Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-68404wifi: cfg80211: use wiphy work for socket owner autodisconnect
- CVE-2026-68403wifi: brcmfmac: initialize SDIO data work before cleanup
- CVE-2026-68402wifi: cfg80211: bound element ID read when checking non-inheritance
- CVE-2026-68401firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit()
- CVE-2026-68400firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation
- CVE-2026-68399bpf: Fix UAF in sock clone early bailouts
- CVE-2026-68398ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF
- CVE-2026-68397net/iucv: take a reference on the socket found in afiucv_hs_rcv()
- CVE-2026-68396scsi: core: wake eh reliably when using scsi_schedule_eh
- CVE-2026-68395ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered
- CVE-2026-68394Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update
- CVE-2026-68393Bluetooth: hci_sync: extend conn_hash lookup critical sections
- CVE-2026-68392Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync
- CVE-2026-68391Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds
- CVE-2026-68390Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups
- CVE-2026-68389Bluetooth: hci_qca: Clear memdump state on invalid dump size
- CVE-2026-68388smb/client: handle overlapping allocated ranges in fallocate
- CVE-2026-68387can: raw: add locking for raw flags bitfield
- CVE-2026-68386bpf, sockmap: Reject unhashed UDP sockets on sockmap update
- CVE-2026-68385s390/checksum: Fix csum_partial() without vector facility
- CVE-2026-68384drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves
- CVE-2026-68383drm/xe/guc: Keep scheduler timeline name alive
- CVE-2026-68382drm/xe/guc: Hold device ref until queue teardown completes
- CVE-2026-68381ksmbd: pin conn during async oplock break notification
- CVE-2026-68380accel/amdxdna: Fix use-after-free of mm_struct in job scheduler
- CVE-2026-68379tcp: fix TIME_WAIT socket reference leak on PSP policy failure
- CVE-2026-68378dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync()
- CVE-2026-68377net/sched: act_tunnel_key: Defer dst_release to RCU callback
- CVE-2026-68376sctp: fix auth_hmacs array size in struct sctp_cookie
- CVE-2026-68375bnxt_en: Handle partially initialized auxiliary devices