Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98831of/overlay: don't leak fragment references when changeset init fails
- CVE-2026-98830wifi: wfx: validate MIB read length before copying to caller
- CVE-2026-98829wifi: mac80211: drop oversized fragments to avoid extra_len overflow
- CVE-2026-98828wifi: ath9k: reject short WMI command responses
- CVE-2026-98827wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE
- CVE-2026-98826rtc: ac100: Fix clock provider use-after-free on probe failure
- CVE-2026-98825rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe()
- CVE-2026-98824wifi: mac80211: validate TX status rate metadata
- CVE-2026-98823wifi: cfg80211: preserve hidden-group beacon IE ownership
- CVE-2026-98822wifi: mac80211: prevent AP VLAN tx from other interfaces
- CVE-2026-98821block: reject polled dio with user integrity metadata
- CVE-2026-98820blk-mq: set RQF_USE_SCHED when the operation is known
- CVE-2026-98819Bluetooth: btintel: validate DDC record lengths
- CVE-2026-98818mm/slab: do not wake up kswapd in __kfree_rcu_sheaf()
- CVE-2026-98817ASoC: SDCA: Add better pm_runtime error handling in func probe
- CVE-2026-98816bpf: Fix overflow of jump offset in constant blinding
- CVE-2026-98815nvme: fix cdev lifetime
- CVE-2026-98814nvme: fix command effects log lifetime for multipath heads
- CVE-2026-98813bpf: Hold map BTF for the memory allocator destructor record
- CVE-2026-98812net/mctp: publish the mctp_dev only after it is initialised
- CVE-2026-98811net/sched: cls_api: reclaim an empty proto on the error path
- CVE-2026-98810wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue()
- CVE-2026-98809Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister
- CVE-2026-98808net: systemport: Fix buffer overflow in bcm_sysport_get_stats()
- CVE-2026-98807net/mlx5: Fix slab-out-of-bounds when handling team device events
- CVE-2026-98806octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled
- CVE-2026-98805tipc: prevent GCM nonce reuse on peer key changes
- CVE-2026-98804net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk()
- CVE-2026-98803net: stmmac: fix rx Scatter-Gather support
- CVE-2026-98802seg6: ensure packet data is writable before modifying SRH and IPv6 DA