Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-64537bridge: cfm: reject invalid CCM interval at configuration time
- CVE-2026-17523can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet
- CVE-2026-64536staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
- CVE-2026-64535nvmet-tcp: Fix potential UAF when ddgst mismatch
- CVE-2026-64534nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
- CVE-2026-64533fs/ntfs3: validate lcns_follow in log_replay conversion
- CVE-2026-64532fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}
- CVE-2026-64531net: openvswitch: reject oversized nested action attrs
- CVE-2024-14040net: nexthop: Increase weight to u16
- CVE-2026-64530net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
- CVE-2026-64529crypto: qat - remove unused character device and IOCTLs
- CVE-2026-64528tty: serial: samsung: Remove redundant port lock acquisition in rx helpers
- CVE-2026-64527drm/hyperv: validate VMBus packet size in receive callback
- CVE-2026-64526ethtool: tsconfig: fix missing ethnl_ops_complete()
- CVE-2026-64525xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit
- CVE-2026-64524drm/hyperv: validate resolution_count and fix WIN8 fallback
- CVE-2026-64523net/handshake: Take a long-lived file reference at submit
- CVE-2026-64522net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA
- CVE-2026-64521pinctrl: meson: amlogic-a4: fix deadlock issue
- CVE-2026-64520firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies
- CVE-2026-64519NFSD: Fix infinite loop in layout state revocation
- CVE-2026-64518tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key().
- CVE-2026-64517drm/xe/gsc: Fix double-free of managed BO in error path
- CVE-2026-64516drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets
- CVE-2026-64515wifi: mac80211: fix MLE defragmentation
- CVE-2026-64514userfaultfd: gate must_wait writability check on pte_present()
- CVE-2026-64513KVM: x86: Unconditionally recompute CR8 intercept on PPR update
- CVE-2026-64512ACPI: CPPC: Suppress UBSAN warning caused by field misuse
- CVE-2026-64511ACPI: NFIT: core: Fix possible NULL pointer dereference
- CVE-2026-64510ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup