Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-72499RDMA/bnxt_re: Free CQ toggle page after firmware teardown
- CVE-2026-72498RDMA/bnxt_re: Avoid displaying the kernel pointer
- CVE-2026-72497RDMA/bnxt_re: Add a max slot check for SQ
- CVE-2026-72496RDMA/bnxt_re: Proper rollback if the ioremap fails
- CVE-2026-72495RDMA/bnxt_re: Avoid repeated requests to allocate WC pages
- CVE-2026-72494RDMA/irdma: Replace waitqueue and flag with completion
- CVE-2026-72493net: serialize netif_running() check in enqueue_to_backlog()
- CVE-2026-72492ksmbd: fix use-after-free in same_client_has_lease()
- CVE-2026-72491net/9p: fix race condition on rdma->state in trans_rdma.c
- CVE-2026-72490staging: rtl8723bs: fix stainfo check in rtw_aes_decrypt
- CVE-2026-72489staging: nvec: fix use-after-free in nvec_rx_completed()
- CVE-2026-72488soundwire: fix bug in sdw_add_element_group_count found by syzkaller
- CVE-2026-72487PCI: Check ROM header and data structure addr before accessing
- CVE-2026-72486mailbox: mtk-adsp: fix UAF during device teardown
- CVE-2026-72485coresight: platform: defer connection counter increment until alloc succeeds
- CVE-2026-72484staging: most: video: avoid double free on video register failure
- CVE-2026-72483usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control()
- CVE-2026-72482gpib: fix double decrement of descriptor_busy in command_ioctl()
- CVE-2026-72481iio: magnetometer: ak8975: fix potential kernel stack memory leak
- CVE-2026-72480iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling
- CVE-2026-72479iio: accel: mma8452: handle I2C read error(s) in mma8452_read()
- CVE-2026-72478fs/ntfs3: add bounds check to run_get_highest_vcn()
- CVE-2026-72477fs/ntfs3: call _ntfs_bad_inode() when failing to rename
- CVE-2026-72476dmaengine: Fix possible use after free
- CVE-2026-72475dmaengine: dma-axi-dmac: Properly free struct axi_dmac_desc
- CVE-2026-72474dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor
- CVE-2026-72473xprtrdma: Decouple req recycling from RPC completion
- CVE-2026-72472nfs: use nfsi->rwsem to protect traversal of the file lock list
- CVE-2026-72471fs/ntfs3: prevent potential lcn remains uninitialized
- CVE-2026-72470fs/ntfs3: resize log->one_page_buf when adopting on-disk page size