Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-72319ipvs: ensure inner headers in ICMP errors are in headroom
- CVE-2026-72318cifs: validate DFS referral string offsets
- CVE-2026-72317SUNRPC: pin upper rpc_clnt across the TLS connect_worker
- CVE-2026-72316dm era: fix NULL pointer dereference in metadata_open()
- CVE-2026-72315smb: client: fix busy dentry warning on unmount after DIO
- CVE-2026-72314regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK
- CVE-2026-72313drm/fb-helper: Only consider active CRTCs for vblank sync
- CVE-2026-72312octeontx2-af: fix VF bringup affecting PF promiscuous state
- CVE-2026-72311drm/xe: free madvise VMA array on L2 flush failure
- CVE-2026-72310smb: client: fix overflow in passthrough ioctl bounds check
- CVE-2026-72309tracing/remotes: Fix leak in trace_remote_alloc_buffer() error path
- CVE-2026-72308mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()
- CVE-2026-72307mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()
- CVE-2026-72306vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter
- CVE-2026-72305VDUSE: avoid leaking information to userspace
- CVE-2026-72304ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
- CVE-2026-72303ASoC: SOF: ipc4-control: Validate notification payload size
- CVE-2026-72302ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc
- CVE-2026-72301ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
- CVE-2026-72300ASoC: SOF: topology: validate vendor array size before parsing
- CVE-2026-72299tipc: restrict socket queue dumps in enqueue tracepoints
- CVE-2026-72298net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post()
- CVE-2026-72297net: atm: reject out-of-range traffic classes in QoS validation
- CVE-2026-72296net: ife: require ETH_HLEN to be pullable in ife_decode()
- CVE-2026-72295LoongArch: KVM: Validate irqchip index in irqfd routing
- CVE-2026-72294LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt()
- CVE-2026-72293KVM: s390: vsie: Add missing radix_tree_preload() in _gaccess_shadow_fault()
- CVE-2026-72292KVM: s390: Initialize KVM_S390_GET_CMMA_BITS memory
- CVE-2026-72291KVM: s390: Fix unlikely race in try_get_locked_pte()
- CVE-2026-72290KVM: s390: pci: Fix GISC refcount leak on AIF enable failure