Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-74462i2c: imx: mark I2C adapter when hardware is powered down
- CVE-2026-74461i2c: imx: Cancel hrtimer before clearing slave pointer
- CVE-2026-74460can: ems_usb: validate CPC message lengths
- CVE-2026-74459can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure
- CVE-2026-74458can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents
- CVE-2026-74457can: peak_usb: add bounds check for USB channel index
- CVE-2026-74456can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error
- CVE-2026-74455can: peak_usb: validate uCAN receive record lengths
- CVE-2026-74454drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size
- CVE-2026-74453drm/vc4: Zero the tile state data array before each BIN job
- CVE-2026-74452drm/panthor: reject firmware sections with oversized data
- CVE-2026-74451drm/panthor: validate firmware interface structure sizes
- CVE-2026-74450drm/amd/pm: fix pptable use-after-free
- CVE-2026-74449drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport
- CVE-2026-74448drm/amdkfd: fix QID bit leak in pqm_create_queue()
- CVE-2026-74447drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment
- CVE-2026-74446drm/amdkfd: hold event_mutex while checkpointing CRIU events
- CVE-2026-74445drm/vmwgfx: reject DX_BIND_QUERY without a DX context
- CVE-2026-74444drm/vmwgfx: validate DRAW_PRIMITIVES header size before division
- CVE-2026-74443drm/vmwgfx: bound DMA command body size against suffix pointer
- CVE-2026-74442drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure
- CVE-2026-74441usb: typec: ucsi: Fix race condition and ordering in port unregistration
- CVE-2026-74440drm/xe: Wait on external BO kernel fences in exec IOCTL
- CVE-2026-74439iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry
- CVE-2026-74438crypto: sun4i-ss - Remove insecure and unused rng_alg
- CVE-2026-74437media: uvcvideo: Fix deadlock if uvc_status_stop is called from async_ctrl.work
- CVE-2026-74436rxrpc: serialize kernel accept preallocation with socket teardown
- CVE-2026-74435rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc
- CVE-2026-74434rxrpc: Don't move a peeked OOB message onto the pending queue
- CVE-2026-74433rxrpc: Fix UAF in rxgk_issue_challenge()