Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-64137smb: client: require net admin for CIFS SWN netlink
- CVE-2026-64136smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()
- CVE-2026-64135hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX
- CVE-2026-64134ALSA: pcm: Don't setup bogus iov_iter for silencing
- CVE-2026-64133ALSA: asihpi: Fix potential OOB array access at reading cache
- CVE-2026-64132ipv6: ioam: refresh hdr pointer before ioam6_event()
- CVE-2026-64131mm/memory: fix spurious warning when unmapping device-private/exclusive pages
- CVE-2026-64130mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free
- CVE-2026-64129mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page
- CVE-2026-64128Bluetooth: ISO: drop ISO_END frames received without prior ISO_START
- CVE-2026-64127Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer
- CVE-2026-64126Bluetooth: MGMT: validate Add Extended Advertising Data length
- CVE-2026-64125net: bcmgenet: keep RBUF EEE/PM disabled
- CVE-2026-64124net: devmem: reject dma-buf bind with non-page-aligned size or SG length
- CVE-2026-64123net: hsr: defer node table free until after RCU readers
- CVE-2026-64122net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover
- CVE-2026-64121net: ifb: report ethtool stats over num_tx_queues
- CVE-2026-64120net: ethtool: fix NULL pointer dereference in phy_reply_size
- CVE-2026-64119l2tp: use list_del_rcu in l2tp_session_unhash
- CVE-2026-64118qed: fix double free in qed_cxt_tables_alloc()
- CVE-2026-64117wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb
- CVE-2026-64116ipv6: ioam: add NULL check for idev in ipv6_hop_ioam()
- CVE-2026-64115vsock/vmci: fix UAF when peer resets connection during handshake
- CVE-2026-64114ipv4: raw: reject IP_HDRINCL packets with ihl < 5
- CVE-2026-64113ixgbevf: fix use-after-free in VEPA multicast source pruning
- CVE-2026-64112rbd: eliminate a race in lock_dwork draining on unmap
- CVE-2026-64111lsm: hold cred_guard_mutex for lsm_set_self_attr()
- CVE-2026-64110igc: fix potential skb leak in igc_fpe_xmit_smd_frame()
- CVE-2026-64109af_unix: Fix UAF read of tail->len in unix_stream_data_wait()
- CVE-2026-64108cifs: Fix busy dentry used after unmounting