Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-46064ibmasm: fix heap over-read in ibmasm_send_i2o_message()
- CVE-2026-46063x86/shstk: Prevent deadlock during shstk sigreturn
- CVE-2026-46062ntfs3: fix integer overflow in run_unpack() volume boundary check
- CVE-2026-46061jbd2: fix deadlock in jbd2_journal_cancel_revoke()
- CVE-2026-46060crypto: qat - fix IRQ cleanup on 6xxx probe failure
- CVE-2026-46059KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN
- CVE-2026-46058media: amphion: Fix race between m2m job_abort and device_run
- CVE-2026-46057landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork()
- CVE-2026-46056Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
- CVE-2026-46055apparmor: Fix string overrun due to missing termination
- CVE-2026-46054selinux: fix overlayfs mmap() and mprotect() access checks
- CVE-2026-46053net: rds: fix MR cleanup on copy error
- CVE-2026-46052ceph: only d_add() negative dentries when they are unhashed
- CVE-2026-46051md/raid5: fix soft lockup in retry_aligned_read()
- CVE-2026-46050md/raid10: fix deadlock with check operation and nowait requests
- CVE-2026-46049ALSA: ctxfi: Add fallback to default RSR for S/PDIF
- CVE-2026-46048ALSA: caiaq: fix usb_dev refcount leak on probe failure
- CVE-2026-46047net: qrtr: ns: Fix use-after-free in driver remove()
- CVE-2026-46046ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()
- CVE-2026-46045md/md-llbitmap: skip reading rdevs that are not in_sync
- CVE-2026-46044ipmi:ssif: Clean up kthread on errors
- CVE-2026-46043RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv
- CVE-2026-46042mm/mempolicy: fix memory leaks in weighted_interleave_auto_store()
- CVE-2026-46041greybus: gb-beagleplay: fix sleep in atomic context in hdlc_tx_frames()
- CVE-2026-46040inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails
- CVE-2026-46039rxgk: Fix potential integer overflow in length check
- CVE-2026-46038net: qrtr: ns: Free the node during ctrl_cmd_bye()
- CVE-2026-46037ipv4: icmp: validate reply type before using icmp_pointers
- CVE-2026-46036vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex
- CVE-2026-46035mm/page_alloc: return NULL early from alloc_frozen_pages_nolock() in NMI on UP