Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-72198ntfs: reject non-resident records for resident-only attributes
- CVE-2026-72197fs/ntfs3: bound DeleteIndexEntryAllocation memmove length
- CVE-2026-72196fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass
- CVE-2026-72195fs/ntfs3: bound attr_off in UpdateResidentValue against data_off
- CVE-2026-72194fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow
- CVE-2026-72193ntfs3: cap RESTART_TABLE free-chain walker at rt->used
- CVE-2026-72192ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head
- CVE-2026-72191ntfs3: validate split-point offset in indx_insert_into_buffer
- CVE-2026-72190ntfs: fix mrec_lock ABBA deadlock in rename
- CVE-2026-72189ntfs: fail attrlist updates when the superblock is inactive
- CVE-2026-72188ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name()
- CVE-2026-72187ntfs: avoid self-deadlock during inode eviction
- CVE-2026-72186ntfs: make system files immutable to prevent corruption
- CVE-2026-72185ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock()
- CVE-2026-72184ntfs: fix hole runlist memory leak in insert range error path
- CVE-2026-72183landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path
- CVE-2026-72182power: supply: charger-manager: fix refcount leak in is_full_charged()
- CVE-2026-72181mips: sched: Fix CPUMASK_OFFSTACK memory corruption
- CVE-2026-72180mm/huge_memory: preserve pmd_swp_uffd_wp on device-private PMD downgrade
- CVE-2026-72179riscv: cacheinfo: Fix node reference leak in populate_cache_leaves
- CVE-2026-72178mm/damon/core: always put unsuccessfully committed target pids
- CVE-2026-72177mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs()
- CVE-2026-72176mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error
- CVE-2026-72175fs/proc/task_mmu: fix make_uffd_wp_huge_pte() prot-update race
- CVE-2026-72174fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole()
- CVE-2026-72173fs/proc/task_mmu: do not warn on seeing non-migration pmd entry
- CVE-2026-72172mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE
- CVE-2026-72171mtd: slram: remove failed entries from the device list
- CVE-2026-721709p: skip nlink update in cacheless mode to fix WARN_ON
- CVE-2026-72169kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES