Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98590bpf: Fix bpf_sock context code generation
- CVE-2026-98589bpf: Reject pkt arguments in mutating subprogs
- CVE-2026-98588bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc
- CVE-2026-98587firewire: cdev: fix back-transition for iso_resource_auto client resource
- CVE-2026-98586sctp: hold asoc or transport before mod_timer() in timer handlers
- CVE-2026-98585eth: fbnic: Avoid rounding zero ring sizes
- CVE-2026-98584net/sched: fix potential stack infoleak in em_text_dump()
- CVE-2026-98583nfc: nfcmrvl: validate helper command length before pull
- CVE-2026-98582nfc: st21nfca: validate received frame size
- CVE-2026-98581nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()
- CVE-2026-98580nfc: llcp: Fix race condition in accept_queue lifecycle
- CVE-2026-98579nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure
- CVE-2026-98578nfc: st21nfca: validate ISO15693 inventory length
- CVE-2026-98577nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()
- CVE-2026-98576nfc: llcp: fix slab-out-of-bounds reads when logging service names
- CVE-2026-98575nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()
- CVE-2026-98574net: bcmgenet: stop Tx NAPI before disabling the queues
- CVE-2026-98573net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()
- CVE-2026-98572bpf: Fix immediate JMP JEQ/JNE on MIPS32
- CVE-2026-98571net: stmmac: clear stale buf->page after recycling on skb build failure
- CVE-2026-98570net: ipv6: keep room for the mac header in dst_dev_overhead()
- CVE-2026-98569ip_gre: Reject enabling collect metadata through changelink
- CVE-2026-98568vxlan: use one headroom snapshot for neighbour replies
- CVE-2026-98567net: xps: reject an out of range traffic class
- CVE-2026-98566drm/imagination: clamp freelist reconstruction requests
- CVE-2026-98565net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621
- CVE-2026-98564net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq
- CVE-2026-98563net: phylink: record the PHY only once bringup cannot fail
- CVE-2026-98562net: libwx: fix races in Tx timestamp handling
- CVE-2026-98561nfp: hold IPsec RX state under the XArray lock