Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-64329usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
- CVE-2026-64328usb: gadget: f_fs: Fix DMA fence leak
- CVE-2026-64327usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks
- CVE-2026-64326block: skip sync_blockdev() on surprise removal in bdev_mark_dead()
- CVE-2026-64325wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon
- CVE-2026-64324udf: validate free block extents against the partition length
- CVE-2026-64323udf: validate VAT header length against the VAT inode size
- CVE-2026-64322udf: validate sparing table length as an entry count, not a byte count
- CVE-2026-64321nvme: target: rdma: fix ndev refcount leak on queue connect
- CVE-2026-64320nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
- CVE-2026-64319nvmet-auth: validate reply message payload bounds against transfer length
- CVE-2026-64318partitions: aix: bound the pp_count scan to the ppe array
- CVE-2026-64317isofs: bound Rock Ridge symlink components to the SL record
- CVE-2026-64316crypto: caam - use print_hex_dump_devel to guard key hex dumps
- CVE-2026-64315crypto: caam - use print_hex_dump_devel to guard key hex dumps
- CVE-2026-64314crypto: chacha20poly1305 - validate poly1305 template argument
- CVE-2026-64313crypto: ecc - Fix carry overflow in vli multiplication
- CVE-2026-64312crypto: pcrypt - restore callback for non-parallel fallback
- CVE-2026-64311crypto: loongson - Remove broken and unused loongson-rng
- CVE-2026-64310crypto: ccp - Do not initialize SNP for SEV ioctls
- CVE-2026-64309crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)
- CVE-2026-64308crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)
- CVE-2026-64307crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)
- CVE-2026-64306crypto: drbg - Fix returning success on failure in CTR_DRBG
- CVE-2026-64305crypto: qat - protect service table iterations with service_lock
- CVE-2026-64304crypto: qat - validate RSA CRT component lengths
- CVE-2026-64303spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
- CVE-2026-64302x86/mm: Fix freeing of PMD-sized vmemmap pages
- CVE-2026-64301regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
- CVE-2026-64300perf/aux: Fix page UAF in map_range()