Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-46154sched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup setters
- CVE-2026-461538021q: delete cleared egress QoS mappings
- CVE-2026-46152wifi: mac80211: drop stray 'static' from fast-RX rx_result
- CVE-2026-46151usb: usblp: fix heap leak in IEEE 1284 device ID via short response
- CVE-2026-46150fanotify: fix false positive on permission events
- CVE-2026-46149scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
- CVE-2026-46148spi: microchip-core-qspi: control built-in cs manually
- CVE-2026-46147KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu()
- CVE-2026-46146ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()
- CVE-2026-46145RDMA/mana: Validate rx_hash_key_len
- CVE-2026-46144RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()
- CVE-2026-46143ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens
- CVE-2026-46142net: libwx: fix VF illegal register access
- CVE-2026-46141powerpc/xive: fix kmemleak caused by incorrect chip_data lookup
- CVE-2026-46140Bluetooth: btmtk: validate WMT event SKB length before struct access
- CVE-2026-46139smb: client: use kzalloc to zero-initialize security descriptor buffer
- CVE-2026-46138Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt
- CVE-2026-46137mptcp: pm: ADD_ADDR rtx: fix potential data-race
- CVE-2026-46136wifi: mt76: mt7921: fix a potential clc buffer length underflow
- CVE-2026-46135nvmet-tcp: fix race between ICReq handling and queue teardown
- CVE-2026-46134platform/chrome: cros_ec_typec: Init mutex in Thunderbolt registration
- CVE-2026-46133RDMA/rxe: Reject unknown opcodes before ICRC processing
- CVE-2026-46132net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo
- CVE-2026-46131KVM: x86: check for nEPT/nNPT in slow flush hypercalls
- CVE-2026-46130dm-verity-fec: fix reading parity bytes split across blocks (take 3)
- CVE-2026-46129btrfs: fix double free in create_space_info() error path
- CVE-2026-46128ipmi: Check event message buffer response for bad data
- CVE-2026-46127RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()
- CVE-2026-46126RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss()
- CVE-2026-46125wifi: mac80211: remove station if connection prep fails