Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-80678i2c: imx: Fix slave registration race and error handling
- CVE-2026-80677driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()
- CVE-2026-80676Drivers: hv: vmbus: use generic driver_override infrastructure
- CVE-2026-80675libbpf: Reject non-exclusive metadata maps in the signed loader
- CVE-2026-80674ntfs: validate resident attribute lists and harden the validator
- CVE-2026-80673ntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find()
- CVE-2026-80672ntfs: fix u16 truncation of restart-area length check
- CVE-2026-80671perf sched: Fix register_pid() overflow, strcpy, and BUG_ON
- CVE-2026-80670perf tools: Use perf_env__get_cpu_topology() in machine__resolve()
- CVE-2026-80669bpf: Disable xfrm_decode_session hook attachment
- CVE-2026-80668netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
- CVE-2026-80667net/mlx5: LAG, MPESW, Fix missing complete() on devcom error
- CVE-2026-80666Bluetooth: sco: Fix a race condition in sco_sock_timeout()
- CVE-2026-80665KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't resolve PFN
- CVE-2026-80664netfilter: xt_nat: reject unsupported target families
- CVE-2026-80663tools/power/x86/intel-speed-select: Harden daemon pidfile open
- CVE-2026-80662cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size
- CVE-2026-80661ufs: core: tracing: Do not dereference pointers in TP_printk()
- CVE-2026-80660hwmon: (occ) unregister sysfs devices outside occ lock
- CVE-2026-80659mmc: vub300: defer reset until cmd_mutex is unlocked
- CVE-2026-80658drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove()
- CVE-2026-80657accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer
- CVE-2026-80656hfsplus: Add a sanity check for btree node size
- CVE-2026-80655soc: xilinx: Fix race condition in event registration
- CVE-2026-80654soc: xilinx: Shutdown and free rx mailbox channel
- CVE-2026-80653scsi: hisi_sas: Add slave_destroy interface for v3 hw
- CVE-2026-80652crypto: ccp - Treat zero-length cert chain as query for blob lengths
- CVE-2026-80651crypto: ccp/sev-dev-tsm - bail out early when pdev->bus is NULL
- CVE-2026-80650media: atomisp: gc2235: fix UAF and memory leak
- CVE-2026-80649firmware: arm_scmi: Fix OOB in scmi_power_name_get()