Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98741ALSA: ua101: reject mismatched capture/playback packet sizes
- CVE-2026-98740EDAC/altera: Drop __init from ECC setup paths for re-probe safety
- CVE-2026-98739Bluetooth: RFCOMM: Fix initial port reference race
- CVE-2026-98738Bluetooth: Serialize SMP remote OOB data access
- CVE-2026-98737Bluetooth: hci_sync: Fix inquiry cache use-after-free
- CVE-2026-98736Bluetooth: hci_conn: Lock parent access during enhanced SCO setup
- CVE-2026-98735Bluetooth: hci_core: Serialize ACL scheduling with channel deletion
- CVE-2026-98734Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown
- CVE-2026-98733Bluetooth: hci_core: Serialize fragmented ISO packet queueing
- CVE-2026-98732Bluetooth: btintel: fix buffer over-read in btintel_hw_error()
- CVE-2026-98731Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame()
- CVE-2026-98730Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()
- CVE-2026-98729x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h
- CVE-2026-98728tpm: fix off-by-four bounds check in tpm2_get_random()
- CVE-2026-98727nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known
- CVE-2026-98726nvme-multipath: fix underflow in ANA log bounds checks
- CVE-2026-98725nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()
- CVE-2026-98724nvmet: pci-epf: reject too-short SGL segments
- CVE-2026-98723nvmet: copy the hostid into the ctrl before creating PR pc_refs
- CVE-2026-98722mtd: block2mtd: Fix divide error when erase_size is zero
- CVE-2026-98721mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ
- CVE-2026-98720KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified
- CVE-2026-98719KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it
- CVE-2026-98718KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state
- CVE-2026-98717KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy
- CVE-2026-98716KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted
- CVE-2026-98715KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN
- CVE-2026-98714KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded
- CVE-2026-98713KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT
- CVE-2026-98712KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq