Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-43013net/mlx5: lag: Check for LAG device before creating debugfs
- CVE-2026-43012net/mlx5: Fix switchdev mode rollback in case of failure
- CVE-2026-43011net/x25: Fix potential double free of skb
- CVE-2026-43010bpf: Reject sleepable kprobe_multi programs at attach time
- CVE-2026-43009bpf: Fix incorrect pruning due to atomic fetch precision tracking
- CVE-2026-43008gpio: qixis-fpga: Fix error handling for devm_regmap_init_mmio()
- CVE-2026-43007accel/qaic: Handle DBC deactivation if the owner went away
- CVE-2026-43006io_uring/rsrc: reject zero-length fixed buffer import
- CVE-2026-43005hwmon: (tps53679) Fix array access with zero-length block read
- CVE-2026-43004spi: stm32-ospi: Fix resource leak in remove() callback
- CVE-2026-31785drm/xe/xe_pagefault: Disallow writes to read-only VMAs
- CVE-2026-31784drm/xe/pxp: Clear restart flag in pxp_start after jumping back
- CVE-2026-31783spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callback
- CVE-2026-31782perf/x86: Fix potential bad container_of in intel_pmu_hw_config
- CVE-2026-31781drm/ioc32: stop speculation on the drm_compat_ioctl path
- CVE-2026-31780wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation
- CVE-2026-31779wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()
- CVE-2026-31778ALSA: caiaq: fix stack out-of-bounds read in init_card
- CVE-2026-31777ALSA: ctxfi: Check the error for index mapping
- CVE-2026-31776ALSA: ctxfi: Fix missing SPDIFI1 index handling
- CVE-2026-31775ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization
- CVE-2026-31774io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs()
- CVE-2026-31773Bluetooth: SMP: derive legacy responder STK authentication from MITM state
- CVE-2026-31772Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync
- CVE-2026-31771Bluetooth: hci_event: move wake reason storage into validated event handlers
- CVE-2026-31770hwmon: (occ) Fix division by zero in occ_show_power_1()
- CVE-2026-31769gpib: fix use-after-free in IO ioctl handlers
- CVE-2026-31768iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()
- CVE-2026-31767drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode
- CVE-2026-31766drm/amdgpu: validate doorbell_offset in user queue creation