Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-53357Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()
- CVE-2026-53356drm/i915/gem: Fix phys BO pread/pwrite with offset
- CVE-2026-53355net: rds: clear i_sends on setup unwind
- CVE-2026-53354arm64: errata: Mitigate TLBI errata on various Arm CPUs
- CVE-2026-53353hsr: Remove WARN_ONCE() in hsr_addr_is_self().
- CVE-2026-53352signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()
- CVE-2026-53351riscv/ptrace: Use USER_REGSET_NOTE_TYPE for REGSET_CFI
- CVE-2026-53350ASoC: wm_adsp: Fix NULL dereference when removing firmware controls
- CVE-2026-53349netfilter: nf_conntrack: destroy stale expectfn expectations on unregister
- CVE-2026-53348ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions
- CVE-2026-53347drm/virtio: Fix driver removal with disabled KMS
- CVE-2026-53346rust: arm64: set uwtable llvm module flag for CONFIG_UNWIND_TABLES
- CVE-2026-53345KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying
- CVE-2026-53344pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init
- CVE-2026-53343ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow
- CVE-2026-53342arm64: mm: call pagetable dtor when freeing hot-removed page tables
- CVE-2026-53341fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh()
- CVE-2026-53340i2c: imx: fix clock and pinctrl state inconsistency in runtime PM
- CVE-2026-53339i2c: qcom-cci: Fix NULL pointer dereference in cci_remove()
- CVE-2026-53338net: airoha: Add NULL check for of_reserved_mem_lookup() in airoha_qdma_init_hfwd_queues()
- CVE-2026-53337net: bonding: fix NULL pointer dereference in bond_do_ioctl()
- CVE-2026-53336nvmem: layouts: onie-tlv: fix hang on unknown types
- CVE-2026-53335mm/damon/lru_sort: handle ctx allocation failure
- CVE-2026-53334mm/damon/reclaim: handle ctx allocation failure
- CVE-2026-53333mm/mincore: handle non-swap entries before !CONFIG_SWAP guard
- CVE-2026-53332slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd
- CVE-2026-53331slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock
- CVE-2026-53330drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()
- CVE-2026-53329drm/amd/display: Use krealloc_array() in dal_vector_reserve()
- CVE-2026-53328sched_ext: Don't warn on NULL cgrp_moving_from in scx_cgroup_move_task()