Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-72349netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
- CVE-2026-72348netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop
- CVE-2026-72347netfilter: xt_connmark: reject invalid shift parameters
- CVE-2026-72346platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume
- CVE-2026-72345net/mlx5: LAG, Fix off-by-one in single-FDB error rollback
- CVE-2026-72344net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable
- CVE-2026-72343net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation
- CVE-2026-72342net/mlx5e: Fix HV VHCA stats agent registration race
- CVE-2026-72341net/mlx5e: Fix publication race for priv->channel_stats[]
- CVE-2026-72340net: microchip: vcap: fix races on the shared Super VCAP block
- CVE-2026-72339qede: fix off-by-one in BD ring consumption on build_skb failure
- CVE-2026-72338net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload
- CVE-2026-72337Bluetooth: 6lowpan: avoid untracked enable work
- CVE-2026-72336Bluetooth: 6lowpan: hold L2CAP conn across debugfs control
- CVE-2026-72335Bluetooth: MGMT: Fix adv monitor add failure cleanup
- CVE-2026-72334Bluetooth: ISO: fix malformed ISO_END/CONT handling
- CVE-2026-72333Bluetooth: L2CAP: fix tx ident leak for commands without a response
- CVE-2026-72332accel/amdxdna: Prevent PM resume deadlock in hwctx_sync_debug_bo()
- CVE-2026-72331accel/amdxdna: Fix VMA access race
- CVE-2026-72330net/tls: Consume empty data records in tls_sw_read_sock()
- CVE-2026-72329net/liquidio: drop cached VF pci_dev LUT
- CVE-2026-72328accel/amdxdna: Fix potential amdxdna_umap lifetime race
- CVE-2026-72327drm/v3d: Reject invalid indirect BO handle in indirect CSD setup
- CVE-2026-72326net/sched: cake: reject overhead values that underflow length
- CVE-2026-72325perf/x86/amd/core: Avoid enabling BRS from the SVM reload path
- CVE-2026-72324gpio: mvebu: free generic chips on unbind
- CVE-2026-72323ipv4: igmp: Fix potential UAF in igmp_gq_start_timer()
- CVE-2026-72322ipv6: mcast: Fix potential UAF in MLD delayed work
- CVE-2026-72321ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer()
- CVE-2026-72320netfilter: nft_lookup: fix catchall element handling with inverted lookups