Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-74523qede: sync udp_tunnel ports outside qede_lock in the recovery path
- CVE-2026-74522ksmbd: fix use-after-free in __close_file_table_ids()
- CVE-2026-74521ksmbd: use memcmp() to compare ClientGUIDs
- CVE-2026-74520iommu/iommufd: Fix IOPF group ownership UAF
- CVE-2026-74519pinctrl: devicetree: don't free uninitialized dev_name on error path
- CVE-2026-74518mm/hugetlb: fix list corruption in allocate_file_region_entries()
- CVE-2026-74517KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs
- CVE-2026-74516KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active
- CVE-2026-74515KVM: s390: pci: Reject adapter interrupt forwarding if already enabled
- CVE-2026-74514KVM: s390: pci: Fix memory accounting for pinned/unpinned pages
- CVE-2026-74513dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister
- CVE-2026-74512audit: fix potential use-after-free in audit_del_rule()
- CVE-2026-74510Bluetooth: mgmt: fix UAF in pair command cancellation
- CVE-2026-74509Bluetooth: hci_sync: Fix advertising data UAFs
- CVE-2026-74508Bluetooth: HIDP: reject frames without a transaction header
- CVE-2026-74507Bluetooth: HIDP: validate numbered report payloads
- CVE-2026-74506afs: Fix UAF when sending a message
- CVE-2026-74505ALSA: 6fire: Fix UAF at error handling during probe
- CVE-2026-74504ALSA: seq: Fix division by zero in initialize_timer()
- CVE-2026-74503ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes
- CVE-2026-74502ALSA: ump: fix double free of out_cvts on rawmidi error
- CVE-2026-74501ALSA: usb-audio: fix use-after-free in ump_to_endpoint()
- CVE-2026-74500ALSA: usb-audio: fix stack info leak in RME Digiface status
- CVE-2026-74499ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()
- CVE-2026-74498ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set
- CVE-2026-74497ALSA: usb-audio: Clamp frame size in implicit-feedback mode
- CVE-2026-74496fou: Fix use-after-free in fou_create()
- CVE-2026-74495igbvf: Fix leak in TX DMA error cleanup
- CVE-2026-74494ksmbd: reject repeated SMB2 NEGOTIATE requests
- CVE-2026-74493net/smc: fix socket use-after-free during link group termination