Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-46215drm: Set old handle to NULL before prime swap in change_handle
- CVE-2026-46214vsock/virtio: fix accept queue count leak on transport mismatch
- CVE-2026-46213HID: appletb-kbd: fix UAF in inactivity-timer cleanup path
- CVE-2026-46212batman-adv: bla: prevent use-after-free when deleting claims
- CVE-2026-46211drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata()
- CVE-2026-46210media: iris: fix use-after-free of fmt_src during MBPF check
- CVE-2026-46209drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
- CVE-2026-46208batman-adv: stop tp_meter sessions during mesh teardown
- CVE-2026-46207vsock/virtio: fix empty payload in tap skb for non-linear buffers
- CVE-2026-46206batman-adv: reject new tp_meter sessions during teardown
- CVE-2026-46205staging: media: atomisp: Disallow all private IOCTLs
- CVE-2026-46204drm/amdgpu/vcn4: Prevent OOB reads when parsing IB
- CVE-2026-46203spi: cadence-quadspi: fix unclocked access on unbind
- CVE-2026-46202HID: appletb-kbd: run inactivity autodim from workqueues
- CVE-2026-46201drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()
- CVE-2026-46200spi: mpc52xx: fix controller deregistration
- CVE-2026-46199drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg
- CVE-2026-46198batman-adv: fix integer overflow on buff_pos
- CVE-2026-46197drm/amdkfd: validate SVM ioctl nattr against buffer size
- CVE-2026-46196tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()
- CVE-2026-46195smb: client: validate dacloffset before building DACL pointers
- CVE-2026-46193xfrm: ah: account for ESN high bits in async callbacks
- CVE-2026-46192spi: microchip-core-qspi: don't attempt to transmit during emulated read-only dual/quad operations
- CVE-2026-46191fbcon: Avoid OOB font access if console rotation fails
- CVE-2026-46190mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()
- CVE-2026-46189RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
- CVE-2026-46188octeon_ep_vf: add NULL check for napi_build_skb()
- CVE-2026-46187wifi: rsi: fix kthread lifetime race between self-exit and external-stop
- CVE-2026-46186Bluetooth: virtio_bt: validate rx pkt_type header length
- CVE-2026-46185smb/client: fix out-of-bounds read in symlink_data()