Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-64389ksmbd: validate NTLMv2 response before updating session key
- CVE-2026-64388smb/client: fix chown/chgrp with SMB3 POSIX Extensions
- CVE-2026-64387smb: client: fix query directory replay double-free
- CVE-2026-64386smb: client: fix query_info() replay double-free
- CVE-2026-64385smb: client: fix double-free in SMB2_ioctl() replay
- CVE-2026-64384smb: client: fix change notify replay double-free
- CVE-2026-64383smb: client: fix double-free in SMB2_flush() replay
- CVE-2026-64382smb: client: fix double-free in SMB2_open() replay
- CVE-2026-64381smb: client: Fix next buffer leak in receive_encrypted_standard()
- CVE-2026-64380smb: client: harden POSIX SID length parsing
- CVE-2026-64379smb: client: mask server-provided mode to 07777 in modefromsid
- CVE-2026-64378writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
- CVE-2026-64377cpufreq: qcom-cpufreq-hw: Fix possible double free
- CVE-2026-64376firmware_loader: fix device reference leak in firmware_upload_register()
- CVE-2026-64375proc: protect ptrace_may_access() with exec_update_lock (FD links)
- CVE-2026-64374sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
- CVE-2026-64373cpufreq: Fix hotplug-suspend race during reboot
- CVE-2026-64372cpufreq: pcc: fix use-after-free and double free in _OSC evaluation
- CVE-2026-64371proc: protect ptrace_may_access() with exec_update_lock (part 1)
- CVE-2026-64370posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
- CVE-2026-64369s390: Revert support for DCACHE_WORD_ACCESS
- CVE-2026-64368mm/slab: do not limit zeroing to orig_size when only red zoning is enabled
- CVE-2026-64367HID: hid-goodix-spi: validate report size to prevent stack buffer overflow
- CVE-2026-64366HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert
- CVE-2026-64365HID: letsketch: fix UAF on inrange_timer at driver unbind
- CVE-2026-64364HID: multitouch: fix out-of-bounds bit access on mt_io_flags
- CVE-2026-64363HID: appleir: fix UAF on pending key_up_timer in remove()
- CVE-2026-64362HID: lg-g15: cancel pending work on remove to fix a use-after-free
- CVE-2026-64361hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
- CVE-2026-64360hfs/hfsplus: zero-initialize buffer in hfs_bnode_read