Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-68103drm/amdgpu: reject mapping a reserved doorbell to a new queue
- CVE-2026-68102drm/amdgpu: fix aperture mapping leak
- CVE-2026-68100ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl
- CVE-2026-68099ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL
- CVE-2026-68098ksmbd: bound DACL dedup walk to copied ACEs
- CVE-2026-68097ksmbd: validate ACE size against SID sub-authorities
- CVE-2026-68096audit: fix recursive locking deadlock in audit_dupe_exe()
- CVE-2026-68095fuse-uring: fix race between registration and connection abortion
- CVE-2026-68094sched_ext: Preserve rq tracking across local DSQ dispatch
- CVE-2026-68093KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug
- CVE-2026-68092time/jiffies: Register jiffies clocksource before usage
- CVE-2026-68091HID: wacom: stop hardware after post-start probe failures
- CVE-2026-68090debugobjects: Plug race against a concurrent OOM disable
- CVE-2026-68089iio: core: fix uninitialized data in debugfs
- CVE-2026-68088usb: gadget: function: rndis: add length check to response query
- CVE-2026-68087HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()
- CVE-2026-68086mm/khugepaged: write all dirty file folios when collapsing
- CVE-2026-68085Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled
- CVE-2026-68084staging: vme_user: fix location monitor leak in tsi148 bridge
- CVE-2026-68083ksmbd: fix path resolution in ksmbd_vfs_kern_path_create
- CVE-2026-68082libceph: fix two unsafe bare decodes in decode_lockers()
- CVE-2026-68081KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state
- CVE-2026-68480x86/bugs: Make Safe-RET robust against interrupt injection
- CVE-2026-64604KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode
- CVE-2026-64603platform/x86: intel-hid: Protect ACPI notify handler against recursion
- CVE-2026-64602iio: adc: spear: Initialize completion before requesting IRQ
- CVE-2026-64601ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission
- CVE-2026-64599crypto: amlogic - avoid double cleanup in meson_crypto_probe()
- CVE-2026-64598smb/client: Fix error code in smb2_aead_req_alloc()
- CVE-2026-64597smb: client: fix double-free in SMB2_close() replay