Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-45855ata: libata-scsi: avoid Non-NCQ command starvation
- CVE-2026-45854crypto: inside-secure/eip93 - unregister only available algorithm
- CVE-2026-45853drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges()
- CVE-2026-45852RDMA/rxe: Fix double free in rxe_srq_from_init
- CVE-2026-45851efi: Fix reservation of unaccepted memory table
- CVE-2026-45850ipvs: skip ipv6 extension headers for csum checks
- CVE-2026-45849net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj()
- CVE-2026-45848apparmor: fix NULL sock in aa_sock_file_perm
- CVE-2026-45847net: remove WARN_ON_ONCE when accessing forward path array
- CVE-2025-71309fs/ntfs3: fix deadlock in ni_read_folio_cmpr
- CVE-2025-71308accel/amdxdna: Fix potential NULL pointer dereference in context cleanup
- CVE-2025-71307drm/panthor: Fix NULL pointer dereference on panthor_fw_unplug
- CVE-2025-71306ima: Fix stack-out-of-bounds in is_bprm_creds_for_exec()
- CVE-2025-71305drm/display/dp_mst: Add protection against 0 vcpi
- CVE-2025-71304smack: /smack/doi: accept previously used values
- CVE-2025-71303accel/amdxdna: Fix race condition when checking rpm_on
- CVE-2026-45846bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()
- CVE-2026-45845net/sched: taprio: fix NULL pointer dereference in class dump
- CVE-2026-45844netfilter: arp_tables: fix IEEE1394 ARP payload parsing
- CVE-2026-45843slip: bound decode() reads against the compressed packet length
- CVE-2026-45842slip: reject VJ receive packets on instances with no rstate array
- CVE-2026-45841netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
- CVE-2026-45840openvswitch: cap upcall PID array size and pre-size vport replies
- CVE-2026-45839bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()
- CVE-2026-45838bpf: fix end-of-list detection in cgroup_storage_get_next_key()
- CVE-2026-45837bpf: Fix use-after-free in arena_vm_close on fork
- CVE-2026-45836Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()
- CVE-2026-45835Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()
- CVE-2026-45834Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()
- CVE-2026-46300net: skbuff: preserve shared-frag marker during coalescing