Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-43250usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()
- CVE-2026-432499p/xen: protect xen_9pfs_front_free against concurrent calls
- CVE-2026-43248vhost: move vdpa group bound check to vhost_vdpa
- CVE-2026-43247media: chips-media: wave5: Fix SError of kernel panic when closed
- CVE-2026-43246media: i2c/tw9906: Fix potential memory leak in tw9906_probe()
- CVE-2026-43245ntfs: ->d_compare() must not block
- CVE-2026-43244kcm: fix zero-frag skb in frag_list on partial sendmsg error
- CVE-2026-43243drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src
- CVE-2026-43242soc: ti: k3-socinfo: Fix regmap leak on probe failure
- CVE-2026-43241ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access
- CVE-2026-43240x86/kexec: add a sanity check on previous kernel's ima kexec buffer
- CVE-2026-43239smb: client: prevent races in ->query_interfaces()
- CVE-2026-43238net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash()
- CVE-2026-43237drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4
- CVE-2026-43236drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release
- CVE-2026-43235media: iris: Add missing platform data entries for SM8750
- CVE-2026-43234team: avoid NETDEV_CHANGEMTU event when unregistering slave
- CVE-2026-43233netfilter: nf_conntrack_h323: fix OOB read in decode_choice()
- CVE-2026-43232net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets
- CVE-2026-43231media: radio-keene: fix memory leak in error path
- CVE-2026-43230net/rds: Clear reconnect pending bit
- CVE-2026-43229media: chips-media: wave5: Fix device cleanup order to prevent kernel panic
- CVE-2026-43228hfs: Replace BUG_ON with error handling for CNID count checks
- CVE-2026-43227clocksource/drivers/sh_tmu: Always leave device running after probe
- CVE-2026-43226net/rds: No shortcut out of RDS_CONN_ERROR
- CVE-2026-43225staging: rtl8723bs: fix memory leak on failure path
- CVE-2026-43224io_uring/zcrx: fix sgtable leak on mapping failures
- CVE-2026-43223media: pvrusb2: fix URB leak in pvr2_send_request_ex
- CVE-2026-43222media: verisilicon: AV1: Fix tile info buffer size
- CVE-2026-43221ipmi: ipmb: initialise event handler read bytes