Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-31735iommupt: Fix short gather if the unmap goes into a large mapping
- CVE-2026-31734sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCU
- CVE-2026-31733sched_ext: Fix stale direct dispatch state in ddsp_dsq_id
- CVE-2026-31732gpio: Fix resource leaks on errors in gpiochip_add_data_with_key()
- CVE-2026-31731thermal: core: Address thermal zone removal races with resume
- CVE-2026-31730misc: fastrpc: possible double-free of cctx->remote_heap
- CVE-2026-31729usb: typec: ucsi: validate connector number in ucsi_notify_common()
- CVE-2026-31728usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop
- CVE-2026-31727usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo
- CVE-2026-31726usb: gadget: uvc: fix NULL pointer dereference during unbind race
- CVE-2026-31725usb: gadget: f_ecm: Fix net_device lifecycle with device_move
- CVE-2026-31724usb: gadget: f_eem: Fix net_device lifecycle with device_move
- CVE-2026-31723usb: gadget: f_subset: Fix net_device lifecycle with device_move
- CVE-2026-31722usb: gadget: f_rndis: Fix net_device lifecycle with device_move
- CVE-2026-31721usb: gadget: f_hid: move list and spinlock inits from bind to alloc
- CVE-2026-31720usb: gadget: f_uac1_legacy: validate control request size
- CVE-2026-31719crypto: krb5enc - fix async decrypt skipping hash verification
- CVE-2026-31718ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger
- CVE-2026-31717ksmbd: validate owner of durable handle on reconnect
- CVE-2026-31716fs/ntfs3: validate rec->used in journal-replay file record check
- CVE-2026-31715f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()
- CVE-2026-31714f2fs: fix to avoid memory leak in f2fs_rename()
- CVE-2026-31713fuse: abort on fatal signal during sync init
- CVE-2026-31712ksmbd: require minimum ACE size in smb_check_perm_dacl()
- CVE-2026-31711smb: server: fix active_num_conn leak on transport allocation failure
- CVE-2026-31710smb: client: fix dir separator in SMB1 UNIX mounts
- CVE-2026-31709smb: client: validate the whole DACL before rewriting it in cifsacl
- CVE-2026-31708smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path
- CVE-2026-31707ksmbd: validate response sizes in ipc_validate_msg()
- CVE-2026-31706ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()