Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-46094ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access
- CVE-2026-46093mm/vmalloc: take vmap_purge_lock in shrinker
- CVE-2026-46092wifi: rtw88: check for PCI upstream bridge existence
- CVE-2026-46091media: rc: igorplugusb: heed coherency rules
- CVE-2026-46090ALSA: aloop: Fix peer runtime UAF during format-change stop
- CVE-2026-46089zram: do not forget to endio for partial discard requests
- CVE-2026-46088ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()
- CVE-2026-46087mm/damon/stat: fix memory leak on damon_start() failure in damon_stat_start()
- CVE-2026-46086net: bridge: use a stable FDB dst snapshot in RCU readers
- CVE-2026-46085rxrpc: Fix rxkad crypto unalignment handling
- CVE-2026-46084RDMA/mana_ib: Disable RX steering on RSS QP destroy
- CVE-2026-46083spi: fix resource leaks on device setup failure
- CVE-2026-46082KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0
- CVE-2026-46081crypto: acomp - fix wrong pointer stored by acomp_save_req()
- CVE-2026-46080ocfs2: split transactions in dio completion to avoid credit exhaustion
- CVE-2026-46079rbd: fix null-ptr-deref when device_add_disk() fails
- CVE-2026-46078erofs: fix the out-of-bounds nameoff handling for trailing dirents
- CVE-2026-46077crypto: atmel-tdes - fix DMA sync direction
- CVE-2026-46076KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1
- CVE-2026-46075crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path
- CVE-2026-46074spi: ch341: fix memory leaks on probe failures
- CVE-2026-46073hwmon: (powerz) Fix missing usb_kill_urb() on signal interrupt
- CVE-2026-46072ntfs3: add buffer boundary checks to run_unpack()
- CVE-2026-46071KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12
- CVE-2026-46070md/raid5: validate payload size before accessing journal metadata
- CVE-2026-46069wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()
- CVE-2026-46068crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx
- CVE-2026-46067mm/damon/core: validate damos_quota_goal->nid for node_memcg_{used,free}_bp
- CVE-2026-46066ceph: fix num_ops off-by-one when crypto allocation fails
- CVE-2026-46065fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info