Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-74432rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)
- CVE-2026-74431rxrpc: Fix potential infinite loop in rxrpc_recvmsg()
- CVE-2026-74430rxrpc: Fix ACKALL packet handling
- CVE-2026-74429rxrpc: Fix the reception of a reply packet before data transmission
- CVE-2026-74428rxrpc: Fix double unlock in rxrpc_recvmsg()
- CVE-2026-74427afs: Fix netns teardown to cancel the preallocation charger
- CVE-2026-74426afs: fix NULL pointer dereference in afs_get_tree()
- CVE-2026-74425afs: handle CB.InitCallBackState3 requests without a server record
- CVE-2026-74424fbcon: fix NULL pointer dereference for a console without vc_data
- CVE-2026-74423accel/amdxdna: Fix leak when pinning ubuf pages
- CVE-2026-74422drm/rockchip: inno-hdmi: Switch to drmm_kzalloc()
- CVE-2026-74421drm/rockchip: dw_dp: Switch to drmm_kzalloc()
- CVE-2026-74420drm/gpusvm: Reject VMAs with VM_IO or VM_PFNMAP when creating SVM ranges
- CVE-2026-74419accel/amdxdna: Adjust size for copy_to_user()
- CVE-2026-74418dma-fence: Fix potential tracepoint null pointer dereferences
- CVE-2026-74417drm/radeon: fix integer overflow in radeon_align_pitch()
- CVE-2026-74416drm/radeon: fix memory leak in radeon_ring_restore() on lock failure
- CVE-2026-74415spi: atcspi200: fix use-after-free when driver unbind
- CVE-2026-74414hfsplus: Remove the duplicate attr inode dirty marking action
- CVE-2026-74413wifi: rtw89: fix wrong pci_get_drvdata type in AER handlers
- CVE-2026-74412wifi: rtw88: fix wrong pci_get_drvdata type in AER handlers
- CVE-2026-74411wifi: rtw89: Correct data type for scan index to avoid infinite loop
- CVE-2026-74410wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer
- CVE-2026-74409wifi: rtw89: add bounds check on firmware mac_id in link lookup
- CVE-2026-74408wifi: ath9k: fix OOB access from firmware tx status queue ID
- CVE-2026-74407wifi: ath11k: cancel SSR work items during PCI shutdown
- CVE-2026-74406vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().
- CVE-2026-74405OPP: Fix race between OPP addition and lookup
- CVE-2026-74404crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one
- CVE-2026-74403crypto: ccp - Check for page allocation failure correctly in TIO