Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-72379fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid
- CVE-2026-72378afs: Fix error code in afs_extract_vl_addrs()
- CVE-2026-72377afs: Remove setting of AS_RELEASE_ALWAYS for symlinks and mountpoints
- CVE-2026-72376afs: Fix misplaced inc of net->cells_outstanding
- CVE-2026-72375afs: Fix reinitialisation of the inode, in particular ->lock_work
- CVE-2026-72374afs: Fix callback service message parsers to pass through -EAGAIN
- CVE-2026-72373afs: Fix missing NULL pointer check in afs_break_some_callbacks()
- CVE-2026-72372afs: Fix lack of locking around modifications of net->cells_dyn_ino
- CVE-2026-72371afs: Fix the volume AFS_VOLUME_RM_TREE is set on
- CVE-2026-72370iomap: release pages on atomic dio size mismatch
- CVE-2026-72369minix: avoid overflow in bitmap block count calculation
- CVE-2026-72368cachefiles: Fix double unlock in nomem_d_alloc error path
- CVE-2026-72367iomap: guard io_size EOF trim against concurrent truncate underflow
- CVE-2026-72366netfs: Fix netfs_create_write_req() to handle async cache object creation
- CVE-2026-72365netfs: Fix writethrough to use collection offload
- CVE-2026-72364netfs: Fix writeback error handling
- CVE-2026-72363netfs: Fix folio state after ENOMEM whilst under writeback iteration
- CVE-2026-72362drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry()
- CVE-2026-72361drm/xe/hw_engine: Fix double-free of managed BO in error path
- CVE-2026-72360drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays
- CVE-2026-72359drm/xe: fix NPD in bo_meminfo()
- CVE-2026-72358drm/xe/pt: prevent invalid cursor access for purged BOs
- CVE-2026-72357uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline
- CVE-2026-72356cifs: Fix missing credit release on failure in cifs_issue_read()
- CVE-2026-72355netfs: Fix barriering when walking subrequest list
- CVE-2026-72354ntfs: avoid stale runlist element dereference in MFT writeback
- CVE-2026-72353ntfs: avoid stale runlist element dereference in fallocate
- CVE-2026-72352HID: bpf: Fix hid_bpf_get_data() range check
- CVE-2026-72351gue: validate REMCSUM private option length
- CVE-2026-72350netfilter: xt_u32: reject invalid shift counts