Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98920netfs: Fix missing alloc tagging of direct mempool allocations
- CVE-2026-98919drm/xe: harden adjust_idledly() against divide-by-zero and overflow
- CVE-2026-98918mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold()
- CVE-2026-98917parisc: Increase kernel stack size to 32kb
- CVE-2026-98916wifi: nl80211: check link is beaconing for color change
- CVE-2026-98915media: video-i2c: use vb2_video_unregister_device on driver removal
- CVE-2026-98914drm/amdgpu: cap ATOM command table nesting depth
- CVE-2026-98913net: thunderx: fix PTP device ref leak in nicvf_probe()
- CVE-2026-98912ALSA: seq: oss: Reject reads that cannot fit the next event
- CVE-2026-98911dpaa2-switch: fix the error path in dpaa2_switch_rx()
- CVE-2026-98910drm/amdkfd: Unwind debug trap enable on copy_to_user failure
- CVE-2026-98909net: cpsw_new: unregister devlink on port registration failure
- CVE-2026-98908net: microchip: sparx5: clean up PSFP resources on flower setup failure
- CVE-2026-98907btrfs: protect sb_write_pointer() with invalidate lock
- CVE-2026-98906net: lan966x: restore RX state on reload failure
- CVE-2026-98905drm/amdkfd: Properly acquire queue buffers in CRIU restore
- CVE-2026-98904mailbox: imx: Use devm_pm_runtime_enable()
- CVE-2026-98903mailbox: imx: Add a channel shutdown field
- CVE-2026-98902md/raid5: let stripe batch bm_seq comparison wrap-safe
- CVE-2026-98901ksmbd: fix lease break and ack state handling
- CVE-2026-98900xen/gntalloc: validate grant count before allocation
- CVE-2026-98899netfilter: ipset: mark the rcu locked areas properly
- CVE-2026-98898drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized
- CVE-2026-98897ksmbd: don't hold ci->m_lock while waiting for a lease break ack
- CVE-2026-98896thunderbolt: Keep the domain reference while processing hotplug
- CVE-2026-98895net/mlx5: HWS, Handle destroying table that has a miss table
- CVE-2026-98894drm/amd/ras: reset CPER ring on corrupt entry size
- CVE-2026-98893firmware: arm_scmi: Validate SENSOR_UPDATE payload size
- CVE-2026-98892firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size
- CVE-2026-98891wifi: mac80211: validate deauth frame length before reason access