Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-80618drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free
- CVE-2026-80617net: airoha: fix foe_check_time allocation size
- CVE-2026-80616ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns()
- CVE-2026-80615net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone
- CVE-2026-80614net: emac: Fix NULL pointer dereference in emac_probe
- CVE-2026-80613veth: fix NAPI leak in XDP enable error path
- CVE-2026-80612net: lwtunnel: Drop skb metadata before LWT encapsulation
- CVE-2026-80611ACPI: processor_idle: Mark LPI enter functions as __cpuidle
- CVE-2026-80610net: enetc: fix potential divide-by-zero when num_vsi is zero
- CVE-2026-80609qede: fix out-of-bounds check for cqe->len_list[]
- CVE-2026-80608accel/amdxdna: Fix iommu domain lifetime race during device removal
- CVE-2026-80607tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg
- CVE-2026-80606drm/xe/userptr: Hold notifier_lock for write on inject test path
- CVE-2026-80605HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()
- CVE-2026-80604HID: core: Fix OOB read in hid_get_report for numbered reports
- CVE-2026-80603netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read
- CVE-2026-80602perf/x86/amd/lbr: Fix kernel address leakage
- CVE-2026-80601batman-adv: gw: acquire ethernet header only after skb realloc
- CVE-2026-80600batman-adv: dat: acquire ARP hw source only after skb realloc
- CVE-2026-80599batman-adv: dat: ensure accessible eth_hdr proto field
- CVE-2026-80598ntfs3: fix out-of-bounds read in decompress_lznt
- CVE-2026-80597mtd: maps: vmu-flash: fix NULL pointer dereference in initialization
- CVE-2026-80596Input: ims-pcu - only expose sysfs attributes on control interface
- CVE-2026-80595Input: ims-pcu - add response length checks
- CVE-2026-80594Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing
- CVE-2026-80593hwmon: (asus_atk0110) Check package count before accessing element
- CVE-2026-80592samples/damon/mtier: fail early if address range parameters are invalid
- CVE-2026-80591f2fs: fix listxattr handling of corrupted xattr entries
- CVE-2026-80590inet: frags: strip GSO state from fragments before reassembly
- CVE-2026-80589block: stop the timeout timer when releasing a never added disk