Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-74613vsock/virtio: avoid refilling the RX queue after teardown
- CVE-2026-74612veth: fix skb length accounting after XDP frag adjustment
- CVE-2026-74611tls: rx: restore msg_iter before TLS 1.3 optimistic retry
- CVE-2026-74610tls: don't leave a full plaintext sk_msg ring unpushed
- CVE-2026-74609tipc: read le->link under the node lock in tipc_node_link_down()
- CVE-2026-74608smb: client: Fix use-after-free in cifs_try_adding_channels()
- CVE-2026-74607KVM: SVM: Serialize accesses to the owner and mirror list with separate lock
- CVE-2026-74606eventfs: Fix use-after-free in eventfs_remove_rec()
- CVE-2026-74605eventfs: Use children field for rcu head and add memory barriers
- CVE-2026-74604Revert "thermal/drivers/hwmon: Cleanup coding style a bit"
- CVE-2026-74603ptp: ocp: Fix board ID over-read
- CVE-2026-74602ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()
- CVE-2026-74601ring-buffer: Use current_context for safe per-CPU buffer swap
- CVE-2026-74600mm/page_table_check: skip special zero mappings
- CVE-2026-74599mm/ptdump: always stabilise against page table freeing using init_mm
- CVE-2026-74598ipv6: fix Route Information option length validation
- CVE-2026-74597ip6_tunnel: clear skb2->cb[] in ip6ip6_err()
- CVE-2026-74596fs,fsverity: remove check for fsverity being enabled in setattr_prepare()
- CVE-2026-74595fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()
- CVE-2026-74594sched/psi: Shut down rtpoll_timer in psi_cgroup_free()
- CVE-2026-74593sched_ext: Take cgroup_lock() first in scx_cgroup_lock()
- CVE-2026-74592ima: Instantiate file_truncate and path_truncate hooks
- CVE-2026-74591mm/filemap: __filemap_add_folio() restore index before retrying
- CVE-2026-74590fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions
- CVE-2026-74589bpf, sockmap: Fix sk_redir use-after-free in send verdict
- CVE-2026-74588sctp: keep chunk->transport in step with the list it is queued on
- CVE-2026-74587sctp: fix use-after-free of cached ASCONF chunk
- CVE-2026-74586sctp: clear new_transport when removing a peer
- CVE-2026-74585thunderbolt: Bound the DROM dual link port number before indexing sw->ports
- CVE-2026-74584RDMA/bnxt_re: zero shared page before exposing to userspace