Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-43503net: skbuff: propagate shared-frag marker through frag-transfer helpers
- CVE-2026-43502net/rds: handle zerocopy send cleanup before the message is queued
- CVE-2026-43501ipv6: rpl: reserve mac_len headroom when recompressed SRH grows
- CVE-2026-43499rtmutex: Use waiter::task instead of current in remove_waiter()
- CVE-2026-43498accel/ivpu: Disallow re-exporting imported GEM objects
- CVE-2026-43497fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free
- CVE-2026-43496net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked
- CVE-2026-43495net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler
- CVE-2026-43494net/rds: reset op_nents when zerocopy page pin fails
- CVE-2026-43493crypto: pcrypt - Fix handling of MAY_BACKLOG requests
- CVE-2026-43492lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()
- CVE-2026-43491net: qrtr: ns: Limit the maximum server registration per node
- CVE-2026-46333ptrace: slightly saner 'get_dumpable()' logic
- CVE-2026-43490ksmbd: validate inherited ACE SID length
- CVE-2026-43489liveupdate: luo_file: remember retrieve() status
- CVE-2026-43488usb: xhci: Prevent interrupt storm on host controller error (HCE)
- CVE-2026-43487ata: libata-core: Disable LPM on ST1000DM010-2EP102
- CVE-2026-43486arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults
- CVE-2026-43485nouveau/gsp: drop WARN_ON in ACPI probes
- CVE-2026-43484mmc: core: Avoid bitfield RMW for claim/retune flags
- CVE-2026-43483KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated
- CVE-2026-43482sched_ext: Disable preemption between scx_claim_exit() and kicking helper work
- CVE-2026-43481net-shapers: don't free reply skb after genlmsg_reply()
- CVE-2026-43480ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition
- CVE-2026-43479net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
- CVE-2026-43478ASoC: codecs: rt1011: Use component to get the dapm context in spk_mode_put
- CVE-2026-43477drm/i915/vrr: Configure VRR timings after enabling TRANS_DDI_FUNC_CTL
- CVE-2026-43476iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()
- CVE-2026-43500rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
- CVE-2026-43475scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT