Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-45945iommu/vt-d: Fix race condition during PASID entry replacement
- CVE-2026-45944iommu/vt-d: Clear Present bit before tearing down context entry
- CVE-2026-45943erofs: fix inline data read failure for ztailpacking pclusters
- CVE-2026-45942ext4: fix e4b bitmap inconsistency reports
- CVE-2026-45941tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure
- CVE-2026-45940net: stmmac: fix oops when split header is enabled
- CVE-2026-45939gpib: Fix memory leak in ni_usb_init()
- CVE-2026-45938power: supply: pm8916_lbc: Fix use-after-free in power_supply_changed()
- CVE-2026-45937crypto: inside-secure/eip93 - fix kernel panic in driver detach
- CVE-2026-45936power: supply: goldfish: Fix use-after-free in power_supply_changed()
- CVE-2026-45935fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot
- CVE-2026-45934btrfs: fix EEXIST abort due to non-consecutive gaps in chunk allocation
- CVE-2026-45933bpf: Preserve id of register in sync_linked_regs()
- CVE-2026-45932bpf: Fix tcx/netkit detach permissions when prog fd isn't given
- CVE-2026-45931accel/amdxdna: Hold mm structure across iommu_sva_unbind_device()
- CVE-2026-45930net: mctp: ensure our nlmsg responses are initialised
- CVE-2026-45929ovpn: fix possible use-after-free in ovpn_net_xmit
- CVE-2026-45928media: chips-media: wave5: Fix memory leak on codec_info allocation failure
- CVE-2026-45927bpf: Require frozen map for calculating map hash
- CVE-2026-45926rust: pwm: Fix potential memory leak on init error
- CVE-2026-45925thermal/of: Fix reference leak in thermal_of_cm_lookup()
- CVE-2026-45924ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths
- CVE-2026-45923net: usb: catc: enable basic endpoint checking
- CVE-2026-45922RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler
- CVE-2026-45921mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse()
- CVE-2026-45920ext4: fix dirtyclusters double decrement on fs shutdown
- CVE-2026-45919sched/rt: Skip currently executing CPU in rto_next_cpu()
- CVE-2026-45918ovpn: tcp - don't deref NULL sk_socket member after tcp_close()
- CVE-2026-45917ipvs: do not keep dest_dst if dev is going down
- CVE-2026-45916power: supply: sbs-battery: Fix use-after-free in power_supply_changed()