Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-99254io_uring: don't flood a cancelling task with task_work
- CVE-2026-99253io_uring/cancel: rearm local work wake up before sleep
- CVE-2026-99251Drivers: hv: Avoid infinite retry loop in init_vp_index()
- CVE-2026-99250printk: Postpone kthread startup
- CVE-2026-99249pid_namespace: make zap_pid_ns_processes() freezable
- CVE-2026-99248i2c: xiic: restore non-managed runtime PM to fix clk WARN flood
- CVE-2026-99247tracing: Do not initialize tracefs work if tracing is disabled
- CVE-2026-99246tipc: protect node reset trace dump with node lock
- CVE-2026-99245KEYS: Fix key_reject_and_link() race with keyring restriction
- CVE-2026-99244pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper
- CVE-2026-99242ntfs: fix race between fallocate and mmap reads
- CVE-2026-99241ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite()
- CVE-2026-99240mm/damon/core: error damos_commit_quota_goal() for zero target_value
- CVE-2026-99239Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn
- CVE-2026-99238tracing: Hold trace_types_lock when updating modules in persistent instances
- CVE-2026-99237tracing: Hold trace_types_lock when resetting last boot data from readers
- CVE-2026-99236tracing: Reject incomplete event filter expressions
- CVE-2026-99235tracing: Save the event file instead of the compatible histogram
- CVE-2026-99234tracing: Unregister field variable histograms when the command fails
- CVE-2026-99233tracing/histograms: Verify event_call identity when updating synth_event refcount
- CVE-2026-99232tracing/syscalls: Use copy_from_user for the faultable syscall buffer
- CVE-2026-99231io_uring/waitid: own the request before clearing ->head
- CVE-2026-99230io_uring/cmd: don't leave list poison in ->hash_node
- CVE-2026-99229io_uring/wait: don't spin on a stuck overflow list
- CVE-2026-99228io_uring/io-wq: don't lose the signal that ends work
- CVE-2026-99227io_uring/waitid: prevent cancel reference wrap
- CVE-2026-99226keys: Avoid the owner account dereference in named keyring lookup
- CVE-2026-99225keys: Check the authorization payload in process keyring searches
- CVE-2026-99224keys: Protect the type name while describing a key
- CVE-2026-99223keys: make keyring indexes independent of kernel addresses