Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-64359nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
- CVE-2026-64358media: mtk-jpeg: cancel workqueue on release for supported platforms only
- CVE-2026-64357xfs: fix exchmaps reservation limit check
- CVE-2026-64356xfs: fix memory leak in xfs_dqinode_metadir_create()
- CVE-2026-64355bpf: Reject fragmented frames in devmap
- CVE-2026-64354bpf: Validate BTF repeated field counts before expansion
- CVE-2026-64353bpf: Keep dynamic inner array lookups nullable
- CVE-2026-64352bpf: Allow LPM map access from sleepable BPF programs
- CVE-2026-64351net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
- CVE-2026-64350usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
- CVE-2026-64349usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup()
- CVE-2026-64348usb: free iso schedules on failed submit
- CVE-2026-64347usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
- CVE-2026-64346usb: gadget: udc: Fix use-after-free in gadget_match_driver
- CVE-2026-64345usb: gadget: f_printer: take kref only for successful open
- CVE-2026-64344USB: idmouse: fix use-after-free on disconnect race
- CVE-2026-64343USB: ldusb: fix use-after-free on disconnect race
- CVE-2026-64342USB: iowarrior: fix use-after-free on disconnect
- CVE-2026-64341USB: iowarrior: fix use-after-free on disconnect race
- CVE-2026-64340USB: legousbtower: fix use-after-free on disconnect race
- CVE-2026-64339usb: misc: usbio: bound bulk IN response length to the received transfer
- CVE-2026-64338USB: misc: uss720: unregister parport on probe failure
- CVE-2026-64337usb: mtu3: unmap request DMA on queue failure
- CVE-2026-64336USB: serial: keyspan_pda: fix information leak
- CVE-2026-64335USB: serial: digi_acceleport: fix broken rx after throttle
- CVE-2026-64334USB: serial: digi_acceleport: fix hard lockup on disconnect
- CVE-2026-64333USB: serial: digi_acceleport: fix write buffer corruption
- CVE-2026-64332USB: ulpi: fix memory leak on registration failure
- CVE-2026-64331usbip: vudc: fix NULL deref in vep_dequeue()
- CVE-2026-64330usb: typec: tcpm: Validate SVID index in svdm_consume_modes()