Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-45975ublk: use READ_ONCE() to read struct ublksrv_ctrl_cmd
- CVE-2026-45974btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found
- CVE-2026-45973RDMA/mlx5: Fix UMR hang in LAG error state unload
- CVE-2026-45972smb: client: fix potential UAF and double free in smb2_open_file()
- CVE-2026-45971bpf: Limit bpf program signature size
- CVE-2026-45970bonding: alb: fix UAF in rlb_arp_recv during bond up/down
- CVE-2026-45969HID: playstation: Add missing check for input_ff_create_memless
- CVE-2026-45968cpuidle: Skip governor when only one idle state is available
- CVE-2026-45967bpf: Return proper address for non-zero offsets in insn array
- CVE-2026-45966apparmor: fix NULL pointer dereference in __unix_needs_revalidation
- CVE-2026-45965apparmor: fix invalid deref of rawdata when export_binary is unset
- CVE-2026-45964SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path
- CVE-2026-45963ASoC: nau8821: Cancel delayed work on component remove
- CVE-2026-45962ublk: Validate SQE128 flag before accessing the cmd
- CVE-2026-45961gfs2: fix memory leaks in gfs2_fill_super error path
- CVE-2026-45960hfsplus: return error when node already exists in hfs_bnode_create
- CVE-2026-45959crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree
- CVE-2026-45958drm/exynos: vidi: fix to avoid directly dereferencing user pointer
- CVE-2026-45957rcu: Fix rcu_read_unlock() deadloop due to softirq
- CVE-2026-45956drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl()
- CVE-2026-45955md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout
- CVE-2026-45954fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe()
- CVE-2026-45953md/raid5: fix IO hang with degraded array with llbitmap
- CVE-2026-45952eth: fbnic: Add validation for MTU changes
- CVE-2026-45951bpf: Fix a potential use-after-free of BTF object
- CVE-2026-45950crypto: starfive - Fix memory leak in starfive_aes_aead_do_one_req()
- CVE-2026-45949hwrng: core - use RCU and work_struct to fix race condition
- CVE-2026-45948ext4: fix memory leak in ext4_ext_shift_extents()
- CVE-2026-45947drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc()
- CVE-2026-45946power: supply: ab8500: Fix use-after-free in power_supply_changed()