Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-64269RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
- CVE-2026-64268RDMA/siw: bound Read Response placement to the RREAD length
- CVE-2026-64267fuse: avoid 32-bit prune notification count wrap
- CVE-2026-64266fuse: re-lock request before returning from fuse_ref_folio()
- CVE-2026-64265fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req
- CVE-2026-64264fuse-uring: fix EFAULT clobber in fuse_uring_commit
- CVE-2026-64263fuse-uring: fix moving cancelled entry to ent_in_userspace list
- CVE-2026-64262fuse-uring: end fuse_req on io-uring cancel task work
- CVE-2026-64261fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues
- CVE-2026-64260fuse-uring: Avoid queue->stopped races and set/read that value under lock
- CVE-2026-64259fuse-uring: make a fuse_req on SQE commit only findable after memcpy
- CVE-2026-64258fuse-uring: remove request-less entries from ent_w_req_queue to fix NULL deref
- CVE-2026-64257smb: client: reject overlapping data areas in SMB2 responses
- CVE-2026-64256xfs: don't wrap around quota ids in dqiterate
- CVE-2026-64255wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers
- CVE-2026-64254NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR
- CVE-2026-64253kernel/fork: clear PF_BLOCK_TS in copy_process()
- CVE-2026-64252MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
- CVE-2026-64251pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
- CVE-2026-64250LoongArch: Report dying CPU to RCU in stop_this_cpu()
- CVE-2026-64249fpga: region: fix use-after-free in child_regions_with_firmware()
- CVE-2026-64248MIPS: smp: report dying CPU to RCU in stop_this_cpu()
- CVE-2026-64247KVM: x86: hyper-v: Bound the bank index when querying sparse banks
- CVE-2026-64246power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init()
- CVE-2026-64245fbdev: modedb: fix a possible UAF in fb_find_mode()
- CVE-2026-64244drivers/base/memory: set mem->altmap after successful device registration
- CVE-2026-64243ASoC: codecs: simple-mux: Fix enum control bounds check
- CVE-2026-64242usb: gadget: net2280: Fix double free in probe error path
- CVE-2026-64241gpio: rockchip: teardown bugs and resource leaks
- CVE-2026-64240media: rc: igorplugusb: fix control request setup packet