Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-74342kernfs: link kn to its parent before the LSM init hook
- CVE-2026-74341wifi: wcn36xx: fix heap overflow from oversized firmware HAL response
- CVE-2026-74340wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication
- CVE-2026-74339ALSA: seq: Clear variable event pointer on read
- CVE-2026-74338bpf: Reject sleepable BPF_LSM_CGROUP programs at load time
- CVE-2026-74337bpf: Fix NMI/tracepoint re-entry deadlock on lru locks
- CVE-2026-74336wifi: mac80211: bound S1G TIM PVB walk to the TIM element
- CVE-2026-74335bpf: Fix NULL pointer dereference in bpf_task_from_vpid()
- CVE-2026-74334RDMA/nldev: Fix locking when accessing mr->pd
- CVE-2026-74333ASoC: amd: acp-sdw-legacy: Bound DAI link iteration
- CVE-2026-74332ASoC: amd: acp-sdw-sof: Bound DAI link iteration
- CVE-2026-74331firmware_loader: Fix recursive lock in device_cache_fw_images()
- CVE-2026-74330configfs: fix lockless traversals of ->s_children
- CVE-2026-74329watchdog: unregister PM notifier on watchdog unregister
- CVE-2026-74328iommufd: Destroy the pages content after detaching from dmabuf
- CVE-2026-74327vmalloc: fix NULL pointer dereference in is_vm_area_hugepages()
- CVE-2026-74326wifi: mt76: mt7921: fix resource leak in probe error path
- CVE-2026-74325wifi: mt76: use kfree_rcu for offchannel link in mt76_put_vif_phy_link
- CVE-2026-74324wifi: mt76: mt7925: validate skb length in testmode query
- CVE-2026-74323wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb()
- CVE-2026-74322wifi: mt76: mt7996: Fix possible NULL pointer dereference in mt7996_mac_write_txwi_80211()
- CVE-2026-74321btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()
- CVE-2026-74320fbdev: sm501fb: Fix buffer errors in OF binding code
- CVE-2026-74319btrfs: zoned: fix deadlock waiting for ticket during data relocation
- CVE-2026-74318btrfs: fix deadlock cloning inline extent when using flushoncommit
- CVE-2026-74317ixgbe: do not configure xps for XDP queues
- CVE-2026-74316NFSD: Handle layout stid in nfsd4_drop_revoked_stid()
- CVE-2026-74315lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file()
- CVE-2026-74314bpf: Cancel special fields on map value recycle
- CVE-2026-74313vduse: hold vduse_lock across IDR lookup in open path