Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98620net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure
- CVE-2026-98619net: ethtool: keep rtnl_lock for the ioctl self test
- CVE-2026-98618eth: fbnic: Handle maximum standalone channels
- CVE-2026-98617eth: fbnic: use the Rx queue napi pointer to find the napi vector
- CVE-2026-98616eth: fbnic: reset num_napi when the napi vectors are freed
- CVE-2026-98615eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox
- CVE-2026-98614sctp: avoid livelock while updating retransmit path
- CVE-2026-98613bpf: Bound ownership depth through local kptrs and graph roots
- CVE-2026-98612net: usb: catc: bound the RX packet length in catc_rx_done()
- CVE-2026-98611bpf: Check params size before reading reserved fields
- CVE-2026-98610net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget
- CVE-2026-98609drm/virtio: fix object leak when drm_gem_handle_create() fails
- CVE-2026-98608drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()
- CVE-2026-98607drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()
- CVE-2026-98606drm/virtio: release the GEM object on virtio_gpu_vram_create() errors
- CVE-2026-98605drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach
- CVE-2026-98604ovpn: replace bind when learning local endpoint
- CVE-2026-98603ovpn: replace bind when clearing stale local source
- CVE-2026-98602Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough
- CVE-2026-98601Bluetooth: btintel_pcie: validate device-supplied DMA indices
- CVE-2026-98600Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()
- CVE-2026-98599bpf: Reject non-negative offsets in stack_slot_obj_get_spi()
- CVE-2026-98598ipv6: Prevent rt6_insert_exception() for dying fib6_info.
- CVE-2026-98597net: usb: sr9700: include receive overhead in the length check
- CVE-2026-98596ipv6: Fix dst leak for uncached routes.
- CVE-2026-98595udp: remove a disconnected socket from the 4-tuple hash table
- CVE-2026-98594tg3: clean up PHYLIB resources on probe failure
- CVE-2026-98593s390/debug: Fix NULL pointer dereference in debug_info_copy()
- CVE-2026-98592net: spacemit: clear TX descriptor on fragment mapping failure
- CVE-2026-98591bpf: Fix bounds check for skb-backed dynptrs