Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-64047net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring
- CVE-2026-64046net: tls: prevent chain-after-chain in plain text SG
- CVE-2026-64045ovpn: tcp - use cached peer pointer in ovpn_tcp_close()
- CVE-2026-64044ovpn: respect peer refcount in CMD_NEW_PEER error path
- CVE-2026-64043ovpn: fix race between deleting interface and adding new peer
- CVE-2026-64042vfio/pci: Check BAR resources before exporting a DMABUF
- CVE-2026-64041ASoC: codecs: fs210x: fix possible buffer overflow
- CVE-2026-64040cachefiles: Fix error return when vfs_mkdir() fails
- CVE-2026-64039drm/msm/snapshot: fix dumping of the unaligned regions
- CVE-2026-64038hwmon: (lm90) Stop work before releasing hwmon device
- CVE-2026-64037wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled
- CVE-2026-64036cgroup/rstat: validate cpu before css_rstat_cpu() access
- CVE-2026-64035igc: set tx buffer type for SMD frames
- CVE-2026-64034net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer
- CVE-2026-64033RDMA/rtrs: Fix use-after-free in path file creation cleanup
- CVE-2026-64032bridge: mcast: Fix a possible use-after-free when removing a bridge port
- CVE-2026-64031erofs: fix managed cache race for unaligned extents
- CVE-2026-64030wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs
- CVE-2026-64029ALSA: seq: Serialize UMP output teardown with event_input
- CVE-2026-64028tracing: Avoid NULL return from hist_field_name() on truncation
- CVE-2026-64027net: shaper: rework the VALID marking (again)
- CVE-2026-64026rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg
- CVE-2026-64025bpf, skmsg: fix verdict sk_data_ready racing with ktls rx
- CVE-2026-64024tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction
- CVE-2026-64023gpio: aggregator: fix a potential use-after-free
- CVE-2026-64022gpio: aggregator: remove the software node when deactivating the aggregator
- CVE-2026-64021drm/xe/oa: Fix exec_queue leak on width check in stream open
- CVE-2026-64020nvme-pci: fix dma_vecs leak on p2p memory
- CVE-2026-64019nvme-pci: fix dma mapping leak on data setup error
- CVE-2026-64018net: mana: validate rx_req_idx to prevent out-of-bounds array access