Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-68194wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses
- CVE-2026-68193wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses
- CVE-2026-68192wifi: brcmfmac: make release_scratchbuffers idempotent
- CVE-2026-68191wifi: ath12k: fix NULL pointer dereference in rhash table destroy
- CVE-2026-68190staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()
- CVE-2026-68189Bluetooth: hci_sync: Protect UUID list traversal
- CVE-2026-68188Bluetooth: RFCOMM: Fix session UAF in set_termios
- CVE-2026-68187exec: fix unsigned loop counter wrap in transfer_args_to_stack()
- CVE-2026-68186binfmt_misc: set have_execfd only once the interpreter is opened
- CVE-2026-68185LoongArch: Move jump_label_init() before parse_early_param()
- CVE-2026-68184cdrom: fix stack out-of-bounds read in CDROMVOLCTRL
- CVE-2026-68183firmware: stratix10-svc: fix memory leaks and list corruption bugs
- CVE-2026-68182comedi: comedi_parport: deal with premature interrupt
- CVE-2026-68181mei: bus: access mei_device under device_lock on cleanup
- CVE-2026-68180intel_th: fix MSC output device reference leak
- CVE-2026-68179misc: nsm: only unlock nsm_dev on post-lock error paths
- CVE-2026-68178misc: nsm: pin the module while the device is open
- CVE-2026-68177tracing: Delay module ref count for "enable_event" trigger
- CVE-2026-68176tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev
- CVE-2026-68175tracing: Fix resource leak on mmiotrace trace_pipe close
- CVE-2026-68174tracing: Fix union collision of module and refcnt for dynamic events
- CVE-2026-68173ublk: wait on ublk_dev_ready() instead of ub->completion
- CVE-2026-68172arm64: make huge_ptep_get handled unaligned addresses
- CVE-2026-68170mptcp: fix stale skb->sk reference on subflow close
- CVE-2026-68169mptcp: pm: userspace: fix use-after-free in get_local_id
- CVE-2026-68168afs: Fix afs_edit_dir_remove() to get, not find, block 0
- CVE-2026-68167btrfs: do not try compression for data reloc inodes
- CVE-2026-68166userfaultfd: prevent registration of special VMAs
- CVE-2026-68165mm/damon/core: validate ranges in damon_set_regions()
- CVE-2026-68164mm/damon/core: disallow overlapping input ranges for damon_set_regions()