Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-52996ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open
- CVE-2026-52995net/rds: zero per-item info buffer before handing it to visitors
- CVE-2026-52994vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting
- CVE-2026-52993tipc: fix double-free in tipc_buf_append()
- CVE-2026-52992fs/adfs: validate nzones in adfs_validate_bblk()
- CVE-2026-52991sched/psi: fix race between file release and pressure write
- CVE-2026-52990fsnotify: fix inode reference leak in fsnotify_recalc_mask()
- CVE-2026-52989nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers
- CVE-2026-52988netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase
- CVE-2026-52987drm/amdgpu: avoid double drm_exec_fini() in userq validate
- CVE-2026-52986netfilter: nf_conntrack_sip: don't use simple_strtoul
- CVE-2026-52985netdevsim: zero initialize struct iphdr in dummy sk_buff
- CVE-2026-52984net/sched: netem: fix queue limit check to include reordered packets
- CVE-2026-52983net: airoha: fix BQL imbalance in TX path
- CVE-2026-52982net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()
- CVE-2026-52981neigh: let neigh_xmit take skb ownership
- CVE-2026-52980sched/fair: Clear rel_deadline when initializing forked entities
- CVE-2026-52979net: psp: check for device unregister when creating assoc
- CVE-2026-52978net: psp: require admin permission for dev-set and key-rotate
- CVE-2026-52977futex: Prevent lockup in requeue-PI during signal/ timeout wakeup
- CVE-2026-52976drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()
- CVE-2026-52975bonding: 3ad: implement proper RCU rules for port->aggregator
- CVE-2026-52974net: tls: fix strparser anchor skb leak on offload RX setup failure
- CVE-2026-52973futex: Drop CLONE_THREAD requirement for private default hash alloc
- CVE-2026-52972crypto: af_alg - Cap AEAD AD length to 0x80000000
- CVE-2026-52971net: ena: PHC: Fix potential use-after-free in get_timestamp
- CVE-2026-52970netfilter: nft_ct: fix missing expect put in obj eval
- CVE-2026-52969KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
- CVE-2026-52968KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic
- CVE-2026-52967smb/client: fix possible infinite loop and oob read in symlink_data()