Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-68224media: mali-c55: Fix possible ERR_PTR in enable_streams
- CVE-2026-68223media: meson: vdec: Fix memory leak in error path of vdec_open
- CVE-2026-68222media: msi2500: Return queued buffers on start_streaming() failure
- CVE-2026-68221media: nuvoton: npcm-video: fix memory leaks in probe and remove
- CVE-2026-68220media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe
- CVE-2026-68219media: nxp: imx8-isi: Fix potential out-of-bounds issues
- CVE-2026-68218media: pci: dm1105: Free allocated workqueue
- CVE-2026-68217media: pwc: Drain fill_buf on start_streaming() failure
- CVE-2026-68216media: pwc: Return queued buffers on start_streaming() failure
- CVE-2026-68215media: radio-si476x: Unregister v4l2_device on probe failure
- CVE-2026-68214media: rtl2832: fix use-after-free in rtl2832_remove()
- CVE-2026-68213media: rtl2832_sdr: Return queued buffers on start_streaming() failure
- CVE-2026-68212media: saa7134: Fix a possible memory leak in saa7134_video_init1
- CVE-2026-68211media: stm32-dcmipp: Return queued buffers on start_streaming() failure
- CVE-2026-68210media: stm32: dcmi: unregister notifier on probe failure
- CVE-2026-68209media: sun4i-csi: Return queued buffers on start_streaming() failure
- CVE-2026-68208media: ti: vpe: Fix the error code of devm_kzalloc() in vip_probe_slice()
- CVE-2026-68207media: ti: vpe: unwind v4l2 device registration on probe error
- CVE-2026-68206media: v4l2-ctrls: validate HEVC active reference counts
- CVE-2026-68205media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()
- CVE-2026-68204media: vivid: check for vb2_is_busy() when toggling caps
- CVE-2026-68203media: vivid: fix cleanup bugs in vivid_init()
- CVE-2026-68202ALSA: seq: close a re-opened queue timer in the destructor
- CVE-2026-68201ALSA: timer: drain a slave's callback before its master detaches it
- CVE-2026-68200ALSA: timer: don't re-enter an instance callback that is still running
- CVE-2026-68199wifi: ath6kl: fix OOB access from firmware ADDBA window size
- CVE-2026-68198wifi: ath6kl: fix use-after-free in aggr_reset_state()
- CVE-2026-68197wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper
- CVE-2026-68196wifi: wilc1000: validate assoc response length before subtracting header
- CVE-2026-68195wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses