Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-80528ceph: avoid fs reclaim while using current->journal_info
- CVE-2026-80527ceph: fix hanging __ceph_get_caps() with stale mds_wanted
- CVE-2026-80526ASoC: tas2562: Validate values for volume writes
- CVE-2026-80525ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup
- CVE-2026-80524optee: ffa: Add NULL check in optee_ffa_lend_protmem
- CVE-2026-80523clk: spacemit: k3: set hdma clock as critical
- CVE-2026-80522crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()
- CVE-2026-80521af_unix: Unlink scc_entry in unix_del_edge().
- CVE-2026-80520ovpn: fix NULL dereference when killing missing key
- CVE-2026-80519ovpn: finish crypto callback cleanup before peer release
- CVE-2026-74754scsi: core: pair EH runtime PM get and put
- CVE-2026-74753perf: Reject exited events as group leaders
- CVE-2026-74752sctp: validate cookie AUTH state before use
- CVE-2026-74751riscv: lib: Fix ZBB strnlen reading past count boundary
- CVE-2026-74750ovpn: defer key slot crypto freeing to workqueue
- CVE-2026-74749rseq: Prevent hard lockup on granted time slice extension
- CVE-2026-74748netfilter: ipset: fix refcount race between list:set GC and swap
- CVE-2026-74747ipvs: revalidate ihl to prevent out-of-bounds access
- CVE-2026-74746netfilter: flowtable: publish GC-visible tuple last
- CVE-2026-74745eth: bnxt: avoid deadlock when canceling IRQ affinity notifier
- CVE-2026-74744ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
- CVE-2026-74743macvlan: inherit needed_headroom and needed_tailroom from lowerdev
- CVE-2026-74742veth: fix queue index used to wake the peer txq in veth_poll
- CVE-2026-74741net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling
- CVE-2026-74740net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain
- CVE-2026-74739net/sched: cls_u32: skip hash tables in u32_bind_class()
- CVE-2026-74738regmap: sdw-mbq: don't call an unset readable_reg callback
- CVE-2026-74737net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG
- CVE-2026-74736net/sched: cls_bpf: reject dev-bound programs bound to a different device
- CVE-2026-74735l2tp: fix tunnel and session refcount leak on seq_file release