Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-52907media: rockchip: rkcif: fix off by one bugs
- CVE-2026-529069p: fix access mode flags being ORed instead of replaced
- CVE-2026-52905mm/damon/core: disallow non-power of two min_region_sz on damon_start()
- CVE-2026-52904drm/nouveau: fix nvkm_device leak on aperture removal failure
- CVE-2026-46332greybus: gb-beagleplay: bound bootloader receive buffering
- CVE-2026-46330Revert "net/smc: Introduce TCP ULP support"
- CVE-2026-46329erofs: handle end of filesystem properly for file-backed mounts
- CVE-2026-46328apparmor: fix rlimit for posix cpu timers
- CVE-2026-46327dm: fix unlocked test for dm_suspended_md
- CVE-2026-46326iio: pressure: mprls0025pa: fix spi_transfer struct initialisation
- CVE-2026-46325RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE
- CVE-2026-46324netfilter: nf_tables: use list_del_rcu for netlink hooks
- CVE-2026-46323net: gro: don't merge zcopy skbs
- CVE-2026-46322tun: free page on build_skb failure in tun_xdp_one()
- CVE-2026-46321tun: free page on short-frame rejection in tun_xdp_one()
- CVE-2026-46320tap: free page on error paths in tap_get_user_xdp()
- CVE-2026-46319net/sched: act_ct: Only release RCU read lock after ct_ft
- CVE-2026-46318Revert "mm/hugetlbfs: update hugetlbfs to use mmap_prepare"
- CVE-2026-46317KVM: arm64: Reassign nested_mmus array behind mmu_lock
- CVE-2026-46316KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry
- CVE-2026-46315io_uring/waitid: clear waitid info before copying it to userspace
- CVE-2026-46314drm/v3d: Reject empty multisync extension to prevent infinite loop
- CVE-2026-46313media: intel/ipu6: fix error pointer dereference
- CVE-2026-46312media: videobuf2: Set vma_flags in vb2_dma_sg_mmap
- CVE-2026-46311drm/amdgpu/userq: fix access to stale wptr mapping
- CVE-2026-46310media: renesas: vsp1: Fix NULL pointer deref on module unload
- CVE-2026-46309drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise
- CVE-2026-46308pmdomain: mediatek: fix use-after-free in scpsys_get_bus_protection_legacy()
- CVE-2026-46307wifi: ath5k: do not access array OOB
- CVE-2026-46306flow_dissector: do not dissect PPPoE PFC frames