Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-31676rxrpc: only handle RESPONSE during service challenge
- CVE-2026-31675net/sched: sch_netem: fix out-of-bounds access in packet corruption
- CVE-2026-31674netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
- CVE-2026-31673af_unix: read UNIX_DIAG_VFS data under unix_state_lock
- CVE-2026-31672wifi: rt2x00usb: fix devres lifetime
- CVE-2026-31671xfrm_user: fix info leak in build_report()
- CVE-2026-31670net: rfkill: prevent unlimited numbers of rfkill events from being created
- CVE-2026-31669mptcp: fix slab-use-after-free in __inet_lookup_established
- CVE-2026-31668seg6: separate dst_cache for input and output paths in seg6 lwtunnel
- CVE-2026-31667Input: uinput - fix circular locking dependency with ff-core
- CVE-2026-31666btrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref()
- CVE-2026-31665netfilter: nft_ct: fix use-after-free in timeout object destroy
- CVE-2026-31664xfrm: clear trailing padding in build_polexpire()
- CVE-2026-31663xfrm: hold dev ref until after transport_finish NF_HOOK
- CVE-2026-31662tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
- CVE-2026-31661wifi: brcmsmac: Fix dma_free_coherent() size
- CVE-2026-31660nfc: pn533: allocate rx skb before consuming bytes
- CVE-2026-31659batman-adv: reject oversized global TT response buffers
- CVE-2026-31658net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()
- CVE-2026-31657batman-adv: hold claim backbone gateways by reference
- CVE-2026-31656drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat
- CVE-2026-31655pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled
- CVE-2026-31654mm/vma: fix memory leak in __mmap_region()
- CVE-2026-31653mm/damon/sysfs: dealloc repeat_call_control if damon_call() fails
- CVE-2026-31652mm/damon/stat: deallocate damon_call() failure leaking damon_ctx
- CVE-2026-31651mmc: vub300: fix NULL-deref on disconnect
- CVE-2026-31650mmc: vub300: fix use-after-free on disconnect
- CVE-2026-31649net: stmmac: fix integer underflow in chain mode
- CVE-2026-31648mm: filemap: fix nr_pages calculation overflow in filemap_map_pages()
- CVE-2026-31647idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling