Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-72017net: macb: drop in-flight Tx SKBs on close
- CVE-2026-72016cpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable()
- CVE-2026-72015fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list
- CVE-2026-72014drbd: reject data replies with an out-of-range payload size
- CVE-2026-72013riscv: Prevent NULL pointer dereference in machine_kexec_prepare()
- CVE-2026-72012tracing/osnoise: Call synchronize_rcu() when unregistering
- CVE-2026-72011s390/diag: Add missing array_index_nospec() call to memtop_get_page_count()
- CVE-2026-72010cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed
- CVE-2026-72009pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI
- CVE-2026-72008pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check
- CVE-2026-72007pmdomain: imx: Fix i.MX8MP VC8000E power up sequence
- CVE-2026-72006net/mlx5: free mlx5_st_idx_data on final dealloc
- CVE-2026-72005wifi: rt2x00: avoid full teardown before work setup in probe
- CVE-2026-72004wifi: mac80211: fix memory leak in ieee80211_register_hw()
- CVE-2026-72003wifi: brcmfmac: cyw: fix heap overflow on a short auth frame
- CVE-2026-68479Bluetooth: btrtl: validate firmware patch bounds
- CVE-2026-68478memstick: ms_block: reject a card that reports too many blocks
- CVE-2026-68477ipvs: fix more places with wrong ipv6 transport offsets
- CVE-2026-68476ipvs: reload ip header after head reallocation
- CVE-2026-68475reset: sunxi: fix memory region leak on ioremap failure
- CVE-2026-68474powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()
- CVE-2026-68473powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address()
- CVE-2026-68472wifi: cfg80211: validate EHT MLE before MLD ID read
- CVE-2026-68471wifi: ieee80211: validate MLE common info length
- CVE-2026-68470wifi: mac80211: validate extension-frame layout before RX
- CVE-2026-68469wifi: mwifiex: fix permanently busy scans after multiple roam iterations
- CVE-2026-68468mtd: virt-concat: free duplicate generated name
- CVE-2026-68467mtd: mchp23k256: use SPI match data for chip caps
- CVE-2026-68466mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout
- CVE-2026-68465mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore