Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-64299tracing: Prevent out-of-bounds read in glob matching
- CVE-2026-64298NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
- CVE-2026-64297module: decompress: check return value of module_extend_max_pages()
- CVE-2026-64296exfat: bound uniname advance in exfat_find_dir_entry()
- CVE-2026-64295mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access
- CVE-2026-64294mm: do file ownership checks with the proper mount idmap
- CVE-2026-64293iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read
- CVE-2026-64292iommufd: Move vevent memory allocation outside spinlock
- CVE-2026-64291iommufd: Set veventq_depth upper bound
- CVE-2026-64290iommufd: Break the loop on failure in iommufd_fault_fops_read()
- CVE-2026-64289iommufd: Set upper bounds on cache invalidation entry_num and entry_len
- CVE-2026-64288KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB
- CVE-2026-64287KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU
- CVE-2026-64286KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU
- CVE-2026-64285KVM: SEV: Pin source page for write when adding CPUID data for SNP guest
- CVE-2026-64284KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits
- CVE-2026-64283KVM: guest_memfd: Treat memslot binding offset+size as unsigned values
- CVE-2026-64282KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier
- CVE-2026-64281svcrdma: wake sq waiters when the transport closes
- CVE-2026-64280fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()
- CVE-2026-64279i2c: core: fix adapter deregistration race
- CVE-2026-64278i2c: imx-lpi2c: mark I2C adapter when hardware is powered down
- CVE-2026-64277Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
- CVE-2026-64276Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
- CVE-2026-64275Input: elan_i2c - prevent division by zero and arithmetic underflow
- CVE-2026-64274Input: goodix - clamp the device-reported contact count
- CVE-2026-64273Input: iforce - bound the device-reported force-feedback effect index
- CVE-2026-64272Input: mms114 - fix touch indexing for MMS134S and MMS136
- CVE-2026-64271Input: touchwin - reset the packet index on every complete packet
- CVE-2026-64270Input: mms114 - reject an oversized device packet size