Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-46274io-wq: check that the predecessor is hashed in io_wq_remove_pending()
- CVE-2025-71315drm/vkms: Convert to DRM's vblank timer
- CVE-2026-46273ibmveth: Disable GSO for packets with small MSS
- CVE-2026-46272coresight: tmc-etr: Fix race condition between sysfs and perf mode
- CVE-2026-46271wifi: ath12k: do WoW offloads only on primary link
- CVE-2026-46270power: supply: rt9455: Fix use-after-free in power_supply_changed()
- CVE-2026-46269pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree
- CVE-2026-46268PCI/P2PDMA: Fix p2pmem_alloc_mmap() warning condition
- CVE-2026-46267nfc: hci: shdlc: Stop timers and work before freeing context
- CVE-2026-46266inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP
- CVE-2026-46265RDMA/hns: Fix WQ_MEM_RECLAIM warning
- CVE-2026-46264drm/xe/pf: Fix sysfs initialization
- CVE-2026-46263drm/amd/display: Fix out-of-bounds stream encoder index v3
- CVE-2026-46262ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()
- CVE-2026-46261spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe()
- CVE-2026-46260ipv6: Fix out-of-bound access in fib6_add_rt2node().
- CVE-2026-46259procfs: fix missing RCU protection when reading real_parent in do_task_stat()
- CVE-2026-46258gpio: cdev: Avoid NULL dereference in linehandle_create()
- CVE-2026-46257clocksource/drivers/timer-sp804: Fix an Oops when read_current_timer is called on ARM32 platforms where the SP804 is not registered as the…
- CVE-2026-46256NFS/localio: prevent direct reclaim recursion into NFS via nfs_writepages
- CVE-2026-46255dmaengine: fsl-edma: don't explicitly disable clocks in .remove()
- CVE-2026-46254AppArmor: Allow apparmor to handle unaligned dfa tables
- CVE-2026-46253pstore/ram: fix buffer overflow in persistent_ram_save_old()
- CVE-2026-46252regulator: core: fix locking in regulator_resolve_supply() error path
- CVE-2026-46251btrfs: fix block_group_tree dirty_list corruption
- CVE-2026-46250MIPS: Work around LLVM bug when gp is used as global register variable
- CVE-2026-46249octeontx2-af: Fix PF driver crash with kexec kernel booting
- CVE-2026-46248wifi: ath12k: clear stale link mapping of ahvif->links_map
- CVE-2026-46247clk: qcom: gfx3d: add parent to parent request map
- CVE-2026-46246power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler