Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-64566xfrm: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_frags()
- CVE-2026-64565Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()
- CVE-2026-64564sctp: don't free the ASCONF's own transport in DEL-IP processing
- CVE-2026-64563rhashtable: clear stale iter->p on table restart
- CVE-2026-64562KVM: nVMX: Hide shadow VMCS right after VMCLEAR
- CVE-2026-64561KVM: x86: Check for invalid/obsolete root *after* making MMU pages available
- CVE-2022-4994KVM: x86: wean fast IN from emulator_pio_in
- CVE-2026-64560posix-cpu-timers: Prevent UAF caused by non-leader exec() race
- CVE-2026-64559s390/pkey: Check length in PKEY_VERIFYPROTK ioctl
- CVE-2026-64558s390/pkey: Check length in pkey_pckmo handler implementation
- CVE-2026-64557Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()
- CVE-2026-64556perf/core: Detach event groups during remove_on_exec
- CVE-2026-64555KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops()
- CVE-2026-64554netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
- CVE-2026-64553net: psample: fix info leak in PSAMPLE_ATTR_DATA
- CVE-2026-64552virtio-net: fix len check in receive_big()
- CVE-2026-64551sctp: validate STALE_COOKIE cause length before reading staleness
- CVE-2026-64550net: qualcomm: rmnet: validate MAP frame length before ingress parsing
- CVE-2026-64549Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()
- CVE-2026-64548bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()
- CVE-2026-64547net: usb: net1080: validate packet_len before pad-byte access in rx_fixup
- CVE-2026-64546drm/edid: fix OOB read in drm_parse_tiled_block()
- CVE-2026-64545net, bpf: check master for NULL in xdp_master_redirect()
- CVE-2026-64544crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
- CVE-2026-64543tipc: fix use-after-free of the discoverer in tipc_disc_rcv()
- CVE-2026-64542ipv6: ndisc: fix NULL deref in accept_untracked_na()
- CVE-2026-64541net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket
- CVE-2026-64540usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()
- CVE-2026-64539Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
- CVE-2026-64538ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().