Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-63957USB: serial: safe_serial: fix memory corruption with small endpoint
- CVE-2026-63956USB: serial: cypress_m8: fix memory corruption with small endpoint
- CVE-2026-63955mm/vmalloc: do not trigger BUG() on BH disabled context
- CVE-2026-63954hpfs: fix a crash if hpfs_map_dnode_bitmap fails
- CVE-2026-63953mm/migrate_device: fix pgtable leak in migrate_vma_insert_huge_pmd_page
- CVE-2026-63952memfd: deny writeable mappings when implying SEAL_WRITE
- CVE-2026-63951zram: fix use-after-free in zram_writeback_endio
- CVE-2026-63950mm/rmap: initialize nr_pages to 1 at loop start in try_to_unmap_one
- CVE-2026-63949auxdisplay: line-display: fix OOB read on zero-length message_store()
- CVE-2026-63948Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn
- CVE-2026-63947Bluetooth: HIDP: fix missing length checks in hidp_input_report()
- CVE-2026-63946Bluetooth: ISO: fix UAF in iso_recv_frame
- CVE-2026-63945Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock
- CVE-2026-63944Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync
- CVE-2026-63943Input: xpad - fix out-of-bounds access for Share button
- CVE-2026-63942parport: Fix race between port and client registration
- CVE-2026-63941KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor
- CVE-2026-63940KVM: SEV: Ignore Port I/O requests of length '0'
- CVE-2026-63939KVM: SEV: Compute the correct max length of the in-GHCB scratch area
- CVE-2026-63938KVM: SEV: Check PSC request indices against the actual size of the buffer
- CVE-2026-63937KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer
- CVE-2026-63936iio: adc: mt6359: fix unchecked return value in mt6358_read_imp
- CVE-2026-63935iio: adc: nxp-sar-adc: fix division by zero in write_raw
- CVE-2026-63934iio: gyro: itg3200: fix i2c read into the wrong stack location
- CVE-2026-63933iio: gyro: adis16260: fix division by zero in write_raw
- CVE-2026-63932iio: chemical: mhz19b: reject oversized serial replies
- CVE-2026-63931iio: chemical: scd30: fix division by zero in write_raw
- CVE-2026-63930iio: buffer: hw-consumer: fix use-after-free in error path
- CVE-2026-63929iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf()
- CVE-2026-63928USB: serial: omninet: fix memory corruption with small endpoint