Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-64509rust: block: fix GenDisk cleanup paths
- CVE-2026-64508bpf: Support for hardening against JIT spraying
- CVE-2026-64507x86/bugs: Enable IBPB flush on BPF JIT allocation
- CVE-2026-64506wifi: rtw89: correct drop logic for malformed AMPDU frames
- CVE-2026-64505usb: gadget: function: rndis: add length check for header
- CVE-2026-64504iio: accel: bmc150: clamp the device-reported FIFO frame count
- CVE-2026-64503iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
- CVE-2026-64502iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices
- CVE-2026-64501iio: adc: ad_sigma_delta: fix CS held asserted and state leaks
- CVE-2026-64500iio: adc: lpc32xx: Initialize completion before requesting IRQ
- CVE-2026-64499iio: adc: ti-ads1119: fix PM reference leak in buffer preenable
- CVE-2026-64498iio: buffer: hw-consumer: free scan_mask on buffer release
- CVE-2026-64497iio: chemical: scd30: Cleanup initializations and fix sign-extension bug
- CVE-2026-64496iio: event: Fix event FIFO reset race
- CVE-2026-64495iio: gyro: bmg160: bail out when bandwidth/filter is not in table
- CVE-2026-64494iio: light: gp2ap002: fix runtime PM leak on read error
- CVE-2026-64493iio: pressure: mpl115: fix runtime PM leak on read error
- CVE-2026-64492iio: temperature: tmp006: use devm_iio_trigger_register
- CVE-2026-64491ALSA: usx2y: us144mkii: fix work UAF on disconnect
- CVE-2026-64490ALSA: virtio: Validate control metadata from the device
- CVE-2026-64489ALSA: ymfpci: check snd_ctl_new1() return value
- CVE-2026-64488ALSA: aoa: check snd_ctl_new1() return value
- CVE-2026-64487ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
- CVE-2026-64486ALSA: cmipci: check snd_ctl_new1() return value
- CVE-2026-64485ALSA: compress: Fix task creation error unwind
- CVE-2026-64484ALSA: es1938: check snd_ctl_new1() return value
- CVE-2026-64483ALSA: firewire: isight: bound the sample count to the packet payload
- CVE-2026-64482ALSA: gus: check snd_ctl_new1() return value
- CVE-2026-64481ALSA: hda/cs35l41: Fix firmware load work teardown
- CVE-2026-64480ALSA: ice1712: check snd_ctl_new1() return value