Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-68163mm/page_vma_mapped: fix device-private PMD handling
- CVE-2026-68162sctp: avoid auth_enable sysctl UAF during netns teardown
- CVE-2026-68161sctp: close UDP tunnel sockets during netns teardown
- CVE-2026-68160ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
- CVE-2026-68159libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE
- CVE-2026-68158libceph: Fix multiplication overflow in decode_new_up_state_weight()
- CVE-2026-68157libceph: guard missing CRUSH type name lookup
- CVE-2026-68156libceph: refresh auth->authorizer_buf{,_len} after authorizer update
- CVE-2026-68155libceph: Reject monmaps advertising zero monitors
- CVE-2026-68154libceph: reject zero bucket types in crush_decode
- CVE-2026-68153libceph: remove debugfs files before client teardown
- CVE-2026-68152amt: fix use-after-free in AMT delayed works
- CVE-2026-68151binfmt_elf_fdpic: only honour the first PT_INTERP
- CVE-2026-68150fs/super: fix emergency thaw double-unlock of s_umount
- CVE-2026-68149fs: preserve ACL_DONT_CACHE state in forget_cached_acl()
- CVE-2026-68148fscrypt: Add missing superblock check in find_or_insert_direct_key()
- CVE-2026-68147fscrypt: Avoid dynamic allocation in fscrypt_get_devices()
- CVE-2026-68146ftrace: Add global mutex to serialize trace_parser access
- CVE-2026-68145iomap: fix out-of-bounds bitmap_set() with zero-length range
- CVE-2026-68144phonet: pep: fix use-after-free in pep_get_sb()
- CVE-2026-68143net: slip: serialize receive against buffer reallocation
- CVE-2026-68142geneve: require CAP_NET_ADMIN in the device netns for changelink
- CVE-2026-68141net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()
- CVE-2026-68140net/iucv: fix use-after-free of a severed iucv_path
- CVE-2026-68139net/mlx5e: Use sender devcom for MPV master-up
- CVE-2026-68138net/sched: serialize qdisc_rtab_list against concurrent get/put
- CVE-2026-68137net/x25: fix use-after-free in x25_kill_by_neigh()
- CVE-2026-68136net: gro: fix double aggregation of flush-marked skbs
- CVE-2026-68135net: hip04: fix RX buffer leak on build_skb failure
- CVE-2026-68134ptp: ptp_s390: Add missing facility check