Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-43220iommu/amd: serialize sequence allocation under concurrent TLB invalidations
- CVE-2026-43219net: cpsw_new: Fix potential unregister of netdev that has not been registered yet
- CVE-2026-43218media: i2c/tw9903: Fix potential memory leak in tw9903_probe()
- CVE-2026-43217media: iris: gen2: Add sanity check for session stop
- CVE-2026-43216net: Drop the lock in skb_may_tx_timestamp()
- CVE-2026-43215cifs: Fix locking usage for tcon fields
- CVE-2026-43214KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()
- CVE-2026-43213wifi: rtw89: pci: validate sequence number of TX release report
- CVE-2026-43212LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE
- CVE-2026-43211PCI: Fix pci_slot_trylock() error handling
- CVE-2026-43210tracing: ring-buffer: Fix to check event length before using
- CVE-2026-43209minix: Add required sanity checking to minix_check_superblock()
- CVE-2026-43208net: do not pass flow_id to set_rps_cpu()
- CVE-2026-43207media: mtk-mdp: Fix error handling in probe function
- CVE-2026-43206drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()
- CVE-2026-43205dpaa2-switch: validate num_ifs to prevent out-of-bounds write
- CVE-2026-43204ASoC: qcom: q6asm: drop DSP responses for closed data streams
- CVE-2026-43203atm: fore200e: fix use-after-free in tasklets during device removal
- CVE-2026-43202fbdev: vt8500lcdfb: fix missing dma_free_coherent()
- CVE-2026-43201APEI/GHES: ARM processor Error: don't go past allocated memory
- CVE-2026-43200PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions
- CVE-2026-43199net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query
- CVE-2026-43198tcp: fix potential race in tcp_v6_syn_recv_sock()
- CVE-2026-43197netconsole: avoid OOB reads, msg is not nul-terminated
- CVE-2026-43196soc: ti: pruss: Fix double free in pruss_clk_mux_setup()
- CVE-2026-43195drm/amdgpu: validate user queue size constraints
- CVE-2026-43194net: consume xmit errors of GSO frames
- CVE-2026-43193nfsd: fix nfs4_file refcount leak in nfsd_get_dir_deleg()
- CVE-2026-43192dm mpath: Add missing dm_put_device when failing to get scsi dh name
- CVE-2026-43191drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35