Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-68254drm/i915/vrr: require valid min/max vfreq for VRR
- CVE-2026-68253drm/i915/hdcp: check streams[] bounds before overflow
- CVE-2026-68252drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON()
- CVE-2026-68251drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON()
- CVE-2026-68250drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()
- CVE-2026-68249drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON()
- CVE-2026-68248drm/i915: Return NULL on error in active_instance
- CVE-2026-68247drm/i915/bios: range check LFP Data Block panel_type2
- CVE-2026-68246drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON()
- CVE-2026-68245drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()
- CVE-2026-68244drm/i915/gem: Do not leak siblings[] on proto context error
- CVE-2026-68243drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU
- CVE-2026-68242drm/i915/gt: Fix NULL deref on sched_engine alloc failure
- CVE-2026-68241drm/i915/mst: limit DP MST ESI service loop
- CVE-2026-68240drm/gpusvm: publish dpagemap early to avoid device mapping leak on error
- CVE-2026-68239drm/ttm: Account for NULL and handle pages in ttm_pool_backup
- CVE-2026-68238drm/amdgpu: Release VFCT ACPI table reference
- CVE-2026-68237drm/amdgpu/userq: fix indefinite fence wait during GPU reset
- CVE-2026-68236drm/amd/display: set new_stream to NULL after release
- CVE-2026-68235drm/amd/display: dce100: skip non-DP stream encoders for DP MST
- CVE-2026-68234drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved
- CVE-2026-68233drm/vc4: Shut down BO cache timer before teardown
- CVE-2026-68232drm/gpusvm: Fix MM reference leak in drm_gpusvm_range_evict
- CVE-2026-68231media: airspy: Return queued buffers on start_streaming() failure
- CVE-2026-68230media: amlogic-c3: Add validations for ae and awb config
- CVE-2026-68229media: cedrus: skip invalid H.264 reference list entries
- CVE-2026-68228media: chips-media: wave5: Move src_buf Removal to finish_encode
- CVE-2026-68227media: cx231xx: fix devres lifetime
- CVE-2026-68226media: cx23885: add ioremap return check and cleanup
- CVE-2026-68225media: i2c: alvium: fix critical pointer access in alvium_ctrl_init