Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-31616usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()
- CVE-2026-31615usb: gadget: renesas_usb3: validate endpoint index in standard request handlers
- CVE-2026-31614smb: client: fix off-by-8 bounds check in check_wsl_eas()
- CVE-2026-31613smb: client: fix OOB reads parsing symlink error response
- CVE-2026-31612ksmbd: validate EaNameLength in smb2_get_ea()
- CVE-2026-31611ksmbd: require 3 sub-authorities before reading sub_auth[2]
- CVE-2026-31610ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc
- CVE-2026-31609smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush()
- CVE-2026-31608smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list()
- CVE-2026-31607usbip: validate number_of_packets in usbip_pack_ret_submit()
- CVE-2026-31606usb: gadget: f_hid: don't call cdev_init while cdev in use
- CVE-2026-31605fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
- CVE-2026-31604wifi: rtw88: fix device leak on probe failure
- CVE-2026-31603staging: sm750fb: fix division by zero in ps_to_hz()
- CVE-2026-31602ALSA: ctxfi: Limit PTP to a single page
- CVE-2026-31601vfio/xe: Reorganize the init to decouple migration from reset
- CVE-2026-31600arm64: mm: Handle invalid large leaf mappings correctly
- CVE-2026-31599media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections
- CVE-2026-31598ocfs2: fix possible deadlock between unlink and dio_end_io_write
- CVE-2026-31597ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY
- CVE-2026-31596ocfs2: handle invalid dinode in ocfs2_group_extend
- CVE-2026-31595PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup
- CVE-2026-31594PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown
- CVE-2026-31593KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU
- CVE-2026-31592KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock
- CVE-2026-31591KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish
- CVE-2026-31590KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION
- CVE-2026-31589mm: call ->free_folio() directly in folio_unmap_invalidate()
- CVE-2026-31588KVM: x86: Use scratch field in MMIO fragment to hold small write values
- CVE-2026-31587ASoC: qcom: q6apm: move component registration to unmanaged version