Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-31405media: dvb-net: fix OOB access in ULE extension header tables
- CVE-2026-31403NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd
- CVE-2026-31402nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
- CVE-2026-31401HID: bpf: prevent buffer overflow in hid_hw_request
- CVE-2026-31400sunrpc: fix cache_request leak in cache_release
- CVE-2026-31399nvdimm/bus: Fix potential use after free in asynchronous initialization
- CVE-2026-31398mm/rmap: fix incorrect pte restoration for lazyfree folios
- CVE-2026-31397mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd()
- CVE-2026-31396net: macb: fix use-after-free access to PTP clock
- CVE-2026-31395bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler
- CVE-2026-31394mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations
- CVE-2026-31393Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access
- CVE-2026-31392smb: client: fix krb5 mount with username option
- CVE-2026-31391crypto: atmel-sha204a - Fix OOM ->tfm_count leak
- CVE-2026-31390drm/xe: Fix memory leak in xe_vm_madvise_ioctl
- CVE-2026-31389spi: fix use-after-free on controller registration failure
- CVE-2026-23475spi: fix statistics allocation
- CVE-2026-23474mtd: Avoid boot crash in RedBoot partition table parser
- CVE-2026-23472serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN
- CVE-2026-23470drm/imagination: Fix deadlock in soft reset sequence
- CVE-2026-23469drm/imagination: Synchronize interrupts before suspending the GPU
- CVE-2026-23468drm/amdgpu: Limit BO list entry count to prevent resource exhaustion
- CVE-2026-23467drm/i915/dmc: Fix an unlikely NULL pointer deference at probe
- CVE-2026-23466drm/xe: Open-code GGTT MMIO access protection
- CVE-2026-23465btrfs: log new dentries when logging parent dir of a conflicting inode
- CVE-2026-23464soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe()
- CVE-2026-23463soc: fsl: qbman: fix race condition in qman_destroy_fq
- CVE-2026-23462Bluetooth: HIDP: Fix possible UAF
- CVE-2026-23461Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user
- CVE-2026-23460net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect