Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-68434serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms
- CVE-2026-68433libceph: bound get_version reply decode to front len
- CVE-2026-68432vxlan: require CAP_NET_ADMIN in the device netns for changelink
- CVE-2026-68431ksmbd: validate minimum PDU size for transform requests
- CVE-2026-68430drm/amdgpu/gfx8: drop unecessary BUG_ON()
- CVE-2026-68429drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()
- CVE-2026-68428KVM: x86/mmu: Fix use-after-free on vendor module reload
- CVE-2026-68427gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings
- CVE-2026-68426xfrm: fix stale skb->prev after async crypto steals a GSO segment
- CVE-2026-68425IB/mad: Drop unmatched RMPP responses before reassembly
- CVE-2026-68424mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy_joins()
- CVE-2026-68423mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy()
- CVE-2026-68422btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()
- CVE-2026-68421sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx()
- CVE-2026-68420xfrm: reject optional IPTFS templates in outbound policies
- CVE-2026-68419RDMA/irdma: Prevent rereg_mr for non-mem regions
- CVE-2026-68418RDMA/irdma: Prevent user-triggered null deref on QP create
- CVE-2026-68417RDMA/siw: publish QP after initialization
- CVE-2026-68416mtd: fix double free and WARN_ON in add_mtd_device() error paths
- CVE-2026-68415xfrm: clear mode callbacks after failed mode setup
- CVE-2026-68414wifi: cfg80211: cancel sched scan results work on unregister
- CVE-2026-68413wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()
- CVE-2026-68412wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()
- CVE-2026-68411wifi: mac80211_hwsim: clamp virtio RX length before skb_put
- CVE-2026-68410wifi: libertas: fix memory leak in helper_firmware_cb()
- CVE-2026-68409wifi: mac80211: defer link RX stats percpu free to RCU
- CVE-2026-68408wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock
- CVE-2026-68407wifi: nl80211: free RNR data on MBSSID mismatch
- CVE-2026-68406wifi: cfg80211: validate PMSR FTM preamble range
- CVE-2026-68405wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock