Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-64239mm/damon/sysfs-schemes: delete tried region in regions_rmdirs()
- CVE-2026-64238gpio: shared: fix deadlock on shared proxy's parent removal
- CVE-2026-64237Input: elan_i2c - validate firmware size before use
- CVE-2026-64236i2c: davinci: fix division by zero on missing clock-frequency
- CVE-2026-64235x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines
- CVE-2026-64234tty: serial: pch_uart: add check for dma_alloc_coherent()
- CVE-2026-64233usb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bind
- CVE-2026-64232block: recompute nr_integrity_segments in blk_insert_cloned_request
- CVE-2026-64231drm/msm/dsi: don't dump registers past the mapped region
- CVE-2026-64230regulator: tps65219: fix irq_data.rdev not being assigned
- CVE-2026-64229x86/mm: Disable broadcast TLB flush when PCID is disabled
- CVE-2026-64228net: ethtool: phy: avoid NULL deref when PHY driver is unbound
- CVE-2026-64227ACPI: driver: Check ACPI_COMPANION() against NULL during probe
- CVE-2026-64226sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path
- CVE-2026-64225octeontx2-af: CGX: add bounds check to cgx_speed_mbps index
- CVE-2026-64224octeontx2-pf: fix double free in rvu_rep_rsrc_init()
- CVE-2026-64223wifi: mac80211: consume only present negotiated TTLM maps
- CVE-2026-64222octeontx2-pf: avoid double free of pool->stack on AQ init failure
- CVE-2026-64221spi: ti-qspi: fix use-after-free after DMA setup failure
- CVE-2026-64220device property: set fwnode->secondary to NULL in fwnode_init()
- CVE-2026-64219drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async
- CVE-2026-64218batman-adv: bla: fix report_work leak on backbone_gw purge
- CVE-2026-64217netfs: Fix overrun check in netfs_extract_user_iter()
- CVE-2026-64216netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()
- CVE-2026-64215drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table
- CVE-2026-64214powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()
- CVE-2026-64213hwmon: (lm90) Add lock protection to lm90_alert
- CVE-2026-64212wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it
- CVE-2026-64211srcu: Don't queue workqueue handlers to never-online CPUs
- CVE-2026-64210net/mlx5e: xsk: Fix unlocked writing to ICOSQ