Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-68314net: mctp i3c: clean up notifier and buses if driver register fails
- CVE-2026-68313tipc: fix infinite loop in __tipc_nl_compat_dumpit
- CVE-2026-68312cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths
- CVE-2026-68311wifi: mt76: mt7925: guard link STA in decap offload
- CVE-2026-68310wifi: mt76: mt7915: guard HE capability lookups
- CVE-2026-68309wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()
- CVE-2026-68308wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap()
- CVE-2026-68307wifi: mt76: mt7925: fix crash in reset link replay
- CVE-2026-68306wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()
- CVE-2026-68305drm/xe/vf: Add drm_dev guards when detaching CCS read/write buffers
- CVE-2026-68304wifi: brcmfmac: fix 802.1X-SHA256 call trace warning
- CVE-2026-68303drm/vc4: hvs/v3d: Fix null dereference in unbind
- CVE-2026-68302amt: re-read skb header pointers after every pull
- CVE-2026-68301net: hsr: fix memory leak on slave unregistration by removing synced VLANs
- CVE-2026-68300sctp: auth: verify auth requirement when auth_chunk is NULL
- CVE-2026-68299vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets
- CVE-2026-68298drm/xe/vm: Fix SVM leak on resv obj alloc failure in xe_vm_create()
- CVE-2026-68297tipc: fix u16 MTU truncation in media and bearer MTU validation
- CVE-2026-68296net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM
- CVE-2026-68295LoongArch: BPF: Zero-extend signed ALU32 div/mod results
- CVE-2026-68294net: qrtr: restrict socket creation to the initial network namespace
- CVE-2026-68293net/mlx5: Fix MCIA register buffer overflow on 32 dword reads
- CVE-2026-68292ice: prevent tstamp ring allocation for non-PF VSI types
- CVE-2026-68291idpf: fix max_vport related crash on allocation error during init
- CVE-2026-68290rds: tcp: unregister sysctl before tearing down listen socket
- CVE-2026-68289tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream()
- CVE-2026-68288net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD
- CVE-2026-68287drop_monitor: fix size calculations for 64-bit attributes
- CVE-2026-68286drop_monitor: perform u64_stats updates under IRQ-disabled section
- CVE-2026-68285LoongArch: BPF: Fix memory leak in bpf_jit_free()