Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98681smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races
- CVE-2026-98680iio: accel: kionix-kx022a: Prevent memory leak and fix state
- CVE-2026-98679iio: accel: kxcjk-1013: reject duplicate event disable
- CVE-2026-98678iio: adc: ad4030: fix invalid oversampling_ratio validation
- CVE-2026-98677iio: adc: ad_sigma_delta: fix use-after-free on unbind
- CVE-2026-98676iio: adc: ade9000: fix NULL pointer dereference in clkout registration
- CVE-2026-98675iio: adc: ade9000: handle Phase C dip events in IRQ1 handler
- CVE-2026-98674iio: adc: adi-axi-adc: Initialize state mutex
- CVE-2026-98673iio: adc: pac1934: check ACPI label duplication
- CVE-2026-98672iio: adc: stm32-adc: fix possible division by zero in processed channel
- CVE-2026-98671iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure
- CVE-2026-98670iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind
- CVE-2026-98669iio: buffer: serialize buffer teardown with mode claims
- CVE-2026-98668iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.
- CVE-2026-98667iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data
- CVE-2026-98666iio: gyro: adis16136: fix unprotected debugfs reads
- CVE-2026-98665iio: health: max30102: fix NULL dereference in interrupt handler
- CVE-2026-98664iio: imu: adis16400: fix unprotected debugfs reads
- CVE-2026-98663iio: imu: adis16480: fix unprotected debugfs reads
- CVE-2026-98662iio: light: gp2ap020a00f: drain irq_work after free_irq
- CVE-2026-98661iio: light: rohm-bu27034: Fix infinite delay on error
- CVE-2026-98660iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup
- CVE-2026-98659iio: pressure: rohm-bm1390: Return error when read fails
- CVE-2026-98658iio: proximity: aw96103: validate firmware data length
- CVE-2026-98657iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure
- CVE-2026-98656iio: trigger: cancel reenable_work before freeing trigger
- CVE-2026-98655perf: Require kernel access for text poke events
- CVE-2026-98653KVM: s390: Fix _gaccess_shadow_fault()
- CVE-2026-98652KVM: s390: Add missing srcu in kvm_s390_set_irq_state()
- CVE-2026-98651KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()