Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-64596libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo()
- CVE-2026-64595HID: hid-lenovo-go: cancel cfg_setup work in hid_go_cfg_remove()
- CVE-2026-64594usb: gadget: f_fs: initialize reset_work at allocation time
- CVE-2026-64593btrfs: do not trim a device which is not writeable
- CVE-2026-64592riscv: mm: Unconditionally sfence.vma for spurious fault
- CVE-2026-64591iommu/vt-d: Avoid WARNING in sva unbind path
- CVE-2026-64590dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning
- CVE-2026-64589i2c: core: fix NULL-deref on adapter registration failure
- CVE-2026-64588fuse-uring: fix data races on ring->ready
- CVE-2026-64587net: ethernet: arc: emac: quiesce interrupts before requesting IRQ
- CVE-2026-64586wifi: brcmfmac: drain bus_reset work on device removal
- CVE-2026-64585can: esd_usb: kill anchored URBs before freeing netdevs
- CVE-2026-64584usb: gadget: f_midi: cancel pending IN work before freeing the midi object
- CVE-2026-64583usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown
- CVE-2026-64582RDMA/rxe: Fix a use-after-free problem in rxe_mmap
- CVE-2026-64581xfrm: fix sk_dst_cache double-free in xfrm_user_policy()
- CVE-2026-64580xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()
- CVE-2026-64579xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert
- CVE-2026-64578ksmbd: validate compound request size before reading StructureSize2
- CVE-2026-64577gtp: check skb_pull_data() return in gtp1u_send_echo_resp()
- CVE-2026-64576nexthop: initialize extack in nh_res_bucket_migrate()
- CVE-2026-64575bpf: tcp: fix double sock release on batch realloc
- CVE-2026-64574wifi: mac80211: tear down new links on vif update error path
- CVE-2026-64573Bluetooth: qca: fix NVM tag length underflow in TLV parser
- CVE-2026-64572ipv4: fib: free fib_alias with kfree_rcu() on insert error path
- CVE-2026-64571wifi: p54: validate RX frame length in p54_rx_eeprom_readback()
- CVE-2026-64570wifi: mac80211: fix fils_discovery double free on alloc failure
- CVE-2026-64569mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n
- CVE-2026-64568wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure
- CVE-2026-64567btrfs: reject free space cache with more entries than pages