Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-63927usb: dwc2: Fix use after free in debug code
- CVE-2026-63926bpf: sockmap: fix tail fragment offset in bpf_msg_push_data
- CVE-2026-63925macsec: fix replay protection at XPN lower-PN wrap
- CVE-2026-63924ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()
- CVE-2026-63923octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify
- CVE-2026-63922ipv6: exthdrs: refresh nh after handling HAO option
- CVE-2026-63921ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().
- CVE-2026-63920ipv6: validate extension header length before copying to cmsg
- CVE-2026-63919xfrm: input: hold netns during deferred transport reinjection
- CVE-2026-63918l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname
- CVE-2026-63917ip6: vti: Use ip6_tnl.net in vti6_changelink().
- CVE-2026-63916HID: wacom: Fix OOB write in wacom_hid_set_device_mode()
- CVE-2026-63915nfc: hci: fix out-of-bounds read in HCP header parsing
- CVE-2026-63914xfrm: route MIGRATE notifications to caller's netns
- CVE-2026-63913netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check
- CVE-2026-63912xfrm: esp: restore combined single-frag length gate
- CVE-2026-63911xfrm: iptfs: reset runtime state when cloning SAs
- CVE-2026-63910dma-buf: fix UAF in dma_buf_fd() tracepoint
- CVE-2026-63909ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops
- CVE-2026-63908Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem
- CVE-2026-63907uio: uio_pci_generic_sva: fix double free of devm_kzalloc() memory
- CVE-2026-63906usb: musb: omap2430: Fix use-after-free in omap2430_probe()
- CVE-2026-63905usbip: vudc: Fix use after free bug in vudc_remove due to race condition
- CVE-2026-63904usb: usbtmc: check URB actual_length for interrupt-IN notifications
- CVE-2026-63903USB: serial: belkin_sa: validate interrupt status length
- CVE-2026-63902USB: serial: cypress_m8: validate interrupt packet headers
- CVE-2026-63901USB: serial: digi_acceleport: fix memory corruption with small endpoints
- CVE-2026-63900USB: serial: keyspan: fix missing indat transfer sanity check
- CVE-2026-63899USB: serial: mxuport: fix memory corruption with small endpoint
- CVE-2026-63898USB: serial: mct_u232: fix memory corruption with small endpoint