Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-74553hwmon: (nct6775-core) Fix number of temperature registers for NCT6116
- CVE-2026-74552hwmon: (lm90) Only report alarms if driver is ready
- CVE-2026-74551hwmon: (nzxt-smart2) DMA-align output buffer
- CVE-2026-74550net: do not send ICMP/NDISC Redirects when peer allocation fails
- CVE-2026-74549hwmon: (nct6775-core) Prevent access to unsupported weight registers
- CVE-2026-74548forcedeth: fix UAF of txrx_stats in nv_remove
- CVE-2026-74547hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread
- CVE-2026-74546hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read
- CVE-2026-74545rtase: fix double free of multi-frag skb on DMA map failure
- CVE-2026-74544net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds
- CVE-2026-74543net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()
- CVE-2026-74542netfs: Fix folio_queue ENOMEM in writeback by adding a mempool
- CVE-2026-74541Bluetooth: ISO: clear iso_data always when detaching conn from hcon
- CVE-2026-74540Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp
- CVE-2026-74539Bluetooth: ISO: lock sk in iso_sock_getname
- CVE-2026-74538Bluetooth: ISO: lock sk in iso_connect_ind
- CVE-2026-74537Bluetooth: ISO: hold sk properly in iso_conn_ready
- CVE-2026-74536Bluetooth: ISO: fix leaking sk after socket release
- CVE-2026-74535Bluetooth: ISO: avoid deadlocks in iso_sock_timeout
- CVE-2026-74534Bluetooth: ISO: fix refcounting of iso_conn
- CVE-2026-74533Bluetooth: ISO: fix race of kfree vs kref_get_unless_zero
- CVE-2026-74532Bluetooth: btintel: Validate length before parsing diagnostics TLV
- CVE-2026-74531Bluetooth: hci_conn: hold conn reference in abort_conn_sync()
- CVE-2026-74530Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback
- CVE-2026-74529Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback
- CVE-2026-74528Bluetooth: hci_sync: hold conn in hci_past_sync() callback
- CVE-2026-74527octeontx2-af: Block VFs from clobbering special CGX PKIND state
- CVE-2026-74526scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit
- CVE-2026-74525net: sxgbe: free TX rings on RX allocation failure
- CVE-2026-74524riscv: mm: Fix out-of-bounds page-table walk during memory hot-remove