Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-74583net/sched: cls_route: fix fastmap use-after-free on filter
- CVE-2026-74582packet: use consistent hard_header_len in non-ring send paths
- CVE-2026-74581net: ipv6: clear suppressed fib6 rule result
- CVE-2026-74580vhost: reset the vring metadata cache on vring reconfiguration
- CVE-2026-74579netfilter: nft_payload: fix mask build for partial field offload
- CVE-2026-74578crypto: algif_skcipher - force synchronous processing on trees without ctx->state
- CVE-2026-74577net: mpls: initialize rtm_tos in mpls_getroute()
- CVE-2026-74576mm/slab: prevent unbounded recursion in free path with new kmalloc type
- CVE-2026-74575thunderbolt: Prevent XDomain delayed work use-after-free on disconnect
- CVE-2026-74574dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open()
- CVE-2026-74573iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE
- CVE-2026-74572btrfs: zoned: fix deadlock between metadata writeback and transaction commit
- CVE-2026-74571btrfs: skip global block reserve accounting for rescue mounts
- CVE-2026-74570ntfs: harden runlist realloc size calculations
- CVE-2026-74569netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()
- CVE-2026-74568KVM: arm64: vgic: Fix race between LPI release and re-registration
- CVE-2026-74567keys: fix out-of-bounds read in keyring_get_key_chunk()
- CVE-2026-74566keys: make keyring key-chunk byte order agree with keyring_diff_objects()
- CVE-2026-74565netfilter: nf_tables: make nft_object rhltable per table
- CVE-2026-74564netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH
- CVE-2026-74563rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check()
- CVE-2026-74562nexthop: take nh->lock for f6i_list walks in replace check and notify
- CVE-2026-74561nexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush
- CVE-2026-74560xsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx
- CVE-2026-74559xsk: drain continuation descs after overflow in xsk_build_skb()
- CVE-2026-74558xsk: reclaim invalid Tx descriptors in ZC batch path
- CVE-2026-74557scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer
- CVE-2026-74556scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer
- CVE-2026-74555scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race
- CVE-2026-74554wifi: ath12k: fix out-of-bounds clear_bit in ath12k_mac_dp_peer_cleanup()