Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-74673Input: evdev - fix information leak in evdev_pass_values()
- CVE-2026-74672mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF
- CVE-2026-74671ima: fix out-of-bounds read in xattr_verify()
- CVE-2026-74670ipvs: stop estimator after disabled calc phase
- CVE-2026-74669ipvs: clear IPv4 options after rebasing tunnel ICMP errors
- CVE-2026-74668packet: use consistent hard_header_len in TX_RING send path
- CVE-2026-74667net/packet: reset the MAC header on the packet-socket transmit path
- CVE-2026-74666packet: synchronize pressure clearing with ring reconfiguration
- CVE-2026-74665net: fix skb length accounting after generic XDP frag adjustment
- CVE-2026-74664net: openvswitch: reallocate update replies for mismatched IDs
- CVE-2026-74663net/sched: reject overly deep qdisc hierarchies
- CVE-2026-74662inet: frags: publish queues before arming timer
- CVE-2026-74661mac802154: fix netdev use-after-free in beacon worker
- CVE-2026-74660netfilter: ebt_nflog: pin the NFLOG backend
- CVE-2026-74659net: bridge: mrp: fix uninitialised bytes on the wire
- CVE-2026-74658futex: Prevent robust futex exit race some more
- CVE-2026-74657ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops
- CVE-2026-74656ipv4: fix use-after-free in fib_nhc_update_mtu()
- CVE-2026-74655serial: qcom-geni: fix TX DMA buffer flush
- CVE-2026-74654serial: 8250_dma: Clear stale RX state on shutdown
- CVE-2026-74653serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx
- CVE-2026-74652serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ
- CVE-2026-74651staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()
- CVE-2026-74650staging: rtl8723bs: fix OOB read in WMM_param_handler()
- CVE-2026-74649staging: rtl8723bs: fix missing shared-key auth challenge length check
- CVE-2026-74648staging: rtl8723bs: validate monitor transmit frame lengths
- CVE-2026-74647misc: fastrpc: Remove buffer from list prior to unmap operation
- CVE-2026-74646misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke
- CVE-2026-74645mm/damon/lru_sort: error out for >10000 active_mem_bp
- CVE-2026-74644mm/damon/ops-common: putback folios on invalid migrate nid