Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-72048ieee802154: ca8210: fix cas_ctl leak on spi_async failure
- CVE-2026-72047ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit
- CVE-2026-72046gve: fix header buffer corruption with header-split and HW-GRO
- CVE-2026-72045octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF
- CVE-2026-72043LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect()
- CVE-2026-72042ipmi: Fix user refcount underflow in event delivery
- CVE-2026-72041espintcp: use sk_msg_free_partial to fix partial send
- CVE-2026-72040ipmi: fix refcount leak in i_ipmi_request()
- CVE-2026-72039bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()
- CVE-2026-72038net: liquidio: fix BAR resource leak on PF number failure
- CVE-2026-72037net: lan743x: Initialize eth_syslock spinlock before use
- CVE-2026-72036net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked
- CVE-2026-72035net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked
- CVE-2026-72034fhandle: reject detached mounts in capable_wrt_mount()
- CVE-2026-72033orangefs: keep the readdir entry size 64-bit in fill_from_part()
- CVE-2026-72032net/mlx5: HWS, fix matcher leak on resize target setup failure
- CVE-2026-72031ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD
- CVE-2026-72030ata: libata-core: Reject an invalid concurrent positioning ranges count
- CVE-2026-72029net: wwan: iosm: bound device offsets in the MUX downlink decoder
- CVE-2026-72028riscv: probes: save original sp in rethook trampoline
- CVE-2026-72027mm/compaction: handle free_pages_prepare() properly in compaction_free()
- CVE-2026-72026irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure
- CVE-2026-72025s390/monwriter: Reject buffer reuse with different data length
- CVE-2026-72024mac802154: remove interfaces with RCU list deletion
- CVE-2026-72023octeontx2-pf: fix SQB pointer leak on init failure
- CVE-2026-72022llc: fix SAP refcount leak in llc_ui_autobind()
- CVE-2026-72021ipvs: use parsed transport offset in SCTP state lookup
- CVE-2026-72020ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
- CVE-2026-72019macsec: don't read an unset MAC header in macsec_encrypt()
- CVE-2026-72018dibs: loopback: validate offset and size in move_data()