Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-53237gpio: mvebu: fix NULL pointer dereference in suspend/resume
- CVE-2026-53236tcp: restrict SO_ATTACH_FILTER to priv users
- CVE-2026-53235net: add pskb_may_pull() to skb_gro_receive_list()
- CVE-2026-53234net: ibm: emac: Fix use-after-free during device removal
- CVE-2026-53233netdev: fix double-free in netdev_nl_bind_rx_doit()
- CVE-2026-53232net: phy: clean the sfp upstream if phy probing fails
- CVE-2026-53231net: phy: don't try to setup PHY-driven SFP cages when using genphy
- CVE-2026-53230net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list
- CVE-2026-53229net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure
- CVE-2026-53228ipv6: sit: reload inner IPv6 header after GSO offloads
- CVE-2026-53227net: openvswitch: fix possible kfree_skb of ERR_PTR
- CVE-2026-53226gpio: rockchip: fix generic IRQ chip leak on remove
- CVE-2026-53225sctp: fix uninit-value in __sctp_rcv_asconf_lookup()
- CVE-2026-53224sctp: validate embedded INIT chunk and address list lengths in cookie
- CVE-2026-53223net: guard timestamp cmsgs to real error queue skbs
- CVE-2026-53222ptp: ocp: fix resource freeing order
- CVE-2026-53221ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()
- CVE-2026-53220netfilter: revalidate bridge ports
- CVE-2026-53219netfilter: x_tables: avoid leaking percpu counter pointers
- CVE-2026-53218netfilter: nft_exthdr: fix register tracking for F_PRESENT flag
- CVE-2026-53217net: mvpp2: sync RX data at the hardware packet offset
- CVE-2026-53216net: mvpp2: limit XDP frame size to the RX buffer
- CVE-2026-53215net: mvpp2: refill RX buffers before XDP or skb use
- CVE-2026-53214ipv6: Fix a potential NPD in cleanup_prefix_route()
- CVE-2026-53213drm/vc4: fix krealloc() memory leak
- CVE-2026-53212netfilter: nft_tunnel: fix use-after-free on object destroy
- CVE-2026-53211netfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR register
- CVE-2026-53210tee: shm: fix shm leak in register_shm_helper()
- CVE-2026-53209Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend
- CVE-2026-53208Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig