Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-74703vhost-scsi: Validate T10 PI scatterlist counts
- CVE-2026-74702vhost-scsi: reject feature changes after endpoint
- CVE-2026-74701net/openvswitch: check Ethernet header length in key_extract()
- CVE-2026-74700net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers
- CVE-2026-74699drm/xe: Fix memory leak in exec_queue_set_hang_replay_state()
- CVE-2026-74698net/mlx5e: fix BQL reset on SQ re-activation
- CVE-2026-74697bnxt_en: Disable EOP for TPA on all chips to prevent data corruption
- CVE-2026-74696tcp: fix TFO max_qlen accounting across reuseport migration
- CVE-2026-74695netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
- CVE-2026-74694net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length
- CVE-2026-74693net: prestera: validate firmware header length
- CVE-2026-74692net/smc: fix TOCTOU race between smc_listen_out() and listener close
- CVE-2026-74691net: thunderbolt: Tear down DMA paths before stopping the rings
- CVE-2026-74690s390/ism: Fix UAF of sba and ieq during ism_dev_exit()
- CVE-2026-74689net/atm: fix slab-out-of-bounds read in vcc_setsockopt()
- CVE-2026-74688sctp: clear control chunk transport if it is being removed
- CVE-2026-74687watchdog: at91sam9_wdt: prevent timer rearm during teardown
- CVE-2026-74686rqspinlock: Reset tail when preserving queue on deadlock
- CVE-2026-74685hwmon: (ltc4282) Clamp negative current limits
- CVE-2026-74684net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()
- CVE-2026-74683Input: evdev - sanitize event type index when fetching event masks
- CVE-2026-74682ALSA: usb-audio: fix OOB write on Type II inbound URBs
- CVE-2026-74681usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg
- CVE-2026-74680usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
- CVE-2026-74679usb: gadget: f_ncm: Use unsigned int for ndp_index
- CVE-2026-74678net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()
- CVE-2026-74677net: usb: ipheth: fix carrier_work UAF on disconnect
- CVE-2026-74676vt: add permission check for KDSKBMETA ioctl
- CVE-2026-74675vt: stabilize tty reference in kbd_keycode with tty_port_tty_get
- CVE-2026-74674mm: fix incorrect flush address in direct page table reclaim