Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-43474fs: init flags_valid before calling vfs_fileattr_get
- CVE-2026-43473scsi: mpi3mr: Add NULL checks when resetting request and reply queues
- CVE-2026-43472unshare: fix unshare_fs() handling
- CVE-2026-43471scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace()
- CVE-2026-43470nfs: return EISDIR on nfs3_proc_create if d_alias is a dir
- CVE-2026-43469xprtrdma: Decrement re_receiving on the early exit paths
- CVE-2026-43468net/mlx5: Fix deadlock between devlink lock and esw->wq
- CVE-2026-43467net/mlx5: Fix crash when moving to switchdev mode
- CVE-2026-43466net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery
- CVE-2026-43465net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ
- CVE-2026-43464net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ
- CVE-2026-43463rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()
- CVE-2026-43462net: spacemit: Fix error handling in emac_tx_mem_map()
- CVE-2026-43461spi: amlogic: spifc-a4: Fix DMA mapping error handling
- CVE-2026-43460spi: rockchip-sfc: Fix double-free in remove() callback
- CVE-2026-43459ASoC: soc-core: flush delayed work before removing DAIs and widgets
- CVE-2026-43458serial: caif: hold tty->link reference in ldisc_open and ser_release
- CVE-2026-43457mctp: i2c: fix skb memory leak in receive path
- CVE-2026-43456bonding: fix type confusion in bond_setup_by_slave()
- CVE-2026-43455mctp: route: hold key->lock in mctp_flow_prepare_output()
- CVE-2026-43454netfilter: nf_tables: Fix for duplicate device in netdev hooks
- CVE-2026-43453netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()
- CVE-2026-43452netfilter: x_tables: guard option walkers against 1-byte tail reads
- CVE-2026-43451netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path
- CVE-2026-43450netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
- CVE-2026-43449nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set
- CVE-2026-43448nvme-pci: Fix race bug in nvme_poll_irqdisable()
- CVE-2026-43447iavf: fix PTP use-after-free during reset
- CVE-2026-43446accel/amdxdna: Fix runtime suspend deadlock when there is pending job
- CVE-2026-43445e1000/e1000e: Fix leak in DMA error cleanup