Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98861fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching()
- CVE-2026-98860HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request
- CVE-2026-98859HID: multitouch: stop the release timer from being rearmed on remove
- CVE-2026-98858io_uring: fix task_work add use-after-free with SQPOLL
- CVE-2026-98857ipvs: bound LBLCR and LBLC cache growth
- CVE-2026-98856kprobes: Skip disarmed probes when checking optkprobe overlap
- CVE-2026-98855of/overlay: put property on deadprops only after changeset add succeeds
- CVE-2026-98854of/overlay: only treat a positive changeset id as registered
- CVE-2026-98853net: gso: limit recursive IP-in-IP segmentation
- CVE-2026-98852net: extend IPv6 exthdr detection of tunneled packets
- CVE-2026-98851netfilter: nft_flow_offload: drop flowtable reference on init error path
- CVE-2026-98850net/packet: prevent TX_RING byte count overflow
- CVE-2026-98849pfcp: fix socket lifetime on netdevice registration failure
- CVE-2026-98848rtc: ac100: Assign .num before accessing .hws
- CVE-2026-98847rtc: spear: initialize IRQ state before requesting alarm IRQ
- CVE-2026-98846sctp: check RCV_SHUTDOWN after the sendmsg connect wait
- CVE-2026-98845tpm: Disable TPM on null key name mismatch
- CVE-2026-98844netfs: clear post-EOF pagecache when extending a file via write
- CVE-2026-98843netfs: zero gaps in read-gaps folio to avoid writing back stale data
- CVE-2026-98842module: fix lost error code from codetag_load_module()
- CVE-2026-98841virt: vmgenid: set driver_data before registering notification handlers
- CVE-2026-98840vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF
- CVE-2026-98839vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection()
- CVE-2026-98838vt: skip screen update for DEC alignment test on backgroup consoles
- CVE-2026-98837ALSA: caiaq: unregister the input device when probe fails
- CVE-2026-98836ALSA: line6: reject oversized playback packets
- CVE-2026-98835iio: accel: kionix-kx022a: Fix array boundary check
- CVE-2026-98834mtd: core: avoid double-free of OTP NVMEM device
- CVE-2026-98833mtd: core: call _get_device() with the master MTD
- CVE-2026-98832blk-cgroup: save IRQ state in blkg_tryget_closest()