Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-72078Input: ims-pcu - validate control endpoint type
- CVE-2026-72077Input: ims-pcu - fix firmware leak in async update
- CVE-2026-72076Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging
- CVE-2026-72075Input: ims-pcu - fix race condition in reset_device sysfs callback
- CVE-2026-72074Input: ims-pcu - fix type confusion in CDC union descriptor parsing
- CVE-2026-72073mmc: vub300: fix use-after-free on probe failure
- CVE-2026-72072net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete
- CVE-2026-72071tracing/user_events: Fix use-after-free in user_event_mm_dup()
- CVE-2026-72070wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()
- CVE-2026-72069locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()
- CVE-2026-72068posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()
- CVE-2026-72067cpu: hotplug: Preserve per instance callback errors
- CVE-2026-72066cpu: hotplug: Bound hotplug states sysfs output
- CVE-2026-72065net: mana: Validate the packet length reported by the NIC
- CVE-2026-72064net: mana: Sync page pool RX frags for CPU
- CVE-2026-72063gpio: tegra: do not call pinctrl for GPIO direction
- CVE-2026-72062gpio: mt7621: avoid corruption of shared interrupt trigger state
- CVE-2026-72061net: sit: require CAP_NET_ADMIN in the device netns for changelink
- CVE-2026-72060net: ethernet: ti: icssg: guard PA stat lookups
- CVE-2026-72059net: wwan: t7xx: destroy DMA pool on CLDMA late init failure
- CVE-2026-72058net: ixp4xx_hss: fix duplicate HDLC netdev allocation
- CVE-2026-72057net/sched: act_ct: preserve tc_skb_cb across defragmentation
- CVE-2026-72056net: ena: clean up XDP TX queues when regular TX setup fails
- CVE-2026-72055net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink
- CVE-2026-72054net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink
- CVE-2026-72053net: ipip: require CAP_NET_ADMIN in the device netns for changelink
- CVE-2026-72052net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink
- CVE-2026-72051net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink
- CVE-2026-72050octeontx2-af: Free BPID bitmap on setup failure
- CVE-2026-72049ieee802154: admin-gate legacy LLSEC dump operations