Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-31495netfilter: ctnetlink: use netlink policy range checks
- CVE-2026-31494net: macb: use the current queue number for stats
- CVE-2026-31493RDMA/efa: Fix use of completion ctx after free
- CVE-2026-31492RDMA/irdma: Initialize free_qp completion before using it
- CVE-2026-31491RDMA/irdma: Harden depth calculation functions
- CVE-2026-31490drm/xe/pf: Fix use-after-free in migration restore
- CVE-2026-31489spi: meson-spicc: Fix double-put in remove path
- CVE-2026-31488drm/amd/display: Do not skip unrelated mode changes in DSC validation
- CVE-2026-31487spi: use generic driver_override infrastructure
- CVE-2026-31486hwmon: (pmbus/core) Protect regulator operations with mutex
- CVE-2026-31485spi: spi-fsl-lpspi: fix teardown order issue (UAF)
- CVE-2026-31484io_uring/fdinfo: fix OOB read in SQE_MIXED wrap check
- CVE-2026-31483s390/syscalls: Add spectre boundary for syscall dispatch table
- CVE-2026-31482s390/entry: Scrub r12 register on kernel entry
- CVE-2026-31481tracing: Drain deferred trigger frees if kthread creation fails
- CVE-2026-31480tracing: Fix potential deadlock in cpu hotplug with osnoise
- CVE-2026-31479drm/xe: always keep track of remap prev/next
- CVE-2026-31478ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()
- CVE-2026-31477ksmbd: fix memory leaks and NULL deref in smb2_lock()
- CVE-2026-31476ksmbd: do not expire session on binding failure
- CVE-2026-31475ASoC: sma1307: fix double free of devm_kzalloc() memory
- CVE-2026-31474can: isotp: fix tx.buf use-after-free in isotp_sendmsg()
- CVE-2026-31473media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex
- CVE-2026-31472xfrm: iptfs: validate inner IPv4 header length in IPTFS payload
- CVE-2026-31471xfrm: iptfs: only publish mode_data after clone setup
- CVE-2026-31470virt: tdx-guest: Fix handling of host controlled 'quote' buffer length
- CVE-2026-31469virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
- CVE-2026-31468vfio/pci: Fix double free in dma-buf feature
- CVE-2026-31467erofs: add GFP_NOIO in the bio completion if needed
- CVE-2026-31466mm/huge_memory: fix folio isn't locked in softleaf_to_folio()