Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98711wifi: cw1200: fix TX padding OOB read leaking heap data to device
- CVE-2026-98710wifi: iwlegacy: 3945: free EEPROM data on remove
- CVE-2026-98709wifi: mac80211: count only matching reservations in reserved switch
- CVE-2026-98708wifi: mac80211: keep paired old chanctx alive
- CVE-2026-98707wifi: mac80211: shut down RX BA session timer on teardown
- CVE-2026-98706wifi: mac80211: drain PS delivery work during station teardown
- CVE-2026-98705wifi: mac80211: account proxy paths against the mesh path limit
- CVE-2026-98704wifi: mac80211: keep fallback association elements alive
- CVE-2026-98703wifi: mac80211: minstrel_ht: validate fixed rate index
- CVE-2026-98702wifi: mac80211: reject invalid 320 MHz CSA bandwidth
- CVE-2026-98701wifi: mac80211: release mesh path quota on failed additions
- CVE-2026-98700wifi: mac80211: set info->band for 802.3 encap offload frames
- CVE-2026-98699wifi: mac80211: fix mesh fast xmit path deletion UAF
- CVE-2026-98698wifi: mac80211: handle empty FILS association request payload
- CVE-2026-98697USB: serial: fix dynamic id driver deregistration race
- CVE-2026-98696USB: serial: fix driver deregistration order
- CVE-2026-98695USB: serial: fix ioctl hangup race
- CVE-2026-98694thunderbolt: Fix KASAN reported use-after-free when request is canceled
- CVE-2026-98693thunderbolt: Hold a router reference for each allocated HopID
- CVE-2026-98692thunderbolt: Make the DP tunnel activation callback mandatory
- CVE-2026-98691thunderbolt: Tear down inactive DP tunnels when the domain is stopped
- CVE-2026-98690thunderbolt: Fix domain reference leak when DPRX read is canceled
- CVE-2026-98689thunderbolt: Don't access a DP tunnel after its DPRX read was canceled
- CVE-2026-98688thunderbolt: Fix NULL dereference in tb_remove_work()
- CVE-2026-98687thunderbolt: Reject oversized XDomain properties responses
- CVE-2026-98686smb: client: discard post-EOF pagecache when extending a file via zero range
- CVE-2026-98685smb: client: discard post-EOF pagecache when extending a file via clone range
- CVE-2026-98684smb: client: flush and commit data before querying allocated ranges
- CVE-2026-98683smb: client: flush dirty data before zeroing a range
- CVE-2026-98682smb: client: drain and invalidate before server-side copy/clone