Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-43382batman-adv: Avoid double-rtnl_lock ELP metric worker
- CVE-2026-43381nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
- CVE-2026-43380hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
- CVE-2026-43379ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()
- CVE-2026-43378smb: server: fix use-after-free in smb2_open()
- CVE-2026-43377ksmbd: Don't log keys in SMB3 signing and encryption key generation
- CVE-2026-43376ksmbd: fix use-after-free by using call_rcu() for oplock_info
- CVE-2026-43375net: mctp: fix device leak on probe failure
- CVE-2026-43374net: nexthop: fix percpu use-after-free in remove_nh_grp_entry
- CVE-2026-43373net: ncsi: fix skb leak in error paths
- CVE-2026-43372net: dsa: microchip: Fix error path in PTP IRQ setup
- CVE-2026-43371net: macb: Shuffle the tx ring before enabling tx
- CVE-2026-43370drm/amdgpu: Fix use-after-free race in VM acquire
- CVE-2026-43369drm/amd: Fix NULL pointer dereference in device cleanup
- CVE-2026-43368drm/i915: Fix potential overflow of shmem scatterlist length
- CVE-2026-43367drm/amd: Fix a few more NULL pointer dereference in device cleanup
- CVE-2026-43366io_uring/kbuf: check if target buffer list is still legacy on recycle
- CVE-2026-43365xfs: fix undersized l_iclog_roundoff values
- CVE-2026-43364ublk: fix NULL pointer dereference in ublk_ctrl_set_size()
- CVE-2026-43363x86/apic: Disable x2apic on resume if the kernel expects so
- CVE-2026-43362smb: client: fix in-place encryption corruption in SMB2_write()
- CVE-2026-43361btrfs: fix transaction abort when snapshotting received subvolumes
- CVE-2026-43360btrfs: fix transaction abort on file creation due to name hash collision
- CVE-2026-43359btrfs: fix transaction abort on set received ioctl due to item overflow
- CVE-2026-43358btrfs: add missing RCU unlock in error path in try_release_subpage_extent_buffer()
- CVE-2026-43357iio: gyro: mpu3050-core: fix pm_runtime error handling
- CVE-2026-43356iio: imu: adis: Fix NULL pointer dereference in adis_init
- CVE-2026-43355iio: light: bh1780: fix PM runtime leak on error path
- CVE-2026-43354iio: proximity: hx9023s: Protect against division by zero in set_samp_freq
- CVE-2026-43353i3c: mipi-i3c-hci: Fix race in DMA ring dequeue