Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-64209phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config
- CVE-2026-64208crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks
- CVE-2026-64600xfs: resample the data fork mapping after cycling ILOCK
- CVE-2026-64207net/sched: dualpi2: fix GSO backlog accounting
- CVE-2026-64206Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
- CVE-2026-64205i2c: i801: fix hardware state machine corruption in error path
- CVE-2026-64192bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
- CVE-2026-64191i2c: stub: Reject I2C block transfers with invalid length
- CVE-2026-64190net: team: fix NULL pointer dereference in team_xmit during mode change
- CVE-2026-64189netfilter: ipset: fix race between dump and ip_set_list resize
- CVE-2026-64188net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()
- CVE-2026-64187xfs: fail recovery on a committed log item with no regions
- CVE-2026-64186iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs
- CVE-2026-64185sysfs: don't remove existing directory on update failure
- CVE-2026-64184mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break()
- CVE-2026-64183efi: Allocate runtime workqueue before ACPI init
- CVE-2026-64182drivers/base/memory: fix memory block reference leak in poison accounting
- CVE-2026-64181mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special()
- CVE-2026-64180mm/memory_hotplug: fix memory block reference leak on remove
- CVE-2026-64179net: wwan: iosm: fix potential memory leaks in ipc_imem_init()
- CVE-2026-64178Bluetooth: bnep: Fix UAF read of dev->name
- CVE-2026-64177phonet/pep: disable BH around forwarded sk_receive_skb()
- CVE-2026-64176wifi: iwlwifi: mvm: fix driver-set TX rates on old devices
- CVE-2026-64175wifi: iwlwifi: mld: stop TX during firmware restart
- CVE-2026-64174wifi: cfg80211: advance loop vars in cfg80211_merge_profile()
- CVE-2026-64173tracing: Do not call map->ops->elt_free() if elt_alloc() fails
- CVE-2026-64172KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235)
- CVE-2026-64171i2c: tegra: fix pm_runtime leak on mutex_lock failure
- CVE-2026-64170spi: qup: fix error pointer deref after DMA setup failure
- CVE-2026-64169spi: ep93xx: fix error pointer deref after DMA setup failure