Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-43190netfilter: xt_tcpmss: check remaining length before reading optlen
- CVE-2026-43189media: v4l2-async: Fix error handling on steps after finding a match
- CVE-2026-43188ceph: do not propagate page array emplacement errors as batch errors
- CVE-2026-43187xfs: delete attr leaf freemap entries when empty
- CVE-2026-43186ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()
- CVE-2026-43185ksmbd: fix signededness bug in smb_direct_prepare_negotiation()
- CVE-2026-43184rnbd-srv: Zero the rsp buffer before using it
- CVE-2026-43183media: cx25821: Fix a resource leak in cx25821_dev_setup()
- CVE-2026-43182media: ccs: Avoid possible division by zero
- CVE-2026-43181gpio: sysfs: fix chip removal with GPIOs exported over sysfs
- CVE-2026-43180net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
- CVE-2026-43179erofs: fix incorrect early exits for invalid metabox-enabled images
- CVE-2026-43178procfs: fix possible double mmput() in do_procmap_query()
- CVE-2026-43177media: ipu6: Fix RPM reference leak in probe error paths
- CVE-2026-43176wifi: rtw89: pci: validate release report content before using for RTL8922DE
- CVE-2026-43175clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841
- CVE-2026-43174io_uring/zcrx: fix post open error handling
- CVE-2026-43173net: ethernet: xscale: Check for PTP support properly
- CVE-2026-43172wifi: iwlwifi: fix 22000 series SMEM parsing
- CVE-2026-43171EFI/CPER: don't dump the entire memory region
- CVE-2026-43170usb: dwc3: gadget: Move vbus draw to workqueue context
- CVE-2026-43169drm/buddy: Prevent BUG_ON by validating rounded allocation
- CVE-2026-43168ocfs2: fix reflink preserve cleanup issue
- CVE-2026-43167xfrm: always flush state and policy upon NETDEV_UNREGISTER event
- CVE-2026-43166erofs: fix interlaced plain identification for encoded extents
- CVE-2026-43165hwmon: (nct7363) Fix a resource leak in nct7363_present_pwm_fanin
- CVE-2026-43164udplite: Fix null-ptr-deref in __udp_enqueue_schedule_skb().
- CVE-2026-43163md/bitmap: fix GPF in write_page caused by resize race
- CVE-2026-43162media: tegra-video: Fix memory leak in __tegra_channel_try_format()
- CVE-2026-43161iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode