Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98951riscv: ptrace: Zero-initialize regset buffers before copyin
- CVE-2026-98950flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect()
- CVE-2026-98949drm/imagination: Fix reference and vm_bo handling in remap()
- CVE-2026-98948mlxsw: spectrum_flower: Fix port range register leak in tmplt_create()
- CVE-2026-98947vsock: Fix memory leak in vmci_transport_recv_dgram_cb()
- CVE-2026-98946drm/vc4: Disable the V3D interrupt across runtime suspend
- CVE-2026-98945HID: steam: Rearrange teardown sequence
- CVE-2026-98944HID: steam: Refactor registration
- CVE-2026-98942sched_ext: Build the cid tables privately and publish them with RCU
- CVE-2026-98941ext4: don't enable large folios on encrypted inodes
- CVE-2026-98940ASoC: qcom: lpass-cpu: use DAI table index for playback constraints
- CVE-2026-98939x86/mm: Drop unnecessary PMD page copy when freeing
- CVE-2026-98938rust: irq: pass RegistrationInner as cookie to request_irq
- CVE-2026-98937perf/core: Check kernel access when kernel callchains are requested
- CVE-2026-98936wifi: ath11k: reset ar->num_stations on hardware start
- CVE-2026-98935rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak
- CVE-2026-98934ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()
- CVE-2026-98933usb: hub: use shorter 120ms post resume hold for SS root hubs
- CVE-2026-98932EDAC/altera: Fix use-after-free in error paths
- CVE-2026-98931mtd: spinand: fix NULL pointer dereference with no ECC engine
- CVE-2026-98930KVM: s390: Fix IRQ injection with SIGP Stop and Store Status
- CVE-2026-98929macsec: initialize SecY before registering the netdevice
- CVE-2026-98928KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2
- CVE-2026-98927KVM: arm64: nv: Fix life cycle of the nested_mmus array
- CVE-2026-98926drm/amd/display: Remove sink usage from DPMS
- CVE-2026-98925bpf, sockmap: Fix self-redirect copied_seq double-counting
- CVE-2026-98924fs: avoid repeated scans in evict_inodes()
- CVE-2026-98923arm64: io: Reject non-user protection in ioremap_prot()
- CVE-2026-98922net: emac: move setting of netops to fix crash
- CVE-2026-98921ovl: fix UAF in ovl_do_mkdir() debug print