Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-64168spi: sprd: fix error pointer deref after DMA setup failure
- CVE-2026-64167kho: skip KHO for crash kernel
- CVE-2026-64166firmware: arm_ffa: Check for NULL FF-A ID table while driver registration
- CVE-2026-64165ARM: integrator: Fix early initialization
- CVE-2026-64164btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()
- CVE-2026-64163test_kprobes: clear kprobes between test runs
- CVE-2026-64162idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()
- CVE-2026-64161net: ti: icssm-prueth: fix eth_ports_node leak in probe
- CVE-2026-64160netfs: Fix potential for tearing in ->remote_i_size and ->zero_point
- CVE-2026-64159netfs: Fix zeropoint update where i_size > remote_i_size
- CVE-2026-64157netfs: Fix partial invalidation of streaming-write folio
- CVE-2026-64156netfs, afs: Fix write skipping in dir/link writepages
- CVE-2026-64155wifi: ath11k: fix error path leaks in some WMI WOW calls
- CVE-2026-64154drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()
- CVE-2026-64153drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN
- CVE-2026-64152iommu: Handle unmap error when iommu_debug is enabled
- CVE-2026-64151iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap
- CVE-2026-64150netfilter: nft_inner: release local_lock before re-enabling softirqs
- CVE-2026-64149dma-mapping: move dma_map_resource() sanity check into debug code
- CVE-2026-64148pds_core: fix error handling in pdsc_devcmd_wait
- CVE-2026-64147pds_core: fix debugfs_lookup dentry leak and error handling
- CVE-2026-64146erofs: fix metabuf leak in inode xattr initialization
- CVE-2026-64145wifi: wilc1000: fix dma_buffer leak on bus acquire failure
- CVE-2026-64144Bluetooth: btmtk: fix urb->setup_packet leak in error paths
- CVE-2026-64143platform/x86: uniwill-laptop: Do not enable the charging limit even when forced
- CVE-2026-64142ksmbd: close durable scavenger races against m_fp_list lookups
- CVE-2026-64141ksmbd: fix null pointer dereference in compare_guid_key()
- CVE-2026-64140ksmbd: fix null pointer dereference in proc_show_files()
- CVE-2026-64139ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow
- CVE-2026-64138ksmbd: validate SID in parent security descriptor during ACL inheritance