Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-31586mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
- CVE-2026-31585media: vidtv: fix nfeeds state corruption on start_streaming failure
- CVE-2026-31584media: mediatek: vcodec: fix use-after-free in encoder release path
- CVE-2026-31583media: em28xx: fix use-after-free in em28xx_v4l2_open()
- CVE-2026-31582hwmon: (powerz) Fix use-after-free on USB disconnect
- CVE-2026-31581ALSA: 6fire: fix use-after-free on disconnect
- CVE-2026-31580bcache: fix cached_dev.sb_bio use-after-free and crash
- CVE-2026-31579wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit
- CVE-2026-31578media: as102: fix to not free memory after the device is registered in as102_usb_probe()
- CVE-2026-31577nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map
- CVE-2026-31576media: hackrf: fix to not free memory after the device is registered in hackrf_probe()
- CVE-2026-31575mm/userfaultfd: fix hugetlb fault mutex hash calculation
- CVE-2026-31574clockevents: Add missing resets of the next_event_forced flag
- CVE-2026-31573media: verisilicon: Fix kernel panic due to __initconst misuse
- CVE-2026-31572i2c: designware: amdisp: Fix resume-probe race condition issue
- CVE-2026-31571drm/i915: Unlink NV12 planes earlier
- CVE-2026-31570can: gw: fix OOB heap access in cgw_csum_crc8_rel()
- CVE-2026-31569LoongArch: KVM: Handle the case that EIOINTC's coremap is empty
- CVE-2026-31568s390/mm: Add missing secure storage access fixups for donated memory
- CVE-2026-31567PM: sleep: Drop spurious WARN_ON() from pm_restore_gfp_mask()
- CVE-2026-31566drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib
- CVE-2026-31565RDMA/irdma: Fix deadlock during netdev reset with active connections
- CVE-2026-31564LoongArch: KVM: Fix base address calculation in kvm_eiointc_regs_access()
- CVE-2026-31563net: macb: Use dev_consume_skb_any() to free TX SKBs
- CVE-2026-31562drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register
- CVE-2026-31561x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask
- CVE-2026-31560spi: spi-dw-dma: fix print error log when wait finish transaction
- CVE-2026-31559LoongArch: Fix missing NULL checks for kstrdup()
- CVE-2026-31558LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust
- CVE-2026-31557nvmet: move async event work off nvmet-wq