Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-45885power: supply: cpcap-battery: Fix use-after-free in power_supply_changed()
- CVE-2026-45884apparmor: avoid per-cpu hold underflow in aa_get_buffer
- CVE-2026-45883iio: sca3000: Fix a resource leak in sca3000_probe()
- CVE-2026-45882power: supply: pm8916_bms_vm: Fix use-after-free in power_supply_changed()
- CVE-2026-45881soc: mediatek: svs: Fix memory leak in svs_enable_debug_write()
- CVE-2026-45880PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails
- CVE-2026-45879power: supply: bq25980: Fix use-after-free in power_supply_changed()
- CVE-2026-45878drm/amdkfd: Fix watch_id bounds checking in debug address watch v2
- CVE-2026-45877HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients
- CVE-2026-45876arm64/gcs: Fix error handling in arch_set_shadow_stack_status()
- CVE-2026-45875mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure
- CVE-2026-45874phy: freescale: imx8qm-hsio: fix NULL pointer dereference
- CVE-2026-45873netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets
- CVE-2026-45872scsi: smartpqi: Fix memory leak in pqi_report_phys_luns()
- CVE-2026-45871tpm: st33zp24: Fix missing cleanup on get_burstcount() error
- CVE-2026-45870SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths
- CVE-2026-45869power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed()
- CVE-2026-45868pinctrl: single: fix refcount leak in pcs_add_gpio_func()
- CVE-2026-45867power: supply: act8945a: Fix use-after-free in power_supply_changed()
- CVE-2026-45866serial: caif: fix use-after-free in caif_serial ldisc_close()
- CVE-2026-45865mctp i2c: initialise event handler read bytes
- CVE-2026-45864fs/ntfs3: prevent infinite loops caused by the next valid being the same
- CVE-2026-45863i3c: dw: Fix memory leak in dw_i3c_master_i2c_xfers()
- CVE-2026-45862iommu/vt-d: Flush cache for PASID table before using it
- CVE-2026-45861gfs2: Fix slab-use-after-free in qd_put
- CVE-2026-45860netfilter: nf_conncount: increase the connection clean up limit to 64
- CVE-2026-45859netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation
- CVE-2026-45858ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1
- CVE-2026-45857scsi: csiostor: Fix dereference of null pointer rn
- CVE-2026-45856RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send