Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-80558libceph: Avoid using invalid osd indices from primary_temp
- CVE-2026-80557libceph: fix OOB read in decode_watchers() via missing bounds check
- CVE-2026-80556mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition
- CVE-2026-80555s390/vfio_ccw: Free all memory if cp_init() fails
- CVE-2026-80554s390/vfio_ccw: Limit the number of channel program segments
- CVE-2026-80553s390/vfio_ccw: Cancel existing workqueues
- CVE-2026-80552s390/vfio_ccw: Ensure index for read/write regions are within range
- CVE-2026-80551s390/vfio_ccw: Ensure first IDAW remains constant
- CVE-2026-80550s390/vfio_ccw: Fix out of bounds check on CCW array
- CVE-2026-80549s390/vfio_ccw: Move cp cleanup out of not operational
- CVE-2026-80548s390/vfio_ccw: Selectively expand io_mutex
- CVE-2026-80547s390/vfio_ccw: Implement a crw lock
- CVE-2026-80546s390/zcrypt: Improve CCA CPRB length and overflow checks
- CVE-2026-80545s390/zcrypt: Improve EP11 CPRB length and overflow checks
- CVE-2026-80544s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing
- CVE-2026-80543s390/zcrypt: Pad trailing CCA or EP11 message with zeros
- CVE-2026-80542drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank()
- CVE-2026-80541drm/amdgpu: validate GEM_CREATE domain combinations
- CVE-2026-80540drm/amdgpu: Fix UVD decode image min size calculation
- CVE-2026-80539drm/amdgpu: disallow multiple FENCE chunks in one submit
- CVE-2026-80538xfs: propagate errors from xfs_rtginode_load
- CVE-2026-80537xfs: fix off-by-one in rtrefcount btree root level validation
- CVE-2026-80536xfs: bounds-check buffer log item's dirty bitmap
- CVE-2026-80535xfs: don't double-lock when deleting a self-referential directory
- CVE-2026-80534xfs: fix ilock leak on error in xfs_dq_get_next_id
- CVE-2026-80533xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair
- CVE-2026-80532xfs: fix another iunlink infinite loop bug in online fsck
- CVE-2026-80531xfs: avoid UAF on sc->tempip in xrep_tempfile_create
- CVE-2026-80530xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN
- CVE-2026-80529xfs: don't swallow dquot recovery verification errors