Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-43352i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue
- CVE-2026-43351KVM: arm64: Eagerly init vgic dist/redist on vgic creation
- CVE-2026-43350smb: client: require a full NFS mode SID before reading mode bits
- CVE-2026-43349f2fs: fix to avoid uninit-value access in f2fs_sanity_check_node_footer
- CVE-2026-43348mshv_vtl: Fix vmemmap_shift exceeding MAX_FOLIO_ORDER
- CVE-2026-43347arm64: dts: qcom: monaco: Reserve full Gunyah metadata region
- CVE-2026-43346ice: ptp: don't WARN when controlling PF is unavailable
- CVE-2026-43345net: ipa: fix event ring index not programmed for IPA v5.0+
- CVE-2026-43344perf/x86/intel/uncore: Fix die ID init and look up bugs
- CVE-2026-43343usb: gadget: f_subset: Fix unbalanced refcnt in geth_free
- CVE-2026-43342usb: gadget: f_rndis: Protect RNDIS options with mutex
- CVE-2026-43341net/ipv6: ioam6: prevent schema length wraparound in trace fill
- CVE-2026-43340comedi: Reinit dev->spinlock between attachments to low-level drivers
- CVE-2026-43339ipv6: prevent possible UaF in addrconf_permanent_addr()
- CVE-2026-43338btrfs: reserve enough transaction items for qgroup ioctls
- CVE-2026-43337drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw()
- CVE-2026-43336lib/crypto: chacha: Zeroize permuted_state before it leaves scope
- CVE-2026-43335interconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes()
- CVE-2026-43334Bluetooth: SMP: force responder MITM requirements before building the pairing response
- CVE-2026-43333bpf: reject direct access to nullable PTR_TO_BUF pointers
- CVE-2026-43332thermal: core: Fix thermal zone device registration error path
- CVE-2026-43331x86/kexec: Disable KCOV instrumentation after load_segments()
- CVE-2026-43330crypto: caam - fix overflow on long hmac keys
- CVE-2026-43329netfilter: flowtable: strictly check for maximum number of actions
- CVE-2026-43328cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path
- CVE-2026-43327USB: dummy-hcd: Fix locking/synchronization error
- CVE-2026-43326sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback
- CVE-2026-43325wifi: iwlwifi: mvm: don't send a 6E related command when not supported
- CVE-2026-43324USB: dummy-hcd: Fix interrupt synchronization error
- CVE-2026-43323sched/fair: Fix zero_vruntime tracking fix