Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98801net: restrict SO_RESERVE_MEM to TCP sockets and cap max value
- CVE-2026-98800bpf: Wait for an RCU tasks grace period before freeing trampoline progs
- CVE-2026-98799bpf: Skip detached progs in trampoline images that are still in use
- CVE-2026-98798net: bcmgenet: fix NULL dereference in set_coalesce before first open
- CVE-2026-98797net: cap skb->queue_mapping when the tx queue is picked
- CVE-2026-98796net: ethernet: mtk_eth_soc: allocate dummy netdev sooner
- CVE-2026-98795net: sparx5: skip ptp deinit if init was skipped
- CVE-2026-98794ipvs: filter some flags received in the backup server
- CVE-2026-98793netfilter: bpf: reject invalid NAT manipulation types
- CVE-2026-98792netfilter: flowtable: generalize pending status bit
- CVE-2026-98791net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference
- CVE-2026-98790perf: Fix race between perf_event_exit_task() and perf_pending_task()
- CVE-2026-98789bpf: Fix objects stuck in free_by_rcu_ttrace
- CVE-2026-98788futex: Fix private hash use-after-free on resize
- CVE-2026-98787bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch()
- CVE-2026-98786drm/amd/display: guard dc_sink dereferences in MST mode validation
- CVE-2026-98785drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend
- CVE-2026-98784drm/amdgpu/gfx6: fix firmware leak on teardown
- CVE-2026-98783drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device
- CVE-2026-98782drm/mediatek: Fix ovl adaptor platform device leak
- CVE-2026-98781drm/mediatek: Fix pdev reference leak in mtk_drm_bind()
- CVE-2026-98780drm/amdgpu: fix IP instance memory leak on kobject add failure
- CVE-2026-98779drm/amdgpu: fix ACP MFD device leak on init failure
- CVE-2026-98778binder: fix is_failure flag for superseded transaction cleanup
- CVE-2026-98777binder: fix leaked fd fixups on TF_UPDATE_TXN supersede
- CVE-2026-98776binderfs: fix UAF write in binder_add_device
- CVE-2026-98775nitro_enclaves: fix use-after-free on SLOT_ALLOC failure
- CVE-2026-98774rust_binder: cancel deferred work items in thread exit
- CVE-2026-98773USB: cdc-acm: skip URB restart in port_shutdown if disconnected
- CVE-2026-98772USB: serial: fix port tear down use-after-free