Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-72138xen/gntdev: fix error handling in ioctl
- CVE-2026-72137xfrm: nat_keepalive: avoid double free on send error
- CVE-2026-72136xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink
- CVE-2026-72135tpm: Make the TPM character devices non-seekable
- CVE-2026-72134spi: imx: reconfigure for PIO when DMA cannot be started
- CVE-2026-72133spi: uniphier: Fix completion initialization order before devm_request_irq()
- CVE-2026-72132NFS: Charge unstable writes by request size, not folio size
- CVE-2026-72131nvme-apple: Prevent shared tags across queues on Apple A11
- CVE-2026-72130nvmet-auth: reject short AUTH_RECEIVE buffers
- CVE-2026-72129nvmet-rdma: handle inline data with a nonzero offset
- CVE-2026-72128nvmet: fix refcount leak in nvmet_sq_create()
- CVE-2026-72127netdev-genl: report NAPI thread PID in the caller's pid namespace
- CVE-2026-72126can: isotp: use unconditional synchronize_rcu() in isotp_release()
- CVE-2026-72125can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER
- CVE-2026-72124can: isotp: serialize TX state transitions under so->rx_lock
- CVE-2026-72123can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF
- CVE-2026-72122can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure
- CVE-2026-72121can: bcm: add locking when updating filter and timer values
- CVE-2026-72120can: bcm: add missing rcu list annotations and operations
- CVE-2026-72119can: bcm: extend bcm_tx_lock usage for data and timer updates
- CVE-2026-72118can: bcm: fix CAN frame rx/tx statistics
- CVE-2026-72117can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler()
- CVE-2026-72116can: bcm: fix stale rx/tx ops after device removal
- CVE-2026-72115can: bcm: track a single source interface for ANYDEV timeout/throttle ops
- CVE-2026-72114can: bcm: validate frame length in bcm_rx_setup() for RTR replies
- CVE-2026-72113can: bcm: add missing device refcount for CAN filter removal
- CVE-2026-72112io_uring/bpf-ops: reject re-registration of an already-bound ops
- CVE-2026-72111bpf: Reset register bounds before narrowing retval range in check_mem_access()
- CVE-2026-72110bpf,fork: wipe ->bpf_storage before bailouts that access it
- CVE-2026-72109net: sparx5: unregister blocking notifier on init failure