Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-74643samples/damon/mtier: error out for zero quota goal target values
- CVE-2026-74642ALSA: usb: Fix UAF at delayed release of MIDI2 EPs
- CVE-2026-74641ALSA: usx2y: bound the hwdep mmap fault offset
- CVE-2026-74640ALSA: FCP: fix OOB write in fcp_meter_ctl_get()
- CVE-2026-74639ALSA: us144mkii: re-anchor capture URBs on resubmission
- CVE-2026-74638drm/v3d: Serialize the scheduler timeout handlers
- CVE-2026-74637perf/core: Fix group leader use-after-free after sibling detach
- CVE-2026-74636tracing: Fix race between update_event_fields and, event_define_fields
- CVE-2026-74635fbdev: bitblit: bound-check glyph index in bit_cursor()
- CVE-2026-74634ring-buffer: Prevent subbuf order change when resizing is disabled
- CVE-2026-74633tracing: Fix NULL pointer dereference in module event cache removal
- CVE-2026-74632mm/huge_memory: fix huge_zero_pfn race
- CVE-2026-74631net: smc: fix splice entry lifetime imbalance in smc_rx_splice
- CVE-2026-74630ipv6: prevent in6_dev_get() from resurrecting inet6_dev
- CVE-2026-74629net/dibs: Correct freeing of dmb_clientid_arr
- CVE-2026-74628net/x25: fix use-after-free of the socket by its timers
- CVE-2026-74627net: devmem: prevent net-iov / page mixing
- CVE-2026-74626NTB: ntb_netdev: Preserve RX queue depth on allocation failure
- CVE-2026-74625netfilter: bridge: release template ct on non-IP path
- CVE-2026-74624netfilter: nf_conntrack: defer invalid log until after unlock
- CVE-2026-74623net: atlantic: free stranded TX buffers on ring deinit
- CVE-2026-74622net: atlantic: free RX pages of consumed but not refilled buffers
- CVE-2026-74621net/sched: act_ct: fix sk_buff leak when the header checks reject a packet
- CVE-2026-74620net/sched: act_gact, act_police: range check the fallback control action
- CVE-2026-74619ovl: don't warn when the mount is completed from another user namespace
- CVE-2026-74618binfmt_misc: don't warn when the mount is completed from another user namespace
- CVE-2026-74617dibs: initialise dibs->lock in dibs_dev_alloc()
- CVE-2026-74616xdp: reject clones that overrun skb_shared_info tailroom
- CVE-2026-74615vxlan: do not arm the ageing timer on a device that is down
- CVE-2026-74614vsock/virtio: read virtqueues under worker locks