Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-53297net: mana: Guard mana_remove against double invocation
- CVE-2026-53296mailbox: mailbox-test: free channels on probe error
- CVE-2026-53295mailbox: add sanity check for channel array
- CVE-2026-53294mailbox: mailbox-test: don't free the reused channel
- CVE-2026-53293drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG
- CVE-2026-53292net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind
- CVE-2026-53291ALSA: hda/conexant: Fix missing error check for jack detection
- CVE-2026-53290drm/xe/eustall: Fix drm_dev_put called before stream disable in close
- CVE-2026-53289ice: fix NULL pointer dereference in ice_reset_all_vfs()
- CVE-2026-53288arm64: Reserve an extra page for early kernel mapping
- CVE-2026-53287audit: fix incorrect inheritable capability in CAPSET records
- CVE-2026-53286idpf: fix double free and use-after-free in aux device error paths
- CVE-2026-53285drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED
- CVE-2026-53284btrfs: only release the dirty pages io tree after successful writes
- CVE-2026-53283iommu/amd: Bounds-check devid in __rlookup_amd_iommu()
- CVE-2026-53282x86/kexec: Push kjump return address even for non-kjump kexec
- CVE-2026-53281iommu/vt-d: Avoid NULL pointer dereference or refcount corruption
- CVE-2026-53280iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done()
- CVE-2026-53279drm/gma500/oaktrail_lvds: fix hang on init failure
- CVE-2026-53278arm_mpam: Check whether the config array is allocated before destroying it
- CVE-2026-53277KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation
- CVE-2026-53276Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer
- CVE-2026-53275ipv6: mcast: Fix use-after-free when processing MLD queries
- CVE-2026-53274net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS
- CVE-2026-53273tee: optee: prevent use-after-free when the client exits before the supplicant
- CVE-2026-53272erofs: fix use-after-free on sbi->sync_decompress
- CVE-2026-53271ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers
- CVE-2026-53270ipvs: clear the svc scheduler ptr early on edit
- CVE-2026-53269netfilter: synproxy: add mutex to guard hook reference counting
- CVE-2026-53268netfilter: conntrack_irc: fix possible out-of-bounds read