Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-72439md/raid10: fix writes_pending leak on write request failures
- CVE-2026-72438md/raid10: fix writes_pending and barrier reference leaks on discard failures
- CVE-2026-72437md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry
- CVE-2026-72436netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types
- CVE-2026-72435netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()
- CVE-2026-72434netfilter: ipset: make sure gc is properly stopped
- CVE-2026-72433netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak
- CVE-2026-72432tpm_crb: Check ACPI_COMPANION() against NULL during probe
- CVE-2026-72431alloc_tag: fix use-after-free in /proc/allocinfo after module unload
- CVE-2026-72430net/sched: act_ct: fix nf_connlabels leak on two error paths
- CVE-2026-72429ipv6: ioam: fix type confusion of dst_entry
- CVE-2026-72428bpf: Fix stack slot index in nospec checks
- CVE-2026-72427bpf: Fix effective prog array index with BPF_F_PREORDER
- CVE-2026-72426bpf: Preserve pointer spill metadata during half-slot cleanup
- CVE-2026-72425ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()
- CVE-2026-72424rtc: msc313: fix NULL deref in shared IRQ handler at probe
- CVE-2026-72423bpf: Guard conntrack opts error writes
- CVE-2026-72422ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE
- CVE-2026-72421ipv4: fib: Don't ignore error route in local/main tables.
- CVE-2026-72420md/raid5: avoid R5_Overlap races while breaking stripe batches
- CVE-2026-72419netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()
- CVE-2026-72418netfilter: nf_conncount: prevent connlimit drops for early confirmed ct
- CVE-2026-72417netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto()
- CVE-2026-72416netfilter: nft_compat: ebtables emulation must reject non-bridge targets
- CVE-2026-72415ASoC: SDCA: Validate written enum value in ge_put_enum_double()
- CVE-2026-72414net: dsa: sja1105: round up PTP perout pin duration
- CVE-2026-72413sctp: fix err_chunk memory leaks in INIT handling
- CVE-2026-72412s390/mm: Fix handling of _PAGE_UNUSED pte bit
- CVE-2026-72411net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work
- CVE-2026-72410octeontx2-af: Validate NIX maximum LFs correctly