Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-74492netfilter: ipset: do not update comments from kernel-side hash adds
- CVE-2026-74491of/address: Fix NULL bus dereference in of_pci_range_parser_one()
- CVE-2026-74490tipc: avoid use-after-free in poll trace queue dumps
- CVE-2026-74489wifi: mac80211: fix tid_tx use-after-free on BA session stop
- CVE-2026-74488wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames
- CVE-2026-74487binfmt_misc: restore write access when removing an entry
- CVE-2026-74486binfmt_misc: use exe_file_deny_write_access() for the interpreter clone
- CVE-2026-74485binfmt_misc: reject a flag character as the field delimiter
- CVE-2026-74484binfmt_misc: don't let an 'F' entry pin its own instance
- CVE-2026-74483binfmt_misc: don't leak the user namespace when the mount fails
- CVE-2026-74482mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios
- CVE-2026-74481mm/page_reporting: use system_freezable_wq to fix UAF during suspend
- CVE-2026-74480net: bridge: stop fast-leave after deleting a port group
- CVE-2026-74479net: pktgen: fix proc entry use-after-free
- CVE-2026-74478um: vector: fix use-after-free in vector_mmsg_rx()
- CVE-2026-74477uprobes: Fix NULL pointer dereference in hprobe_expire()
- CVE-2026-74476veth: convert frag_list skbs before running XDP
- CVE-2026-74475vxlan: use neigh_ha_snapshot() in route_shortcircuit()
- CVE-2026-74474vxlan: use pskb_network_may_pull() for transmit path header pulls
- CVE-2026-74473vxlan: use pskb_network_may_pull() in route_shortcircuit()
- CVE-2026-74472ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev()
- CVE-2026-74471tracing: Check return value of __register_event() in trace_module_add_events()
- CVE-2026-74470scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write
- CVE-2026-74469sctp: prevent peer transport count overflow
- CVE-2026-74468gpio: pch: use raw_spinlock_t for the register lock
- CVE-2026-74467s390/qeth: Check CAP_NET_ADMIN for private ioctls
- CVE-2026-74466s390/zcrypt: Close speculative mem read possibility
- CVE-2026-74465net: openvswitch: fix potential UAF on meter attach failure
- CVE-2026-74464net: openvswitch: fix skb leak on flow key update failure during ct
- CVE-2026-74463i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock