Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-43444drm/amdkfd: Unreserve bo if queue update failed
- CVE-2026-43443ASoC: amd: acp-mach-common: Add missing error check for clock acquisition
- CVE-2026-43442io_uring: fix physical SQE bounds check for SQE_MIXED 128-byte ops
- CVE-2026-43441net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled
- CVE-2026-43440net/mana: Null service_wq on setup error to prevent double destroy
- CVE-2026-43439cgroup: fix race between task migration and iteration
- CVE-2026-43438sched_ext: Remove redundant css_put() in scx_cgroup_init()
- CVE-2026-43437ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()
- CVE-2026-43436ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
- CVE-2026-43435rust_binder: fix oneway spam detection
- CVE-2026-43434rust_binder: check ownership before using vma
- CVE-2026-43433rust_binder: avoid reading the written value in offsets array
- CVE-2026-43432usb: xhci: Fix memory leak in xhci_disable_slot()
- CVE-2026-43431xhci: Fix NULL pointer dereference when reading portli debugfs files
- CVE-2026-43430usb: yurex: fix race in probe
- CVE-2026-43429USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
- CVE-2026-43428USB: core: Limit the length of unkillable synchronous timeouts
- CVE-2026-43427usb: class: cdc-wdm: fix reordering issue in read code path
- CVE-2026-43426usb: renesas_usbhs: fix use-after-free in ISR during device removal
- CVE-2026-43425usb: image: mdc800: kill download URB on timeout
- CVE-2026-43424usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling
- CVE-2026-43421usb: gadget: f_ncm: Fix net_device lifecycle with device_move
- CVE-2026-43420ceph: fix i_nlink underrun during async unlink
- CVE-2026-43419ceph: fix memory leaks in ceph_mdsc_build_path()
- CVE-2026-43418sched/mmcid: Prevent CID stalls due to concurrent forks
- CVE-2026-43417sched/mmcid: Handle vfork()/CLONE_VM correctly
- CVE-2026-43416powerpc, perf: Check that current->mm is alive before getting user callchain
- CVE-2026-43415scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend
- CVE-2026-43414scsi: qla2xxx: Completely fix fcport double free
- CVE-2026-43413scsi: hisi_sas: Fix NULL pointer exception during user_scan()