Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-72168mtd: maps: vmu-flash: fix fault in unaligned fixup
- CVE-2026-72167mtd: rawnand: pl353: fix probe resource allocation
- CVE-2026-72166net/9p: fix infinite loop in p9_client_rpc on fatal signal
- CVE-2026-72165mtd: rawnand: fix condition in 'nand_select_target()'
- CVE-2026-72164ocfs2: avoid moving extents to occupied clusters
- CVE-2026-72163ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits
- CVE-2026-72162ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_rec
- CVE-2026-72161ocfs2: add journal NULL check in ocfs2_checkpoint_inode()
- CVE-2026-72160ocfs2: reject dinodes with non-canonical i_mode type
- CVE-2026-72159ocfs2: reject non-inline dinodes with i_size and zero i_clusters
- CVE-2026-72158fpga: dfl: add bounds check in dfh_get_param_size()
- CVE-2026-72157net: thunderbolt: Fix frags[] overflow by bounding frame_count
- CVE-2026-72156fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header()
- CVE-2026-72155mtd: spi-nor: swp: Improve locking user experience
- CVE-2026-72154openrisc: Fix jump_label smp syncing
- CVE-2026-72153irqchip/crossbar: Use correct index in crossbar_domain_free()
- CVE-2026-72152tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()
- CVE-2026-72151tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_salt
- CVE-2026-72150sunrpc: fix uninitialized xprt_create_args structure
- CVE-2026-72149dmaengine: tegra: Fix burst size calculation
- CVE-2026-72148dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK
- CVE-2026-72147dmaengine: dw-edma-pcie: Reject devices without driver data
- CVE-2026-72146dmaengine: sh: rz-dmac: Move interrupt request after everything is set up
- CVE-2026-72145platform/x86/intel/tpmi: use cleanup helpers in mem_write()
- CVE-2026-72144platform/x86: dell-laptop: fix missing cleanups in init error path
- CVE-2026-72143platform/x86: ISST: Restore SST-PP control to all domains
- CVE-2026-72142i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)
- CVE-2026-72141i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ)
- CVE-2026-72140i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()
- CVE-2026-72139tcp: defer md5sig_info kfree past RCU grace period in tcp_connect