Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-43322Bluetooth: hci_sync: Fix UAF in le_read_features_complete
- CVE-2026-43321bpf: Properly mark live registers for indirect jumps
- CVE-2026-43320drm/amd/display: Fix dsc eDP issue
- CVE-2026-43319spi: spidev: fix lock inversion between spi_lock and buf_lock
- CVE-2026-43318drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify
- CVE-2026-43317most: core: fix leak on early registration failure
- CVE-2026-43316media: solo6x10: Check for out of bounds chip_id
- CVE-2025-71302drm/panthor: fix for dma-fence safe access rules
- CVE-2025-71301drm/tests: shmem: Hold reservation lock around vmap/vunmap
- CVE-2025-71300Revert "arm64: zynqmp: Add an OP-TEE node to the device tree"
- CVE-2026-43315KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding
- CVE-2026-43314dm: remove fake timeout to avoid leak request
- CVE-2026-43313ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()
- CVE-2026-43312media: i2c: ov5647: Initialize subdev before controls
- CVE-2026-43311soc/tegra: pmc: Fix unsafe generic_handle_irq() call
- CVE-2026-43310media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC
- CVE-2026-43309md raid: fix hang when stopping arrays with metadata through dm-raid
- CVE-2026-43308btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref()
- CVE-2026-43307iio: accel: adxl380: Avoid reading more entries than present in FIFO
- CVE-2026-43306bpf: crypto: Use the correct destructor kfunc type
- CVE-2026-43305drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path
- CVE-2026-43304libceph: define and enforce CEPH_MAX_KEY_LEN
- CVE-2026-43303mm/page_alloc: clear page->private in free_pages_prepare()
- CVE-2026-43302drm/v3d: Set DMA segment size to avoid debug warnings
- CVE-2026-43301media: chips-media: wave5: Fix PM runtime usage count underflow
- CVE-2026-43300drm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove()
- CVE-2026-43299btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure()
- CVE-2026-43298drm/amdgpu: Skip vcn poison irq release on VF
- CVE-2026-43297media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init()
- CVE-2026-43296octeontx2-af: Workaround SQM/PSE stalls by disabling sticky