Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-23459ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS
- CVE-2026-23458netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()
- CVE-2026-23457netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()
- CVE-2026-23456netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case
- CVE-2026-23455netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()
- CVE-2026-23454net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown
- CVE-2026-23453net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mode
- CVE-2026-23452PM: runtime: Fix a race condition related to device removal
- CVE-2026-23451bonding: prevent potential infinite loop in bond_header_parse()
- CVE-2026-23450net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
- CVE-2026-23449net/sched: teql: Fix double-free in teql_master_xmit
- CVE-2026-23448net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check
- CVE-2026-23447net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check
- CVE-2026-23446net: usb: aqc111: Do not perform PM inside suspend callback
- CVE-2026-23445igc: fix page fault in XDP TX timestamps handling
- CVE-2026-23444wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure
- CVE-2026-23443ACPI: processor: Fix previous acpi_processor_errata_piix4() fix
- CVE-2026-23442ipv6: add NULL checks for idev in SRv6 paths
- CVE-2026-23441net/mlx5e: Prevent concurrent access to IPSec ASO context
- CVE-2026-23440net/mlx5e: Fix race condition during IPSec ESN update
- CVE-2026-23439udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n
- CVE-2026-23438net: mvpp2: guard flow control update with global_tx_fc in buffer switching
- CVE-2026-23437net: shaper: protect late read accesses to the hierarchy
- CVE-2026-23436net: shaper: protect from late creation of hierarchy
- CVE-2026-23435perf/x86: Move event pointer setup earlier in x86_pmu_enable()
- CVE-2026-23434mtd: rawnand: serialize lock/unlock against other NAND operations
- CVE-2026-23433arm_mpam: Fix null pointer dereference when restoring bandwidth counters
- CVE-2026-23432mshv: Fix use-after-free in mshv_map_user_memory error path
- CVE-2026-23431spi: amlogic-spisg: Fix memory leak in aml_spisg_probe()
- CVE-2026-23430drm/vmwgfx: Don't overwrite KMS surface dirty tracker