
- CVE-2026-98977namespace: handle mount locking for automounts correctly
- CVE-2026-98976namespace: keep the lock on a mount that a propagated copy is moved beneath
- CVE-2026-98975xfs: stop exchanging reflink flags when exchanging mappings
- CVE-2026-98974xfs: fix exchange-range-to-eof file size exchange
- CVE-2026-98973drm/bridge: Fix unlocked list_del in drm_bridge_add()
- CVE-2026-98972cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode()
- CVE-2026-98971gpio: exar: initialize the ID before registering its cleanup
- CVE-2026-98970drm/vc4: Free the BO cache size list on teardown
- CVE-2026-98969net/sched: em_text: reject unterminated algo before autoload
- CVE-2026-98968amt: send the relay's General Query directly from the receive path
- CVE-2026-98967cxgb4/ch_ktls: disable softirqs around tid_list erases
- CVE-2026-98966bonding: fix the program leak when XDP is replaced
- CVE-2026-98965ice: Restore Ordered MMIO Writes for Tx Doorbells
- CVE-2026-98964nvmet: use the local P2P device on metadata allocation failure
- CVE-2026-98963btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio
- CVE-2026-98962btrfs: free iov when btrfs_uring_read_extent() fails
- CVE-2026-98961btrfs: unlock inode and extent in caller when io_uring read extent fails
- CVE-2026-98960btrfs: don't stash io_uring encoded data across -EAGAIN
- CVE-2026-98959btrfs: fix xattr replace when multiple xattrs are packed in the same item
- CVE-2026-98958wifi: mt76: account non-AQL frames per peer rather than per link
- CVE-2026-98957wifi: mt76: mt7915: disable rx napi when removing device
- CVE-2026-98956ASoC: adau1372: allow sleepy powerdown GPIOs
- CVE-2026-98955flow_dissector: avoid u16 truncation of skb->len when computing thoff
- CVE-2026-98954net: always dissect GSO packets in __virtio_net_hdr_to_skb()
- CVE-2026-98953devlink: fix devlink_rel reference leak when notify work is pending
- CVE-2026-98952pfcp: make sure the SEID is linear before reading it