Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-46184sound: ua101: fix division by zero at probe
- CVE-2026-46183mm/damon/sysfs-schemes: protect path kfree() with damon_sysfs_lock
- CVE-2026-46182pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace
- CVE-2026-46181RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
- CVE-2026-46180wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task
- CVE-2026-46179ASoC: SOF: Don't allow pointer operations on unconfigured streams
- CVE-2026-46178RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
- CVE-2026-46177ipmi: Add limits to event and receive message requests
- CVE-2026-46176RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()
- CVE-2026-46175f2fs: fix fsck inconsistency caused by FGGC of node block
- CVE-2026-46174x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache
- CVE-2026-46173exit: prevent preemption of oopsing TASK_DEAD task
- CVE-2026-46172ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
- CVE-2026-46171riscv: kvm: fix vector context allocation leak
- CVE-2026-46170mptcp: pm: ADD_ADDR rtx: free sk if last
- CVE-2026-46169hfsplus: fix uninit-value by validating catalog record size
- CVE-2026-46168mptcp: fix scheduling with atomic in timestamp sockopt
- CVE-2026-46167usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl
- CVE-2026-46166wifi: mac80211: use safe list iteration in radar detect work
- CVE-2026-46165openvswitch: vport: fix self-deadlock on release of tunnel ports
- CVE-2026-46164btrfs: fix double free in create_space_info_sub_group() error path
- CVE-2026-46163wifi: b43legacy: enforce bounds check on firmware key index in RX path
- CVE-2026-46162ice: fix double free in ice_sf_eth_activate() error path
- CVE-2026-46161md/raid10: fix divide-by-zero in setup_geo() with zero far_copies
- CVE-2026-46160btrfs: fix missing last_unlink_trans update when removing a directory
- CVE-2026-46159btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak
- CVE-2026-46158mptcp: pm: ADD_ADDR rtx: always decrease sk refcount
- CVE-2026-46157ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger
- CVE-2026-46156LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()
- CVE-2026-46155smb/client: fix out-of-bounds read in smb2_compound_op()