Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98650KVM: s390: Fix potential races in dat skey functions
- CVE-2026-98649KVM: s390: Fix race in _destroy_pages_crste()
- CVE-2026-98648s390/uv: Prevent potential out-of-bounds read
- CVE-2026-98647bpf: Fix divide-by-zero in btf_struct_walk()
- CVE-2026-98646tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context
- CVE-2026-98645HID: winwing: fix use-after-free in force feedback teardown
- CVE-2026-98644bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()
- CVE-2026-98643bpf: Fix out-of-bounds read of rtt_min in sock_ops
- CVE-2026-98642bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk
- CVE-2026-98641bpf, arm64: set up the frame pointer for the exception callback
- CVE-2026-98640HID: amd_sfh: Validate PCI BAR size before mapping
- CVE-2026-98639KVM: riscv: Fix NACL hfence entry update order
- CVE-2026-98638KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()
- CVE-2026-98637KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure
- CVE-2026-98636squashfs: Add dictionary size range check to prevent shift-out-of-bounds
- CVE-2026-98635scsi: block: Fix zones_cond out-of-bounds write on zone report
- CVE-2026-98634scsi: sd_zbc: Reject disks with too many zones
- CVE-2026-98633Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()
- CVE-2026-98632Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel
- CVE-2026-98631xsk: Use a 32-bit compare in xsk_map_gen_lookup
- CVE-2026-98630eth: fbnic: Fix payload page pool error cleanup
- CVE-2026-98629net/sched: cls_u32: fix manual hash table handle IDR aliasing
- CVE-2026-98628bpf: Make post-verification instruction rewrites killable
- CVE-2026-98627bpf: Preserve packet pointer class displacement in regsafe()
- CVE-2026-98626bpf: Restrict CO-RE poisoning to relocatable instructions
- CVE-2026-98625netfilter: flowtable: publish HW_DEAD after worker is done
- CVE-2026-98624netfilter: nfnetlink_queue: hold nfnl mutex in event notifier
- CVE-2026-98623drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update
- CVE-2026-98622net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure
- CVE-2026-98621net: gue: reject invalid REMCSUM offsets