Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-45915fat: avoid parent link count underflow in rmdir
- CVE-2026-45914Revert "hwmon: (ibmpex) fix use-after-free in high/low store"
- CVE-2026-45913net: bridge: mcast: always update mdb_n_entries for vlan contexts
- CVE-2026-45912ext4: don't cache extent during splitting extent
- CVE-2026-45911usb: cdns3: fix role switching during resume
- CVE-2026-45910RDMA/rxe: Fix race condition in QP timer handlers
- CVE-2026-45909clk: mediatek: Drop __initconst from gates
- CVE-2026-45908accel/amdxdna: Fix memory leak in amdxdna_ubuf_map
- CVE-2026-45907net/mlx5e: Fix deadlocks between devlink and netdev instance locks
- CVE-2026-45906power: supply: pf1550: Fix use-after-free in power_supply_changed()
- CVE-2026-45905xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path
- CVE-2026-45904powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling
- CVE-2026-45903bpf: Fix memory access flags in helper prototypes
- CVE-2026-45902power: supply: bq256xx: Fix use-after-free in power_supply_changed()
- CVE-2026-45901netfilter: nf_tables: revert commit_mutex usage in reset path
- CVE-2026-45900crypto: caam - fix netdev memory leak in dpaa2_caam_probe
- CVE-2026-45899ext4: drop extent cache when splitting extent fails
- CVE-2026-45898RDMA/iwcm: Fix workqueue list corruption by removing work_list
- CVE-2026-45897netfilter: nft_counter: serialize reset with spinlock
- CVE-2026-45896mtd: intel-dg: Fix accessing regions before setting nregions
- CVE-2026-45895quota: fix livelock between quotactl and freeze_super
- CVE-2026-45894iommu/vt-d: Clear Present bit before tearing down PASID entry
- CVE-2026-45893apparmor: Fix & Optimize table creation from possibly unaligned memory
- CVE-2026-45892ext4: drop extent cache after doing PARTIAL_VALID1 zeroout
- CVE-2026-45891net: hns3: fix double free issue for tx spare buffer
- CVE-2026-45890xen-netback: reject zero-queue configuration from guest
- CVE-2026-45889mptcp: do not account for OoO in mptcp_rcvbuf_grow()
- CVE-2026-45888md/raid1: fix memory leak in raid1_run()
- CVE-2026-45887af_unix: Fix memleak of newsk in unix_stream_connect().
- CVE-2026-45886bpf: Fix bpf_xdp_store_bytes proto for read-only arg