Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-53387iio: light: veml6075: add bounds check to veml6075_it_ms index
- CVE-2026-53386iio: adc: ti-ads1298: add bounds check to pga_settings index
- CVE-2026-53385vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write
- CVE-2026-53384serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails
- CVE-2026-53383ksmbd: reject non-VALID session in compound request branch
- CVE-2026-53382media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
- CVE-2026-53381virtiofs: fix UAF on submount umount
- CVE-2026-53380media: rzv2h-ivc: Fix concurrent buffer list access
- CVE-2026-53379media: i2c: ov8856: free control handler on error in ov8856_init_controls()
- CVE-2026-53378drm/colorop: Fix blob property reference tracking in state lifecycle
- CVE-2026-53377drm/msm: always recover the gpu
- CVE-2026-53376drm/amdkfd: Add upper bound check for num_of_nodes
- CVE-2026-53375drm/amdgpu/vce: Prevent partial address patches
- CVE-2026-53374drm/amdgpu: zero-initialize GART table on allocation
- CVE-2026-53373mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap()
- CVE-2026-53372iommu/vt-d: Block PASID attachment to nested domain with dirty tracking
- CVE-2026-53371RDMA/ionic: bound node_desc sysfs read with %.64s
- CVE-2026-53370perf/x86/intel: Improve validation and configuration of ACR masks
- CVE-2026-53369udf: reject descriptors with oversized CRC length
- CVE-2026-53368f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage
- CVE-2026-53367selinux: fix avdcache auditing
- CVE-2026-53366ipv4: account for fraggap on the paged allocation path
- CVE-2026-53365vsock/virtio: fix zerocopy completion for multi-skb sends
- CVE-2026-53364Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate()
- CVE-2026-53363xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags()
- CVE-2026-53362ipv6: account for fraggap on the paged allocation path
- CVE-2026-53361af_unix: Set gc_in_progress to true in unix_gc().
- CVE-2026-53360KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use
- CVE-2026-53359KVM: x86: Fix shadow paging use-after-free due to unexpected role
- CVE-2026-53358Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen()