Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-80648pinctrl: spacemit: fix NULL check in spacemit_pin_set_config
- CVE-2026-80647RDMA/hns: Fix warning in poll cq direct mode
- CVE-2026-80646ipv6: guard against possible NULL deref in __in6_dev_stats_get()
- CVE-2026-80645rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()
- CVE-2026-80644ocfs2: don't BUG_ON an invalid journal dinode
- CVE-2026-80643EDAC/igen6: Fix call trace due to missing release()
- CVE-2026-80642liveupdate: Reference count incoming FLB data
- CVE-2026-80641wifi: wlcore: enable the right set of ciphers
- CVE-2026-80640cxl/fwctl: Fix __fortify_panic
- CVE-2026-80639cxl/test: Fix __fortify_panic
- CVE-2026-80638ocfs2: fix out-of-bounds write in ocfs2_remove_refcount_extent
- CVE-2026-80637netfilter: synproxy: fix unaligned memory access in timestamp adjustment
- CVE-2026-80636netfilter: conntrack: revert ct extension genid infrastructure
- CVE-2026-80635wifi: wcn36xx: fix OOB read from short trigger BA firmware response
- CVE-2026-80634netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag
- CVE-2026-80633iommufd: Take dma_resv lock before dma_buf_unpin() in release path
- CVE-2026-80632wifi: mt76: mt7996: Fix NULL pointer dereference in mt7996_init_tx_queues()
- CVE-2026-80631btrfs: lzo: reject compressed segment that overflows the compressed input
- CVE-2026-80630net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
- CVE-2026-80629octeontx2-af: npc: Fix size of entry2cntr_map
- CVE-2026-80628ALSA: seq: oss: Serialize readq reset state with q->lock
- CVE-2026-80627MIPS: mm: Fix out-of-bounds write in maar_res_walk()
- CVE-2026-80626powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del
- CVE-2026-80625RDMA/hns: Fix memory leak of bonding resources
- CVE-2026-80624mfd: cs42l43: Sanity check firmware size
- CVE-2026-80623coresight: ete: Always save state on power down
- CVE-2026-80622char: tlclk: fix use-after-free in tlclk_cleanup()
- CVE-2026-80621PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference when no RAS DES capability
- CVE-2026-80620Revert "PCI/MSI: Unmap MSI-X region on error"
- CVE-2026-80619apparmor: fix potential UAF in aa_replace_profiles