Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-43295rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()
- CVE-2026-43294drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels
- CVE-2026-43293media: chips-media: wave5: Fix kthread worker destruction in polling mode
- CVE-2026-43292mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node
- CVE-2026-43291net: nfc: nci: Fix parameter validation for packet data
- CVE-2026-43290media: uvcvideo: Return queued buffers on start_streaming() failure
- CVE-2026-43289kexec: derive purgatory entry from symbol
- CVE-2026-43288ext4: move ext4_percpu_param_init() before ext4_mb_init()
- CVE-2026-43287drm: Account property blob allocations to memcg
- CVE-2026-43286mm/hugetlb: restore failed global reservations to subpool
- CVE-2026-43285mm/slab: do not access current->mems_allowed_seq if !allow_spin
- CVE-2025-71299spi: cadence-quadspi: Parse DT for flashes with the rest of the DT parsing
- CVE-2025-71298drm/tests: shmem: Hold reservation lock around madvise
- CVE-2025-71297wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode()
- CVE-2025-71296drm/tests: shmem: Hold reservation lock around purge
- CVE-2026-43284xfrm: esp: avoid in-place decrypt on shared skb frags
- CVE-2025-71295fs/buffer: add alert in try_to_free_buffers() for folios without buffers
- CVE-2025-71294drm/amdgpu: fix NULL pointer issue buffer funcs
- CVE-2025-71293drm/amdgpu/ras: Move ras data alloc before bad page check
- CVE-2025-71292jfs: nlink overflow in jfs_rename
- CVE-2025-71291misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read()
- CVE-2025-71290misc: ti_fpc202: fix a potential memory leak in probe function
- CVE-2025-71289fs/ntfs3: handle attr_set_size() errors when truncating files
- CVE-2025-71288memory: mtk-smi: fix device leaks on common probe
- CVE-2025-71287memory: mtk-smi: fix device leak on larb probe
- CVE-2025-71286ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls
- CVE-2025-71285net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels
- CVE-2026-43283net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle
- CVE-2026-43282RDMA/ionic: Fix potential NULL pointer dereference in ionic_query_port
- CVE-2026-43281mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()