Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-64017blk-mq: pop cached request if it is usable
- CVE-2026-64016ksmbd: fix durable reconnect error path file lifetime
- CVE-2026-64015security/keys: fix missed RCU read section on lookup
- CVE-2026-64014Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size
- CVE-2026-64013ACPI: button: Fix ACPI GPE handler leak during removal
- CVE-2026-64012net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked
- CVE-2026-64011nfc: llcp: Fix use-after-free in llcp_sock_release()
- CVE-2026-64010nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc()
- CVE-2026-64009xfrm: Check for underflow in xfrm_state_mtu
- CVE-2026-64008accel/rocket: fix UAF via dangling GEM handle in create_bo
- CVE-2026-64007netfilter: synproxy: refresh tcphdr after skb_ensure_writable
- CVE-2026-64006netfilter: nf_tables: fix dst corruption in same register operation
- CVE-2026-64005net/smc: Do not re-initialize smc hashtables
- CVE-2026-64004net/iucv: fix locking in .getsockopt
- CVE-2026-64003scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues
- CVE-2026-64002ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()
- CVE-2026-64001ALSA: pcm: oss: Fix setup list UAF on proc write error
- CVE-2026-64000net: hsr: fix potential OOB access in supervision frame handling
- CVE-2026-63999ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
- CVE-2026-63998ethtool: module: call ethnl_ops_complete() on module flash errors
- CVE-2026-63997ethtool: module: avoid leaking a netdev ref on module flash errors
- CVE-2026-63996ethtool: cmis: require exact CDB reply length
- CVE-2026-63995ethtool: cmis: validate start_cmd_payload_size from module
- CVE-2026-63994tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()
- CVE-2026-63993vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()
- CVE-2026-63992tunnels: do not assume transport header in iptunnel_pmtud_check_icmp()
- CVE-2026-63991Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt()
- CVE-2026-63990bonding: refuse to enslave CAN devices
- CVE-2026-63989bridge: Fix sleep in atomic context in netlink path
- CVE-2026-63988bridge: Fix sleep in atomic context in sysfs path