Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-43130iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode
- CVE-2026-43129ima: verify the previous kernel's IMA buffer lies in addressable RAM
- CVE-2026-43128RDMA/umem: Fix double dma_buf_unpin in failure path
- CVE-2026-43127ntfs3: fix circular locking dependency in run_unpack_ex
- CVE-2026-43126ALSA: mixer: oss: Add card disconnect checkpoints
- CVE-2026-43125dlm: validate length in dlm_search_rsb_tree
- CVE-2026-43124pstore: ram_core: fix incorrect success return when vmap() fails
- CVE-2026-43123fbcon: check return value of con2fb_acquire_newinfo()
- CVE-2026-43121io_uring/zcrx: fix user_ref race between scrub and refill paths
- CVE-2025-71274rpmsg: core: fix race in driver_override_show() and use core helper
- CVE-2025-71273wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band()
- CVE-2025-71272most: core: fix resource leak in most_register_interface error paths
- CVE-2025-71271hfsplus: ensure sb->s_fs_info is always cleaned up
- CVE-2026-43120RDMA/irdma: Fix double free related to rereg_user_mr
- CVE-2026-43119Bluetooth: hci_sync: annotate data-races around hdev->req_status
- CVE-2026-43118btrfs: fix zero size inode with non-zero size after log replay
- CVE-2026-43117btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file()
- CVE-2026-43116netfilter: ctnetlink: ensure safe access to master conntrack
- CVE-2026-43115srcu: Use irq_work to start GP in tiny SRCU
- CVE-2026-43114netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry
- CVE-2026-43113wifi: wl1251: validate packet IDs before indexing tx_frames
- CVE-2026-43112fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
- CVE-2026-43111HID: roccat: fix use-after-free in roccat_report_event
- CVE-2026-43110wifi: brcmfmac: validate bsscfg indices in IF events
- CVE-2026-43109x86: shadow stacks: proper error handling for mmap lock
- CVE-2026-43108soc: qcom: pd-mapper: Fix element length in servreg_loc_pfr_req_ei
- CVE-2026-43107xfrm: account XFRMA_IF_ID in aevent size calculation
- CVE-2026-43106cachefiles: fix incorrect dentry refcount in cachefiles_cull()
- CVE-2026-43105drm/vc4: Fix memory leak of BO array in hang state
- CVE-2026-43104drm/vc4: Fix a memory leak in hang state error path