Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-64419mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()
- CVE-2026-64418mm: shrinker: fix shrinker_info teardown race with expansion
- CVE-2026-64417mm: shrinker: fix NULL pointer dereference in debugfs
- CVE-2026-64416mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host
- CVE-2026-64415mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup
- CVE-2026-64414netfilter: handle unreadable frags
- CVE-2026-64413netfilter: ebtables: zero chainstack array
- CVE-2026-64412netfilter: ebtables: module names must be null-terminated
- CVE-2026-64411netfilter: ebtables: terminate table name before find_table_lock()
- CVE-2026-64410netfilter: flowtable: IPIP tunnel hardware offload is not yet support
- CVE-2026-64409Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
- CVE-2026-64408Bluetooth: bnep: pin L2CAP connection during netdev registration
- CVE-2026-64407Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()
- CVE-2026-64406Bluetooth: fix UAF in bt_accept_dequeue()
- CVE-2026-64405Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()
- CVE-2026-64404Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()
- CVE-2026-64403Bluetooth: L2CAP: validate option length before reading conf opt value
- CVE-2026-64402coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
- CVE-2026-64401smb: client: resolve SWN tcon from live registrations
- CVE-2026-64400ksmbd: prevent path traversal bypass by restricting caseless retry
- CVE-2026-64399ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
- CVE-2026-64398ksmbd: add a permission check for FSCTL_SET_ZERO_DATA
- CVE-2026-64397ksmbd: serialize QUERY_DIRECTORY requests per file
- CVE-2026-64396ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation
- CVE-2026-64395ksmbd: require source read access for duplicate extents
- CVE-2026-64394ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY
- CVE-2026-64393ksmbd: run set info with opener credentials
- CVE-2026-64392ksmbd: use opener credentials for delete-on-close
- CVE-2026-64391ksmbd: use opener credentials for ADS I/O
- CVE-2026-64390ksmbd: track the connection owning a byte-range lock