Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-74402crypto: atmel-sha204a - fix blocking and non-blocking rng logic
- CVE-2026-74401dlm: fix add msg handle in send_queue ordered
- CVE-2026-74400bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative dentries
- CVE-2026-74399evm: terminate and bound the evm_xattrs read buffer
- CVE-2026-74398ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD
- CVE-2026-74397IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier
- CVE-2026-74396RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure
- CVE-2026-74395RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference
- CVE-2026-74394RDMA/srpt: fix integer overflow in immediate data length check
- CVE-2026-74393drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
- CVE-2026-74392dm: limit target bio polling to one shot
- CVE-2026-74391tracing: Bound synthetic-field strings with seq_buf
- CVE-2026-74390RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs
- CVE-2026-74389RDMA/hns: Fix log flood after cmd_mbox failure
- CVE-2026-74388ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data
- CVE-2026-74387ALSA: seq: midi: Serialize output teardown with event_input
- CVE-2026-74386nvmet-tcp: fix page fragment cache leak in error path
- CVE-2026-74385nvmet-tcp: check return value of nvmet_tcp_set_queue_sock
- CVE-2026-74384nvme-multipath: fix flex array size in struct nvme_ns_head
- CVE-2026-74383nvme-pci: fix out-of-bounds access in nvme_setup_descriptor_pools
- CVE-2026-74382net/sched: cls_bpf: prevent unbounded recursion in offload rollback
- CVE-2026-74381gpu: host1x: Allow entries in BO caches to be freed
- CVE-2026-74380gpu: host1x: Fix iommu_map_sgtable() return value check
- CVE-2026-74379dax/kmem: account for partial discontiguous resource upon removal
- CVE-2026-74378RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe
- CVE-2026-74377RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path
- CVE-2026-74376md/raid10: reset read_slot when reusing r10bio for discard
- CVE-2026-74375md/raid1,raid10: fix deadlock in read error recovery path
- CVE-2026-74374md/raid1,raid10: fix error-path detection with md_cloned_bio()
- CVE-2026-74373md/raid1,raid10: fix bio accounting for split md cloned bios