Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-52966drm: Replace old pointer to new idr
- CVE-2026-52965drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure
- CVE-2026-52964ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans
- CVE-2026-52963ALSA: usb-audio: Bound MIDI endpoint descriptor scans
- CVE-2026-52962ceph: fix a buffer leak in __ceph_setxattr()
- CVE-2026-52961ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size
- CVE-2026-52960ceph: put folios not suitable for writeback
- CVE-2026-52959virt: sev-guest: Do not use host-controlled page order in cleanup path
- CVE-2026-52958libceph: Fix potential out-of-bounds access in osdmap_decode()
- CVE-2026-52957libceph: Fix potential null-ptr-deref in decode_choose_args()
- CVE-2026-52956libceph: Fix potential out-of-bounds access in __ceph_x_decrypt()
- CVE-2026-52955libceph: Fix potential out-of-bounds access in crush_decode()
- CVE-2026-52954libceph: handle rbtree insertion error in decode_choose_args()
- CVE-2026-52953iommu/vt-d: Fix oops due to out of scope access
- CVE-2026-52952iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset
- CVE-2026-52951drm/xe/dma-buf: handle empty bo and UAF races
- CVE-2026-52950drm/xe/dma-buf: fix UAF with retry loop
- CVE-2026-52949drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure
- CVE-2026-52948i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl
- CVE-2026-52947net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove
- CVE-2026-52946fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
- CVE-2026-52945Revert "wireguard: device: enable threaded NAPI"
- CVE-2026-52944ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE
- CVE-2026-52943net: skbuff: fix missing zerocopy reference in pskb_carve helpers
- CVE-2026-52942netfilter: nf_log: validate MAC header was set before dumping it
- CVE-2026-52941net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint
- CVE-2026-52940tun: zero the whole vnet header in tun_put_user()
- CVE-2026-52939net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion
- CVE-2026-52938bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths
- CVE-2026-52937tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR