Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-72409net: mvneta: re-enable percpu interrupt on resume
- CVE-2026-72408geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint
- CVE-2026-72407geneve: validate inner network offset in geneve_gro_complete()
- CVE-2026-72406net: sungem: fix probe error cleanup
- CVE-2026-72405net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync
- CVE-2026-72404tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()
- CVE-2026-72403ALSA: FCP: Fix NULL pointer dereference in interface lookup
- CVE-2026-72402bpf: Mask pseudo pointer values in verifier logs
- CVE-2026-72401bpf: Fix insn_aux_data leak on verifier err_free_env path
- CVE-2026-72400seg6: validate SRH length before reading fixed fields
- CVE-2026-72399net: enetc: check the number of BDs needed for xdp_frame
- CVE-2026-72398sctp: add INIT verification after cookie unpacking
- CVE-2026-72397hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid()
- CVE-2026-72396hwmon: adm1275: Prevent reading uninitialized stack
- CVE-2026-72395hwmon: (pmbus) Fix passing events to regulator core
- CVE-2026-72394hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero
- CVE-2026-72393eth: fbnic: don't cache shinfo across skb realloc
- CVE-2026-72392ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump
- CVE-2026-72391net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy
- CVE-2026-72390net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF
- CVE-2026-72389bridge: stp: Fix a potential use-after-free when deleting a bridge
- CVE-2026-72388drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock
- CVE-2026-72387drm/panthor: Fix potential invalid pointer deref in group_process_tiler_oom()
- CVE-2026-72386drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced
- CVE-2026-72385tracing/fprobe: Fix NULL pointer dereference in fprobe_fgraph_entry()
- CVE-2026-72384irqchip/ts4800: Fix missing chained handler cleanup on remove
- CVE-2026-72383sctp: fix addr_wq_timer race in sctp_free_addr_wq()
- CVE-2026-72382ksmbd: reject undersized DACLs before parsing ACEs
- CVE-2026-72381ksmbd: fix use-after-free of fp->owner.name in durable handle owner check
- CVE-2026-72380xen/pvcalls: bound backend response req_id before indexing rsp[]