Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-53026NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg
- CVE-2026-53025greybus: raw: fix use-after-free on cdev close
- CVE-2026-53024greybus: raw: fix use-after-free if write is called after disconnect
- CVE-2026-53023fs/ntfs3: terminate the cached volume label after UTF-8 conversion
- CVE-2026-53022platform/x86: dell-wmi-sysman: bound enumeration string aggregation
- CVE-2026-53021scsi: target: core: Fix integer overflow in UNMAP bounds check
- CVE-2026-53020um: Fix potential race condition in TLB sync
- CVE-2026-53019clk: spacemit: ccu_mix: fix inverted condition in ccu_mix_trigger_fc()
- CVE-2026-53018f2fs: avoid reading already updated pages during GC
- CVE-2026-53017f2fs: fix data loss caused by incorrect use of nat_entry flag
- CVE-2026-53016crypto: ccp - copy IV using skcipher ivsize
- CVE-2026-53015erofs: unify lcn as u64 for 32-bit platforms
- CVE-2026-53014net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir
- CVE-2026-53013macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF
- CVE-2026-53012nexthop: fix IPv6 route referencing IPv4 nexthop
- CVE-2026-53011net/sched: taprio: fix use-after-free in advance_sched() on schedule switch
- CVE-2026-53010ksmbd: fix use-after-free in smb2_open during durable reconnect
- CVE-2026-53009ice: fix double-free of tx_buf skb
- CVE-2026-53008ice: fix race condition in TX timestamp ring cleanup
- CVE-2026-53007ice: fix potential NULL pointer deref in error path of ice_set_ringparam()
- CVE-2026-53006ipv6: fix possible UAF in icmpv6_rcv()
- CVE-2026-53005af_unix: Drop all SCM attributes for SOCKMAP.
- CVE-2026-53004sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks
- CVE-2026-53003pppoe: drop PFC frames
- CVE-2026-53002netfilter: conntrack: remove sprintf usage
- CVE-2026-53001netfilter: xtables: restrict several matches to inet family
- CVE-2026-53000netfilter: nat: use kfree_rcu to release ops
- CVE-2026-52999netfilter: nfnetlink_osf: fix out-of-bounds read on option matching
- CVE-2026-52998netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check
- CVE-2026-52997net/sched: sch_dualpi2: drain both C-queue and L-queue in dualpi2_change()