Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98890wifi: libertas: reject short monitor TX frames
- CVE-2026-98889wifi: iwlwifi: mvm: fix sched scan IE sizing
- CVE-2026-98888arm64: kprobes: Allow reentering kprobes while single-stepping
- CVE-2026-98887wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO
- CVE-2026-98886drm/gma500: return errors from Oaktrail HDMI I2C reads
- CVE-2026-98885ima: return error early if file xattr cannot be changed
- CVE-2026-98884mmc: core: Add validation for host-provided max_segs
- CVE-2026-98883serial: 8250_port: recognize UPIO_AU
- CVE-2026-98882media: chips-media: wave5: Add range checks for dec_output_info
- CVE-2026-98881net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()
- CVE-2026-98880ntfs3: handle set_blocksize failures
- CVE-2026-98879isofs: handle set_blocksize failures
- CVE-2026-98878irqchip/gic-v5: Immediately exec priority drop following activate
- CVE-2026-98877irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed
- CVE-2026-98876host1x: bus: Fix missing ops null check in error teardown
- CVE-2026-98875drm/nouveau/gsp: add SEC2 to GA100 chip table
- CVE-2026-98874wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect
- CVE-2026-98873netfilter: nf_conntrack_expect: zero at allocation time
- CVE-2026-98872freevxfs: don't BUG() on unknown typed-extent type
- CVE-2026-98871crypto: ccp - Fix possible deadlock in SEV init failure path
- CVE-2026-98870ksmbd: remove stale channels from all sessions on teardown
- CVE-2023-7356Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID
- CVE-2026-98869bpf: Infer zext_dst based on static register liveness analysis
- CVE-2026-98868dm-pcache: reject a kset that overruns its segment
- CVE-2026-98867dm-pcache: bound the logical key offset from persistent memory
- CVE-2026-98866sched/cache: Introduce task_struct->sched_cache_grp to fix UAF
- CVE-2026-98865sched_ext: Don't run ops.dequeue() with a DSQ lock held
- CVE-2026-98864sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task
- CVE-2026-98863KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails
- CVE-2026-98862audit: fix exe mark UAF in kill_rules()