Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-43073x86-64: rename misleadingly named '__copy_user_nocache()' function
- CVE-2026-43072drm/vc4: platform_get_irq_byname() returns an int
- CVE-2026-43071dcache: Limit the minimal number of bucket to two
- CVE-2026-43070bpf: Reset register ID for BPF_END value tracking
- CVE-2026-43069Bluetooth: hci_ll: Fix firmware leak on error path
- CVE-2026-43068ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal()
- CVE-2026-43067ext4: handle wraparound when searching for blocks for indirect mapped blocks
- CVE-2026-43066ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths
- CVE-2026-43065ext4: always drain queued discard work in ext4_mb_release()
- CVE-2026-43064dmaengine: idxd: Fix not releasing workqueue on .release()
- CVE-2026-43063xfs: don't irele after failing to iget in xfs_attri_recover_work
- CVE-2026-43062Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()
- CVE-2026-43061serial: 8250: Fix TX deadlock when using DMA
- CVE-2026-43060netfilter: nft_ct: drop pending enqueued packets on removal
- CVE-2026-43059Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers
- CVE-2026-43058media: vidtv: fix pass-by-value structs causing MSAN warnings
- CVE-2026-43057net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback
- CVE-2026-43056net: mana: fix use-after-free in add_adev() error path
- CVE-2026-43055scsi: target: file: Use kzalloc_flex for aio_cmd
- CVE-2026-43054scsi: target: tcm_loop: Drain commands in target_reset handler
- CVE-2026-43053xfs: close crash window in attr dabtree inactivation
- CVE-2026-43052wifi: mac80211: check tdls flag in ieee80211_tdls_oper
- CVE-2026-43051HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq
- CVE-2026-43050atm: lec: fix use-after-free in sock_def_readable()
- CVE-2026-43049HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure
- CVE-2026-43048HID: core: Mitigate potential OOB by removing bogus memset()
- CVE-2026-43047HID: multitouch: Check to ensure report responses match the request
- CVE-2026-43046btrfs: reject root items with drop_progress and zero drop_level
- CVE-2026-43045mshv: Fix error handling in mshv_region_pin
- CVE-2026-43044crypto: caam - fix DMA corruption on long hmac keys