Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-72228batman-adv: frag: fix primary_if leak on failed linearization
- CVE-2026-72227batman-adv: mcast: avoid OOB read of num_dests header
- CVE-2026-72226batman-adv: tt: prevent TVLV OOB check overflow
- CVE-2026-72225jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit()
- CVE-2026-72224nvdimm/btt: Free arenas on btt_init() error paths
- CVE-2026-72223nvdimm/btt: Free arena sub-allocations on discover_arenas() error path
- CVE-2026-72222sunrpc: pin svc_xprt across the asynchronous TLS handshake callback
- CVE-2026-72221sunrpc: wait for in-flight TLS handshake callback when cancel loses race
- CVE-2026-72220sunrpc: harden rq_procinfo lifecycle to prevent double-free
- CVE-2026-72219lockd: Plug nlm_file leak when nlm_do_fopen() fails
- CVE-2026-72218lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure
- CVE-2026-72217SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing
- CVE-2026-72216remoteproc: qcom: Fix leak when custom dump_segments addition fails
- CVE-2026-72215MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf()
- CVE-2026-72214power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak
- CVE-2026-72213mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch
- CVE-2026-72212mm/memory_hotplug: fix incorrect altmap passing in error path
- CVE-2026-72211ntfs: grow index root value before reparent header update
- CVE-2026-72210ntfs: fix off-by-one in mapping pairs decoding bounds checks
- CVE-2026-72209ntfs: validate attribute values on lookup
- CVE-2026-72208ntfs: add bounds check before accessing EA entries
- CVE-2026-72207ntfs: not change 0-byte $DATA attribute to non-resident
- CVE-2026-72206ntfs: validate index block header more strictly
- CVE-2026-72205ntfs: free volume-wide resources on fill_super failure
- CVE-2026-72204ntfs: centalize $INDEX_ROOT header validation
- CVE-2026-72203ntfs: skip extent mft records in writeback to prevent deadlock
- CVE-2026-72202ntfs: avoid heap allocation for free-cluster readahead state
- CVE-2026-72201ntfs: validate index entries on reading
- CVE-2026-72200ntfs: detect mapping-pairs LCN accumulator overflow
- CVE-2026-72199ntfs: validate resident index root values on lookup