Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-43103net: lapbether: handle NETDEV_PRE_TYPE_CHANGE
- CVE-2026-43102net: airoha: Fix memory leak in airoha_qdma_rx_process()
- CVE-2026-43101ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()
- CVE-2026-43100bridge: guard local VLAN-0 FDB helpers against NULL vlan group
- CVE-2026-43099ipv4: icmp: fix null-ptr-deref in icmp_build_probe()
- CVE-2026-43098nfc: s3fwrn5: allocate rx skb before consuming bytes
- CVE-2026-43097PCI: hv: Fix double ida_free in hv_pci_probe error path
- CVE-2026-43096mshv: Fix infinite fault loop on permission-denied GPA intercepts
- CVE-2026-43095ASoC: SDCA: Fix errors in IRQ cleanup
- CVE-2026-43094ixgbevf: add missing negotiate_features op to Hyper-V ops table
- CVE-2026-43093xsk: tighten UMEM headroom validation to account for tailroom and min frame
- CVE-2026-43092xsk: validate MTU against usable frame size on bind
- CVE-2026-43091xfrm: Wait for RCU readers during policy netns exit
- CVE-2026-43090xfrm: fix refcount leak in xfrm_migrate_policy_find
- CVE-2026-43089xfrm_user: fix info leak in build_mapping()
- CVE-2026-43088net: af_key: zero aligned sockaddr tail in PF_KEY exports
- CVE-2026-43087pinctrl: mcp23s08: Disable all pin interrupts during probe
- CVE-2026-43086ipvs: fix NULL deref in ip_vs_add_service error path
- CVE-2026-43085netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator
- CVE-2026-43084netfilter: nfnetlink_queue: make hash table per queue
- CVE-2026-43083net: ioam6: fix OOB and missing lock
- CVE-2026-43082net: txgbe: leave space for null terminators on property_entry
- CVE-2026-43081net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+
- CVE-2026-43080l2tp: Drop large packets with UDP encap
- CVE-2026-43079perf/x86/intel/uncore: Skip discovery table for offline dies
- CVE-2026-43078crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- CVE-2026-43077crypto: algif_aead - Fix minimum RX size check for decryption
- CVE-2026-43076ocfs2: validate inline data i_size during inode read
- CVE-2026-43075ocfs2: fix out-of-bounds write in ocfs2_write_end_inline
- CVE-2026-43074eventpoll: defer struct eventpoll free to RCU grace period