Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-72108dm thin metadata: fix metadata snapshot consistency on commit failure
- CVE-2026-72107dm era: fix out-of-bounds memory access for non-zero start sector
- CVE-2026-72106dm-ioctl: fix a possible overflow in list_version_get_info
- CVE-2026-72105dm-log: fix a bitset_size overflow on 32bit machines
- CVE-2026-72104dm-pcache: reject option groups without values
- CVE-2026-72103dm: avoid leaking the caller's thread keyring via the table device file
- CVE-2026-72102dm_early_create: fix freeing used table on dm_resume failure
- CVE-2026-72101dm-integrity: fix leaking uninitialized kernel memory
- CVE-2026-72100dm-integrity: fix a bug if the bio is out of limits
- CVE-2026-72099dm-integrity: don't increment hash_offset twice
- CVE-2026-72098dm-verity: fix buffer overflow in FEC calculation
- CVE-2026-72097dm-verity: fix a possible NULL pointer dereference
- CVE-2026-72096dm-verity: make error counter atomic
- CVE-2026-72095dma-fence: Make dma_fence_dedup_array() robust against 0-count input
- CVE-2026-72094dma-buf: dma-fence: Fix potential NULL pointer dereference
- CVE-2026-72093accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap()
- CVE-2026-72092accel/amdxdna: reject command submission on devices without a submit op
- CVE-2026-72091accel/amdxdna: reject user command submission without a command BO
- CVE-2026-72090accel/amdxdna: Use caller client for debug BO sync
- CVE-2026-72089accel/ivpu: Reject firmware log with size smaller than header
- CVE-2026-72088scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path
- CVE-2026-72087scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()
- CVE-2026-72086scsi: xen: scsiback: Free the command tag on the TMR submit-failure path
- CVE-2026-72085scsi: xen: scsiback: Free unsubmitted command instead of double-putting it
- CVE-2026-72084scsi: target: Bound PR-OUT TransportID parsing to the received buffer
- CVE-2026-72083scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE
- CVE-2026-72082scsi: elx: efct: Fix refcount leak in efct_hw_io_abort()
- CVE-2026-72081scsi: elx: efct: Fix I/O leak on unsupported additional CDB
- CVE-2026-72080fs/resctrl: Fix use-after-free during unmount
- CVE-2026-72079Input: ims-pcu - fix use-after-free and double-free in disconnect