Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-68374usb: core: sysfs: add lock to bos_descriptors_read()
- CVE-2026-68373wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()
- CVE-2026-68372usb: core: port: Deattach Type-C connector on component unbind
- CVE-2026-68371usb: musb: omap2430: Do not put borrowed of_node in probe
- CVE-2026-68370usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
- CVE-2026-68369usb: gadget: printer: fix infinite loop in printer_read()
- CVE-2026-68368usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()
- CVE-2026-68367usb: gadget: f_tcm: synchronize delayed set_alt with teardown
- CVE-2026-68366usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer
- CVE-2026-68365USB: serial: io_edgeport: cap received transmit credits
- CVE-2026-68364drm/amd/display: Fix ISM dc_lock deadlock during suspend
- CVE-2026-68363wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request
- CVE-2026-68362wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin
- CVE-2026-68361hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
- CVE-2026-68360hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop
- CVE-2026-68359hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop
- CVE-2026-68358hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop
- CVE-2026-68357watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()
- CVE-2026-68356watchdog: airoha: Prevent division by zero when clock frequency is zero
- CVE-2026-68355wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()
- CVE-2026-68354firewire: net: Fix fragmented datagram reassembly
- CVE-2026-68353wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler
- CVE-2026-68352wifi: ath6kl: fix OOB read from firmware IE lengths in connect event
- CVE-2026-68351wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read
- CVE-2026-68350wifi: carl9170: fix OOB read from off-by-two in TX status handler
- CVE-2026-68349wifi: carl9170: fix buffer overflow in rx_stream failover path
- CVE-2026-68348ASoC: tas2781: bound firmware description string parsing
- CVE-2026-68347iommu/amd: Fix IRQ unsafe locking in gdom allocation
- CVE-2026-68346ALSA: hda: cs35l41: validate and free ACPI mute object
- CVE-2026-68345arm_mpam: guard MBWU state before adding it to garbage