Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-80588mptcp: reclaim forward-allocated memory on RX path errors
- CVE-2026-80587mptcp: avoid combining some incoming suboptions
- CVE-2026-80586mptcp: options: reset DSS fields in case of unexpected size
- CVE-2026-80585mptcp: fastopen: only mark MPTFO subflows with SYN data
- CVE-2026-80584s390/qeth: validate user buffer length in SNMP and ARP query ioctls
- CVE-2026-80583ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses
- CVE-2026-80582drm/shmem_helper: Check VMA boundaries for PMD mappings
- CVE-2026-80581ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout
- CVE-2026-80580fbdev: bound mode sysfs output to the sysfs buffer
- CVE-2026-80579fbdev: clear fb_info->mode before deleting a videomode
- CVE-2026-80578fbdev: core: Fix pointer desynchronization in fb_io_read()
- CVE-2026-80577drm/panthor: skip zero-sized firmware sections
- CVE-2026-80576drm/amdgpu: reject oversized IBs with per-ring packet limits
- CVE-2026-80575Input: cs40l50-vibra - validate custom data from user space
- CVE-2026-80574Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet
- CVE-2026-80573Input: iforce - validate input packet lengths
- CVE-2026-80572Input: byd - synchronize timer deletion before freeing private data
- CVE-2026-80571powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak
- CVE-2026-80570Input: synaptics-rmi4 - zero report size on F54 work error
- CVE-2026-80569Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer
- CVE-2026-80568Input: synaptics-rmi4 - block s_input when F54 queue is busy
- CVE-2026-80567Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue
- CVE-2026-80566Input: hynitron_cstxxx - validate touch count and finger IDs
- CVE-2026-80565crypto: qce - fix error path in devm_qce_register_algs
- CVE-2026-80564gve: fix NULL dereference due to missing ptp adjfine
- CVE-2026-80563gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind
- CVE-2026-80562gpio: ml-ioh: use raw_spinlock_t for the register lock
- CVE-2026-80561libceph: fix multiple unsafe decodes in decode_locker()
- CVE-2026-80560openrisc: signal: do not restore privileged SR bits on sigreturn
- CVE-2026-80559Input: sur40 - fix input device registration ordering