Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-31556xfs: scrub: unlock dquot before early return in quota scrub
- CVE-2026-31555futex: Clear stale exiting pointer in futex_lock_pi() retry path
- CVE-2026-31554futex: Require sys_futex_requeue() to have identical flags
- CVE-2026-31553KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc()
- CVE-2026-31552wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom
- CVE-2026-31551wifi: mac80211: Fix static_branch_dec() underflow for aql_disable.
- CVE-2026-31550pmdomain: bcm: bcm2835-power: Increase ASB control timeout
- CVE-2026-31549i2c: cp2615: fix serial string NULL-deref at probe
- CVE-2026-31548wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down
- CVE-2026-31547drm/xe: Fix missing runtime PM reference in ccs_mode_store
- CVE-2026-31546net: bonding: fix NULL deref in bond_debug_rlb_hash_show
- CVE-2026-31545NFC: nxp-nci: allow GPIOs to sleep
- CVE-2026-31544firmware: arm_scmi: Fix NULL dereference on notify error path
- CVE-2026-31543crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying
- CVE-2026-31542x86/platform/uv: Handle deconfigured sockets
- CVE-2026-31541tracing: Fix trace_marker copy link list updates
- CVE-2026-31540drm/i915/gt: Check set_default_submission() before deferencing
- CVE-2026-31539smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available
- CVE-2026-31538smb: server: make use of smbdirect_socket.recv_io.credits.available
- CVE-2026-31537smb: server: make use of smbdirect_socket.send_io.bcredits
- CVE-2026-31536smb: server: let send_done handle a completion without IB_SEND_SIGNALED
- CVE-2026-31535smb: client: make use of smbdirect_socket.recv_io.credits.available
- CVE-2026-31533net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
- CVE-2026-31532can: raw: fix ro->uniq use-after-free in raw_rcv()
- CVE-2026-31531ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()
- CVE-2026-31530cxl/port: Fix use after free of parent_port in cxl_detach_ep()
- CVE-2026-31529cxl/region: Fix leakage in __construct_region()
- CVE-2026-31528perf: Make sure to use pmu_ctx->pmu for groups
- CVE-2026-31527driver core: platform: use generic driver_override infrastructure
- CVE-2026-31526bpf: Fix exception exit lock checking for subprogs