Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-31705ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment
- CVE-2026-31704ksmbd: use check_add_overflow() to prevent u16 DACL size overflow
- CVE-2026-31703writeback: Fix use after free in inode_switch_wbs_work_fn()
- CVE-2026-31702f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()
- CVE-2026-31701ALSA: caiaq: take a reference on the USB device in create_card()
- CVE-2026-31700net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()
- CVE-2026-31699crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed
- CVE-2026-31698crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
- CVE-2026-31697crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
- CVE-2026-31696rxrpc: Fix missing validation of ticket length in non-XDR key preparsing
- CVE-2026-31695wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free
- CVE-2026-31694fuse: reject oversized dirents in page cache
- CVE-2026-31693cifs: some missing initializations on replay
- CVE-2026-31692rtnetlink: add missing netlink_ns_capable() check for peer netns
- CVE-2026-31787xen/privcmd: fix double free via VMA splitting
- CVE-2026-31786Buffer overflow in drivers/xen/sys-hypervisor.c
- CVE-2026-31691igb: remove napi_synchronize() in igb_down()
- CVE-2026-31690firmware: thead: Fix buffer overflow and use standard endian macros
- CVE-2026-31689EDAC/mc: Fix error path ordering in edac_mc_alloc()
- CVE-2026-31687gpio: omap: do not register driver in probe()
- CVE-2026-31686mm/kasan: fix double free for kasan pXds
- CVE-2026-31685netfilter: ip6t_eui64: reject invalid MAC header for all packets
- CVE-2026-31684net: sched: act_csum: validate nested VLAN headers
- CVE-2026-31683batman-adv: avoid OGM aggregation when skb tailroom is insufficient
- CVE-2026-31682bridge: br_nd_send: linearize skb before parsing ND options
- CVE-2026-31681netfilter: xt_multiport: validate range encoding in checkentry
- CVE-2026-31680net: ipv6: flowlabel: defer exclusive option free until RCU teardown
- CVE-2026-31679openvswitch: validate MPLS set/set_masked payload length
- CVE-2026-31678openvswitch: defer tunnel netdev_put to RCU release
- CVE-2026-31677crypto: af_alg - limit RX SG extraction by receive buffer budget