Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-43412ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start
- CVE-2026-43411tipc: fix divide-by-zero in tipc_sk_filter_connect()
- CVE-2026-43410firmware: stratix10-rsu: Fix NULL pointer dereference when RSU is disabled
- CVE-2026-43409kprobes: avoid crash when rmmod/insmod after ftrace killed
- CVE-2026-43408ceph: add a bunch of missing ceph_path_info initializers
- CVE-2026-43407libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
- CVE-2026-43406libceph: prevent potential out-of-bounds reads in process_message_header()
- CVE-2026-43405libceph: Use u32 for non-negative values in ceph_monmap_decode()
- CVE-2026-43404mm: Fix a hmm_range_fault() livelock / starvation problem
- CVE-2026-43403nsfs: tighten permission checks for ns iteration ioctls
- CVE-2026-43402kthread: consolidate kthread exit paths to prevent use-after-free
- CVE-2026-43401cpufreq: intel_pstate: Fix NULL pointer dereference in update_cpu_qos_request()
- CVE-2026-43400drm/amdgpu: add upper bound check on user inputs in signal ioctl
- CVE-2026-43399drm/amdgpu/userq: Fix reference leak in amdgpu_userq_wait_ioctl
- CVE-2026-43398drm/amdgpu: add upper bound check on user inputs in wait ioctl
- CVE-2026-43397drm/bridge: samsung-dsim: Fix memory leak in error path
- CVE-2026-43396drm/xe/sync: Fix user fence leak on alloc failure
- CVE-2026-43395drm/xe/sync: Cleanup partially initialized sync on parse failure
- CVE-2026-43394nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit().
- CVE-2026-43393btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies()
- CVE-2026-43392sched_ext: Fix starvation of scx_enable() under fair-class saturation
- CVE-2026-43391nsfs: tighten permission checks for handle opening
- CVE-2026-43390nstree: tighten permission checks for listing
- CVE-2026-43389mm: memfd_luo: always dirty all folios
- CVE-2026-43388mm/damon/core: clear walk_control on inactive context in damos_walk()
- CVE-2026-43387staging: rtl8723bs: properly validate the data in rtw_get_ie_ex()
- CVE-2026-43386staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie
- CVE-2026-43385net: Fix rcu_tasks stall in threaded busypoll
- CVE-2026-43384net/tcp-ao: Fix MAC comparison to be constant-time
- CVE-2026-43383net/tcp-md5: Fix MAC comparison to be constant-time