Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-43043crypto: af-alg - fix NULL pointer dereference in scatterwalk
- CVE-2026-43042mpls: add seqcount to protect the platform_label{,s} pair
- CVE-2026-43041net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak
- CVE-2026-43040net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak
- CVE-2026-43039net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch
- CVE-2026-43038ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
- CVE-2026-43037ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
- CVE-2026-43036net: use skb_header_pointer() for TCPv4 GSO frag_off check
- CVE-2026-43035net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak
- CVE-2026-43034bnxt_en: set backing store type from query type
- CVE-2026-43033crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- CVE-2026-43032NFC: pn533: bound the UART receive buffer
- CVE-2026-43031net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets
- CVE-2026-43030bpf: Fix regsafe() for pointers to packet
- CVE-2026-43029mptcp: fix soft lockup in mptcp_recvmsg()
- CVE-2026-43028netfilter: x_tables: ensure names are nul-terminated
- CVE-2026-43027netfilter: nf_conntrack_helper: pass helper to expect cleanup
- CVE-2026-43026netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent
- CVE-2026-43025netfilter: ctnetlink: ignore explicit helper on new expectations
- CVE-2026-43024netfilter: nf_tables: reject immediate NF_QUEUE verdict
- CVE-2026-43023Bluetooth: SCO: fix race conditions in sco_sock_connect()
- CVE-2026-43022Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists
- CVE-2026-43021Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails
- CVE-2026-43020Bluetooth: MGMT: validate LTK enc_size on load
- CVE-2026-43019Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
- CVE-2026-43018Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt
- CVE-2026-43017Bluetooth: MGMT: validate mesh send advertising payload length
- CVE-2026-43016bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().
- CVE-2026-43015net: macb: fix clk handling on PCI glue driver removal
- CVE-2026-43014net: macb: properly unregister fixed rate clocks