Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-63897USB: serial: mct_u232: fix missing interrupt-in transfer sanity check
- CVE-2026-63896usb: gadget: composite: fix integer underflow in WebUSB GET_URL handling
- CVE-2026-63895usb: gadget: f_fs: copy only received bytes on short ep0 read
- CVE-2026-63894usb: gadget: f_fs: serialize DMABUF cancel against request completion
- CVE-2026-63893thunderbolt: property: Reject u32 wrap in tb_property_entry_valid()
- CVE-2026-63892thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow
- CVE-2026-63891thunderbolt: property: Cap recursion depth in __tb_property_parse_dir()
- CVE-2026-63890scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker
- CVE-2026-63889scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32
- CVE-2026-63888scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()
- CVE-2026-63887scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf
- CVE-2026-63886scsi: target: iscsi: Validate CHAP_R length before base64 decode
- CVE-2026-63885drm/gem: fix race between change_handle and handle_delete
- CVE-2026-63884drm/i915: Fix potential UAF in TTM object purge
- CVE-2026-63883serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ
- CVE-2026-63882drm/amdkfd: fix NULL pointer bug in svm_range_set_attr
- CVE-2026-63881drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger
- CVE-2026-63880drm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_OP_GET_MAPPING_INFO
- CVE-2026-63879drm/amdgpu: fix amdgpu_hmm_range_get_pages
- CVE-2026-63878drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO
- CVE-2026-63877serial: dz: Convert to use a platform device
- CVE-2026-63876serial: zs: Convert to use a platform device
- CVE-2026-63875arm64: tlb: Flush walk cache when unsharing PMD tables
- CVE-2026-63874net: mctp: usb: fix race between urb completion and rx_retry cancellation
- CVE-2026-63873accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range()
- CVE-2026-63871Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls
- CVE-2026-63870ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()
- CVE-2026-63869wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap
- CVE-2026-63868net: garp: fix unsigned integer underflow in garp_pdu_parse_attr
- CVE-2026-63867mptcp: close TOCTOU race while computing rcv_wnd