Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-53086net: bcmgenet: fix racing timeout handler
- CVE-2026-53085bpf: fix mm lifecycle in open-coded task_vma iterator
- CVE-2026-53084bpf: return VMA snapshot from task_vma iterator
- CVE-2026-53083bpf: Fix RCU stall in bpf_fd_array_map_clear()
- CVE-2026-53082net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf
- CVE-2026-53081bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars
- CVE-2026-53080net/sched: cls_fw: fix NULL dereference of "old" filters before change()
- CVE-2026-53079net_sched: fix skb memory leak in deferred qdisc drops
- CVE-2026-53078bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops
- CVE-2026-53077net/rds: Restrict use of RDS/IB to the initial network namespace
- CVE-2026-53076bpf: Fix OOB in pcpu_init_value
- CVE-2026-53075ppp: require CAP_NET_ADMIN in target netns for unattached ioctls
- CVE-2026-53074bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
- CVE-2026-53073Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error
- CVE-2026-53072Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER
- CVE-2026-53071Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp
- CVE-2026-53070sctp: disable BH before calling udp_tunnel_xmit_skb()
- CVE-2026-53069net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master
- CVE-2026-53068drm/komeda: fix integer overflow in AFBC framebuffer size check
- CVE-2026-53067PCI: endpoint: pci-ep-msi: Fix error unwind and prevent double alloc
- CVE-2026-53066drm/sun4i: backend: fix error pointer dereference
- CVE-2026-53065ASoC: sti: use managed regmap_field allocations
- CVE-2026-53064dm cache: fix null-deref with concurrent writes in passthrough mode
- CVE-2026-53063dm cache: fix write hang in passthrough mode
- CVE-2026-53062dm cache policy smq: fix missing locks in invalidating cache blocks
- CVE-2026-53061dm cache: fix dirty mapping checking in passthrough mode switching
- CVE-2026-53060dm cache metadata: fix memory leak on metadata abort retry
- CVE-2026-53059dm log: fix out-of-bounds write due to region_count overflow
- CVE-2026-53058drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable()
- CVE-2026-53057iommu/riscv: Add IOTINVAL after updating DDT/PDT entries