Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-64449staging: vme_user: bound slave read/write to the kern_buf size
- CVE-2026-64448smb: client: restrict implied bcc[0] exemption to responses without data area
- CVE-2026-64447staging: media: ipu7: fix double-free and use-after-free in error paths
- CVE-2026-64446staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
- CVE-2026-64445staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
- CVE-2026-64444staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
- CVE-2026-64443staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
- CVE-2026-64442staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()
- CVE-2026-64441staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
- CVE-2026-64440staging: rtl8723bs: fix OOB write in HT_caps_handler()
- CVE-2026-64439crypto: krb5 - filter out async aead implementations at alloc
- CVE-2026-64438crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
- CVE-2026-64437ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL
- CVE-2026-64436net: af_key: initialize alg_key_len for IPComp states
- CVE-2026-64435audit: Fix data races of skb_queue_len() readers on audit_queue
- CVE-2026-64434Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref
- CVE-2026-64433Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
- CVE-2026-64432fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns
- CVE-2026-64431ntfs: avoid calling post_write_mst_fixup() for invalid index_block
- CVE-2026-64430NTB: epf: Avoid calling pci_irq_vector() from hardirq context
- CVE-2026-64429gpio: eic-sprd: use raw_spinlock_t in the irq startup path
- CVE-2026-64428gpio: sch: use raw_spinlock_t in the irq startup path
- CVE-2026-64427HID: logitech-dj: Fix maxfield check in DJ short report validation
- CVE-2026-64426io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE
- CVE-2026-64425io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
- CVE-2026-64424netpoll: fix a use-after-free on shutdown path
- CVE-2026-64423ipv4: igmp: remove multicast group from hash table on device destruction
- CVE-2026-64422net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
- CVE-2026-64421media: nxp: imx8-isi: Fix use-after-free on remove
- CVE-2026-64420mfd: cros_ec: Delay dev_set_drvdata() until probe success