Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-46124isofs: validate block number from NFS file handle in isofs_export_iget
- CVE-2026-46123Bluetooth: virtio_bt: clamp rx length before skb_put
- CVE-2026-46122wifi: b43: enforce bounds check on firmware key index in b43_rx()
- CVE-2026-46121mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock
- CVE-2026-46120ip6_gre: Use cached t->net in ip6erspan_changelink().
- CVE-2026-46119libceph: Fix slab-out-of-bounds access in auth message processing
- CVE-2026-46118pseries/papr-hvpipe: Fix null ptr deref in papr_hvpipe_dev_create_handle()
- CVE-2026-46117RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()
- CVE-2026-46116xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
- CVE-2026-46115block: add pgmap check to biovec_phys_mergeable
- CVE-2026-46114RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads
- CVE-2026-46113KVM: x86: Fix shadow paging use-after-free due to unexpected GFN
- CVE-2026-46112RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
- CVE-2026-46111Bluetooth: hci_conn: fix potential UAF in create_big_sync
- CVE-2026-46110net: stmmac: Prevent NULL deref when RX memory exhausted
- CVE-2026-46109usb: ulpi: fix memory leak on ulpi_register() error paths
- CVE-2026-46108ipmi:si: Return state to normal if message allocation fails
- CVE-2026-46107dm-thin: fix metadata refcount underflow
- CVE-2026-46106eventfs: Hold eventfs_mutex and SRCU when remount walks events
- CVE-2026-46105scsi: mpt3sas: Limit NVMe request size to 2 MiB
- CVE-2026-46104selinux: use sk blob accessor in socket permission helpers
- CVE-2026-46103can: ucan: fix devres lifetime
- CVE-2026-46102net: strparser: fix skb_head leak in strp_abort_strp()
- CVE-2026-46101netfilter: reject zero shift in nft_bitwise
- CVE-2026-46100fs: afs: revert mmap_prepare() change
- CVE-2026-46099net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
- CVE-2026-46098net: caif: clear client service pointer on teardown
- CVE-2026-46097Input: edt-ft5x06 - fix use-after-free in debugfs teardown
- CVE-2026-46096tpm2-sessions: Fix missing tpm_buf_destroy() in tpm2_read_public()
- CVE-2026-46095md/md-llbitmap: raise barrier before state machine transition