Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-72259ASoC: mediatek: mt8192: Release reserved memory on cleanup
- CVE-2026-72258ASoC: mediatek: mt8183: Release reserved memory on cleanup
- CVE-2026-72257ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback
- CVE-2026-72256netfilter: xt_cluster: reject template conntracks in hash match
- CVE-2026-72255netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst
- CVE-2026-72254netfilter: nft_fib: reject fib expression on the netdev egress hook
- CVE-2026-72253netfilter: nf_conntrack_sip: validate skb_dst() before accessing it
- CVE-2026-72252netfilter: nft_set_pipapo: don't leak bad clone into future transaction
- CVE-2026-72251netfilter: nf_nat_sip: reload possible stale data pointer
- CVE-2026-72250netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag
- CVE-2026-72249netfilter: flowtable: use dst in this direction when pushing IPIP header
- CVE-2026-72248netfilter: flowtable: support IPIP tunnel with direct xmit
- CVE-2026-72247netfilter: nf_conncount: fix zone comparison in tuple dedup
- CVE-2026-72245gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path
- CVE-2026-72244gpu/buddy: bail out of try_harder when alignment cannot be honoured
- CVE-2026-72243selinux: check connect-related permissions on TCP Fast Open
- CVE-2026-72242selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()
- CVE-2026-72241leds: uleds: Fix potential buffer overread
- CVE-2026-72240mfd: sm501: Fix reference leak on failed device registration
- CVE-2026-72239x86/virt/sev: Revert "Drop WBINVD before setting MSR_AMD64_SYSCFG_SNP_EN"
- CVE-2026-72238x86/boot: Validate console=uart8250 baud rate to fix early boot hang
- CVE-2026-72237perf/x86/amd/brs: Fix kernel address leakage
- CVE-2026-72236s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()
- CVE-2026-72235batman-adv: retrieve ethhdr after potential skb realloc on RX
- CVE-2026-72234batman-adv: access unicast_ttvn skb->data only after skb realloc
- CVE-2026-72233batman-adv: bla: reacquire gw address after skb realloc
- CVE-2026-72232batman-adv: ensure minimal ethernet header on TX
- CVE-2026-72231batman-adv: tt: avoid request storms during pending request
- CVE-2026-72230batman-adv: frag: free unfragmentable packet
- CVE-2026-72229batman-adv: clean untagged VLAN on netdev registration failure