Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-46245drm/amd/display: Fix dc_link NULL handling in HPD init
- CVE-2025-71314drm/panthor: Recover from panthor_gpu_flush_caches() failures
- CVE-2025-71313PCI: endpoint: Add missing NULL check for alloc_workqueue()
- CVE-2026-46244netfilter: nft_inner: Fix IPv6 inner_thoff desync
- CVE-2026-46243smb: client: reject userspace cifs.spnego descriptions
- CVE-2026-46242eventpoll: fix ep_remove struct eventpoll / struct file UAF
- CVE-2026-46241spi: mpc52xx: fix use-after-free on registration failure
- CVE-2026-46240media: iris: Fix use-after-free in iris_release_internal_buffers()
- CVE-2026-46239media: i2c: ov5647: Fix runtime PM refcount leak in s_ctrl
- CVE-2026-46238batman-adv: stop caching unowned originator pointers in BAT IV
- CVE-2026-46236media: rc: xbox_remote: heed DMA restrictions
- CVE-2026-46235media: saa7164: add ioremap return checks and cleanups
- CVE-2026-46234vsock: fix buffer size clamping order
- CVE-2026-46233batman-adv: bla: only purge non-released claims
- CVE-2026-46232HID: playstation: Clamp num_touch_reports
- CVE-2026-46231batman-adv: bla: put backbone reference on failed claim hash insert
- CVE-2026-46230drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
- CVE-2026-46229drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure
- CVE-2026-46228spi: ch341: fix devres lifetime
- CVE-2026-46227sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
- CVE-2026-46226spi: fsl: fix controller deregistration
- CVE-2026-46225spi: rspi: fix controller deregistration
- CVE-2026-46224drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure
- CVE-2026-46223cgroup: Defer css percpu_ref kill on rmdir until cgroup is depopulated
- CVE-2026-46222media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads
- CVE-2026-46221EDAC/versalnet: Fix device name memory leak
- CVE-2026-46220drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission
- CVE-2026-46219spi: mpc52xx: fix use-after-free on unbind
- CVE-2026-46218drm/amdgpu: Add bounds checking to ib_{get,set}_value
- CVE-2026-46216drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status()