Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-74282tipc: prevent snt_unacked underflow on CONN_ACK
- CVE-2026-74281tipc: reject inverted service ranges from peer bindings
- CVE-2026-74280crypto: marvell/octeontx - fix DMA cleanup using wrong loop index
- CVE-2026-74279crypto: cavium/cpt - fix DMA cleanup using wrong loop index
- CVE-2026-74278ALSA: seq: Fix kernel heap address leak in bounce_error_event()
- CVE-2026-74277iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path
- CVE-2026-74276spi: xilinx: use FIFO occupancy register to determine buffer size
- CVE-2026-74275cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach()
- CVE-2026-74274cxl/region: Fill first free targets[] slot during auto-discovery
- CVE-2026-74273cxl/region: Block region delete during region creation
- CVE-2026-74272cxl/region: Resolve region deletion races
- CVE-2026-74271power: supply: core: fix supplied_from allocations
- CVE-2026-74270handshake: Require admin permission for DONE command
- CVE-2026-74269bnxt: fix head underflow on XDP head-grow
- CVE-2026-74268tcp: clear sock_ops cb flags before force-closing a child socket
- CVE-2026-74267net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
- CVE-2026-74266net/sched: sch_dualpi2: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
- CVE-2026-74265net: mana: initialize gdma queue id to INVALID_QUEUE_ID
- CVE-2026-74264net: watchdog: fix refcount tracking races
- CVE-2026-74263net: wwan: t7xx: check skb_clone in control TX
- CVE-2026-74262kcm: use WRITE_ONCE() when changing lower socket callbacks
- CVE-2026-74261ALSA: seq: avoid stale FIFO cells during resize
- CVE-2026-74260netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them
- CVE-2026-74258bpf: Guard __get_user acesss with access_ok for uprobe_multi data
- CVE-2026-74257sockmap: Fix use-after-free in udp_bpf_recvmsg()
- CVE-2026-74256bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check
- CVE-2026-74255tipc: fix UAF in tipc_l2_send_msg()
- CVE-2026-72502tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)
- CVE-2026-72501RDMA/bnxt_re: Initialize dpi variable to zero
- CVE-2026-72500RDMA/bnxt_re: Free SRQ toggle page after firmware teardown