Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-46305staging: rtl8723bs: os_dep: avoid NULL pointer dereference in rtw_cbuf_alloc
- CVE-2026-46304nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free
- CVE-2026-46303isofs: validate Rock Ridge CE continuation extent against volume size
- CVE-2026-46302selinux: allow multiple opens of /sys/fs/selinux/policy
- CVE-2026-46301spi: topcliff-pch: fix use-after-free on unbind
- CVE-2026-46299hfsplus: fix held lock freed on hfsplus_fill_super()
- CVE-2026-46298pseries/papr-hvpipe: Fix race with interrupt handler
- CVE-2026-46297net: libwx: use request_irq for VF misc interrupt
- CVE-2026-46296spi: s3c64xx: fix NULL-deref on driver unbind
- CVE-2026-46295KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is empty
- CVE-2026-46294dm: fix a buffer overflow in ioctl processing
- CVE-2026-46293clk: microchip: mpfs-ccc: fix out of bounds access during output registration
- CVE-2026-46292pmdomain: core: Fix detach procedure for virtual devices in genpd
- CVE-2026-46291crypto: caam - guard HMAC key hex dumps in hash_digest_key
- CVE-2026-46290x86/efi: Fix graceful fault handling after FPU softirq changes
- CVE-2026-46289lib/scatterlist: fix length calculations in extract_kvec_to_sg
- CVE-2026-46288of: unittest: fix use-after-free in of_unittest_changeset()
- CVE-2026-46287net: txgbe: fix RTNL assertion warning when remove module
- CVE-2026-46286leds: qcom-lpg: Check for array overflow when selecting the high resolution
- CVE-2026-46285mtd: docg3: fix use-after-free in docg3_release()
- CVE-2026-46284mm/hugetlb: fix early boot crash on parameters without '=' separator
- CVE-2026-46283tpm: Use kfree_sensitive() to free auth session in tpm_dev_release()
- CVE-2026-46282iio: frequency: admv1013: fix NULL pointer dereference on str
- CVE-2026-46281vmalloc: fix buffer overflow in vrealloc_node_align()
- CVE-2026-46280lib: test_hmm: evict device pages on file close to avoid use-after-free
- CVE-2026-46279mm/alloc_tag: clear codetag for pages allocated before page_ext initialization
- CVE-2026-46278drm/imagination: Fix segfault when updating ftrace mask
- CVE-2026-46277mm/zone_device: do not touch device folio after calling ->folio_free()
- CVE-2026-46276drm/amdgpu: fix zero-size GDS range init on RDNA4
- CVE-2026-46275Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths