Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-72469xprtrdma: Fix ep kref imbalance on ADDR_CHANGE
- CVE-2026-72468xprtrdma: Initialize re_id before removal registration
- CVE-2026-72467xprtrdma: Check frwr_wp_create() during connect
- CVE-2026-72466xprtrdma: Fix bcall rep leak and unbounded peek
- CVE-2026-72465xprtrdma: Sanitize the reply credit grant after parsing
- CVE-2026-72464xprtrdma: Repost Receive buffers for malformed replies
- CVE-2026-72463xfrm: Fix dev use-after-free in xfrm async resumption
- CVE-2026-72462apparmor: fix race in unix socket mediation when peer_path is used
- CVE-2026-72461apparmor: fix refcount leak when updating the sk_ctx
- CVE-2026-72460apparmor: check label build before no_new_privs test
- CVE-2026-72459apparmor: aa_label_alloc use aa_label_free on alloc failure
- CVE-2026-72458apparmor: fix NULL pointer dereference in unpack_pdb
- CVE-2026-72457apparmor: fail policy unpack on accept2 allocation failure
- CVE-2026-72456apparmor: release exe file resources on path failure
- CVE-2026-72455apparmor: fix uninitialised pointer passed to audit_log_untrustedstring()
- CVE-2026-72454i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev()
- CVE-2026-72453regcache: Do not overwrite error code when finalizing cache after error
- CVE-2026-72452drm/i915: clear CRTC color blob pointers after dropping refs
- CVE-2026-72451xfrm: Fix xfrm state cache insertion race
- CVE-2026-72450xfrm: validate selector family and prefixlen during match
- CVE-2026-72449drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm
- CVE-2026-72448octeontx2-pf: Fix leak of SQ timestamp buffer on teardown
- CVE-2026-72447sctp: hold socket lock when dumping endpoints in sctp_diag
- CVE-2026-72446ALSA: usb-audio: qcom: reject stream disable with no active interface
- CVE-2026-72445ALSA: usb-audio: qcom: clear opened when stream enable fails
- CVE-2026-72444flow_dissector: check device type before reading ETH_ADDRS
- CVE-2026-72443ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints
- CVE-2026-72442netfilter: flowtable: fix and simplify IP6IP6 tunnel handling
- CVE-2026-72441ieee802154: fix kernel-infoleak in dgram_recvmsg()
- CVE-2026-72440md/raid1: fix writes_pending and barrier reference leaks on write failures