Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-64107ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put()
- CVE-2026-64106KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits
- CVE-2026-64105KVM: arm64: vgic: Free private_irqs when init fails after allocation
- CVE-2026-64104virt: sev-guest: Explicitly leak pages in unknown state
- CVE-2026-64103scsi: isci: Fix use-after-free in device removal path
- CVE-2026-64102RDMA/siw: Reject MPA FPDU length underflow before signed receive math
- CVE-2026-64101fwctl: pds: Validate RPC input size before parsing
- CVE-2026-64100drm/msm: Fix shrinker deadlock
- CVE-2026-64099drm/v3d: Fix use-after-free of CPU job query arrays on error path
- CVE-2026-64098drm/virtio: use uninterruptible resv lock for plane updates
- CVE-2026-64097drm/amd/display: Validate GPIO pin LUT table size before iterating
- CVE-2026-64096batman-adv: mcast: fix use-after-free in orig_node RCU release
- CVE-2026-64095batman-adv: bla: avoid double decrement of bla.num_requests
- CVE-2026-64094batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface
- CVE-2026-64093batman-adv: tp_meter: directly shut down timer on cleanup
- CVE-2026-64092batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown
- CVE-2026-64091batman-adv: tt: fix TOCTOU race for reported vlans
- CVE-2026-64090batman-adv: tt: avoid empty VLAN responses
- CVE-2026-64089batman-adv: tt: fix negative last_changeset_len
- CVE-2026-64088batman-adv: tt: fix negative tt_buff_len
- CVE-2026-64087hwmon: (pmbus/adm1266) reject implausible blackbox record_count
- CVE-2026-64086hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer
- CVE-2026-64085hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer
- CVE-2026-64084hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR
- CVE-2026-64083hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors
- CVE-2026-64082riscv: Fix register corruption from uninitialized cregs on error
- CVE-2026-64081firmware: arm_ffa: Validate framework notification message layout
- CVE-2026-64080firmware: arm_ffa: Snapshot notifier callbacks under lock
- CVE-2026-64079netfilter: x_tables: allocate hook ops while under mutex
- CVE-2026-64078netfilter: x_tables: add and use xtables_unregister_table_exit