Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-52936crypto: jitterentropy - replace long-held spinlock with mutex
- CVE-2026-52935xfrm: espintcp: do not reuse an in-progress partial send
- CVE-2026-52934batman-adv: tvlv: reject oversized TVLV packets
- CVE-2026-52933io_uring/poll: fix signed comparison in io_poll_get_ownership()
- CVE-2026-52932xfrm: ipcomp: Free destination pages on acomp errors
- CVE-2026-52931batman-adv: tp_meter: avoid use of uninit sender vars
- CVE-2026-52930ipc/shm: serialize orphan cleanup with shm_nattch updates
- CVE-2026-52929sctp: stream: fully roll back denied add-stream state
- CVE-2026-52928af_unix: Reject SIOCATMARK on non-stream sockets
- CVE-2026-52927netfilter: ebtables: fix OOB read in compat_mtw_from_user
- CVE-2026-52926batman-adv: clear current gateway during teardown
- CVE-2026-52925vrf: Fix a potential NPD when removing a port from a VRF
- CVE-2026-52924sctp: purge outqueue on stale COOKIE-ECHO handling
- CVE-2026-52923ipc: limit next_id allocation to the valid ID range
- CVE-2026-52922batman-adv: dat: handle forward allocation error
- CVE-2026-52921netfilter: ipset: stop hash: range iteration at end
- CVE-2026-52920netfilter: xt_policy: fix strict mode inbound policy matching
- CVE-2026-52919batman-adv: fix tp_meter counter underflow during shutdown
- CVE-2026-52918Bluetooth: serialize accept_q access
- CVE-2026-52917sctp: diag: reject stale associations in dump_one path
- CVE-2026-52916batman-adv: frag: disallow unicast fragment in fragment
- CVE-2026-52915netfilter: ip6t_hbh: reject oversized option lists
- CVE-2026-52914batman-adv: fix fragment reassembly length accounting
- CVE-2026-52913batman-adv: v: stop OGMv2 on disabled interface
- CVE-2026-52912netfilter: nf_queue: hold bridge skb->dev while queued
- CVE-2026-52911ksmbd: scope conn->binding slowpath to bound sessions only
- CVE-2026-52910bpf: Free reuseport cBPF prog after RCU grace period.
- CVE-2026-52909ip6_vti: set netns_immutable on the fallback device.
- CVE-2026-52908RDMA: During rereg_mr ensure that REREG_ACCESS is compatible
- CVE-2026-46331net/sched: fix pedit partial COW leading to page cache corruption