Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-43280drm/xe: Add bounds check on pat_index to prevent OOB kernel read in madvise
- CVE-2026-43279ALSA: usb-audio: Add sanity check for OOB writes at silencing
- CVE-2026-43278dm: clear cloned request bio pointer when last clone bio completes
- CVE-2026-43277APEI/GHES: ensure that won't go past CPER allocated record
- CVE-2026-43276net: mana: Fix double destroy_workqueue on service rescan PCI path
- CVE-2026-43275scsi: ufs: core: Flush exception handling work when RPM level is zero
- CVE-2026-43274mailbox: mchp-ipc-sbi: fix out-of-bounds access in mchp_ipc_get_cluster_aggr_irq()
- CVE-2026-43273ceph: supply snapshot context in ceph_zero_partial_object()
- CVE-2026-43272ring-buffer: Fix possible dereference of uninitialized pointer
- CVE-2026-43271md-cluster: fix NULL pointer dereference in process_metadata_update
- CVE-2026-43270media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()
- CVE-2026-43269drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback
- CVE-2026-43268hfsplus: pretend special inodes as regular files
- CVE-2026-43267wifi: rtw89: fix potential zero beacon interval in beacon tracking
- CVE-2026-43266EFI/CPER: don't go past the ARM processor CPER record buffer
- CVE-2026-43265KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()
- CVE-2026-43264fbdev: of: display_timing: fix refcount leak in of_get_display_timings()
- CVE-2026-43263media: chips-media: wave5: Fix Null reference while testing fluster
- CVE-2026-43262gfs2: fiemap page fault fix
- CVE-2026-43261arm64: Add support for TSV110 Spectre-BHB mitigation
- CVE-2026-43260bnxt_en: Fix RSS context delete logic
- CVE-2026-43259phy: fsl-imx8mq-usb: set platform driver data
- CVE-2026-43258alpha: fix user-space corruption during memory compaction
- CVE-2026-43257media: cx88: Add missing unmap in snd_cx88_hw_params()
- CVE-2026-43256media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update()
- CVE-2026-43255wifi: libertas: fix WARNING in usb_tx_block
- CVE-2026-43254ovpn: tcp - fix packet extraction from stream
- CVE-2026-43253iommu/amd: move wait_on_sem() out of spinlock
- CVE-2026-43252mptcp: pm: in-kernel: always set ID as avail when rm endp
- CVE-2026-43251HID: prodikeys: Check presence of pm->input_ep82