Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-53267netfilter: nft_ct: bail out on template ct in get eval
- CVE-2026-53266netfilter: bridge: make ebt_snat ARP rewrite writable
- CVE-2026-53265dm cache policy smq: check allocation under invalidate lock
- CVE-2026-53264net/sched: act_api: use RCU with deferred freeing for action lifecycle
- CVE-2026-532636lowpan: fix off-by-one in multicast context address compression
- CVE-2026-53262l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()
- CVE-2026-53261devlink: Release nested relation on devlink free
- CVE-2026-53260tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().
- CVE-2026-53259ipv6: anycast: insert aca into global hash under idev->lock
- CVE-2026-53258wifi: fix leak if split 6 GHz scanning fails
- CVE-2026-53257wifi: cfg80211: enforce HE/EHT cap/oper consistency
- CVE-2026-53256Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()
- CVE-2026-53255Bluetooth: MGMT: validate advertising TLV before type checks
- CVE-2026-53254Bluetooth: RFCOMM: validate skb length in MCC handlers
- CVE-2026-53253Bluetooth: bnep: reject short frames before parsing
- CVE-2026-53252Bluetooth: fix memory leak in error path of hci_alloc_dev()
- CVE-2026-53251Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync
- CVE-2026-53250xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata()
- CVE-2026-53249ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options
- CVE-2026-53248net: airoha: Fix use-after-free in metadata dst teardown
- CVE-2026-53247net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown
- CVE-2026-53246sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing
- CVE-2026-53245net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr
- CVE-2026-53244VFS: fix possible failure to unlock in nfsd4_create_file()
- CVE-2026-53243rseq: Fix using an uninitialized stack variable in rseq_exit_user_update()
- CVE-2026-53242ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams
- CVE-2026-53241ALSA: seq: dummy: fix UMP event stack overread
- CVE-2026-53240xfrm: iptfs: fix use-after-free on first_skb in __input_process_payload
- CVE-2026-53239xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()
- CVE-2026-53238netlabel: validate unlabeled address and mask attribute lengths