Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-74372raid1: fix nr_pending leak in REQ_ATOMIC bad-block error path
- CVE-2026-74371bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat
- CVE-2026-74370liveupdate: fix TOCTOU race in luo_session_retrieve()
- CVE-2026-74369liveupdate: fix u-a-f in luo_file_unpreserve_files() and luo_file_finish()
- CVE-2026-74368wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic()
- CVE-2026-74367wifi: ath12k: fix inconsistent arvif state in vdev_create error paths
- CVE-2026-74366wifi: ath12k: fix NULL deref in change_sta_links for unready link
- CVE-2026-74365nvdimm/btt: Handle preemption in BTT lane acquisition
- CVE-2026-74364bpf: Reject exclusive maps as inner maps in map-in-map
- CVE-2026-74363bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
- CVE-2026-74362ext2: fix ignored return value of generic_write_sync()
- CVE-2026-74361nvme: fix FDP fdpcidx bounds check
- CVE-2026-74360bpf: Reject exclusive maps for bpf_map_elem iterators
- CVE-2026-74359configfs_lookup(): don't leave ->s_dentry dangling on failure
- CVE-2026-74358ext4: fix fast commit wait/wake bit mapping on 64-bit
- CVE-2026-74357drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu_coredump ring dump
- CVE-2026-74356vhost: fix vhost_get_avail_idx for a non empty ring
- CVE-2026-74355iommu/vt-d: Fix RB-tree corruption in probe error path
- CVE-2026-74354bpf: Take mmap_lock in zap_pages()
- CVE-2026-74353drm/amdkfd: always resume_all after suspend_all
- CVE-2026-74352of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails
- CVE-2026-74351ocfs2: rebase copied fsdlm LVB pointers in locking_state
- CVE-2026-74350ocfs2: validate fast symlink target during inode read
- CVE-2026-74349ocfs2: reject FITRIM ranges shorter than a cluster
- CVE-2026-74348ocfs2/dlm: require a ref for locking_state debugfs open
- CVE-2026-74347netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount
- CVE-2026-74346RDMA/irdma: Fix OOB read during CQ MR registration
- CVE-2026-74345RDMA/siw: Fix endpoint/socket association handling
- CVE-2026-74344bpf: Clear rb node linkage when freeing bpf_rb_root
- CVE-2026-74343kernfs: fix xattr race condition with multiple superblocks