Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-63987ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES
- CVE-2026-63986ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on prepare failure
- CVE-2026-63985ethtool: eeprom: add more safeties to EEPROM Netlink fallback
- CVE-2026-63984ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()
- CVE-2026-63983net/sched: fix packet loop on netem when duplicate is on
- CVE-2026-63982net/sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress mirred loop
- CVE-2026-63981net/sched: act_mirred: Fix blockcast recursion bypass leading to stack overflow
- CVE-2026-63980net/handshake: Use spin_lock_bh for hn_lock
- CVE-2026-63979net/handshake: hand off the pinned file reference to accept_doit
- CVE-2026-63978net/handshake: Drain pending requests at net namespace exit
- CVE-2026-63977dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work
- CVE-2026-63976Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success
- CVE-2026-63975Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp
- CVE-2026-63974Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close
- CVE-2026-63973net: mana: Add NULL guards in teardown path to prevent panic on attach failure
- CVE-2026-63972net: mana: Skip redundant detach on already-detached port
- CVE-2026-63971sctp: fix race between sctp_wait_for_connect and peeloff
- CVE-2026-63970vsock/virtio: bind uarg before filling zerocopy skb
- CVE-2026-63969ipv6: fix possible infinite loop in rt6_fill_node()
- CVE-2026-63968ipv6: fix possible infinite loop in fib6_select_path()
- CVE-2026-63967iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer
- CVE-2026-63966iio: imu: adis16550: fix stack leak in trigger handler
- CVE-2026-63965iio: pressure: bmp280: fix stack leak in bmp580 trigger handler
- CVE-2026-63964usb: typec: ucsi: ccg: reject firmware images without a ':' record header
- CVE-2026-63963usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers
- CVE-2026-63962usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()
- CVE-2026-63961usb: typec: altmodes/displayport: validate count before reading Status Update VDO
- CVE-2026-63960usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer()
- CVE-2026-63959usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT
- CVE-2026-63958usb: typec: ucsi: validate connector number in ucsi_connector_change()