Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-23429iommu/sva: Fix crash in iommu_sva_unbind_device()
- CVE-2026-23428ksmbd: fix use-after-free of share_conf in compound request
- CVE-2026-23427ksmbd: fix use-after-free in durable v2 replay of active file handles
- CVE-2026-23426drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse()
- CVE-2026-23425KVM: arm64: Fix ID register initialization for non-protected pKVM guests
- CVE-2026-23424accel/amdxdna: Validate command buffer payload count
- CVE-2026-23423btrfs: free pages on error in btrfs_uring_read_extent()
- CVE-2026-23422dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler
- CVE-2026-23421drm/xe/configfs: Free ctx_restore_mid_bb in release
- CVE-2026-23420wifi: wlcore: Fix a locking bug
- CVE-2026-23419net/rds: Fix circular locking dependency in rds_tcp_tune
- CVE-2026-23418drm/xe/reg_sr: Fix leak on xa_store failure
- CVE-2026-23417bpf: Fix constant blinding for PROBE_MEM32 stores
- CVE-2026-23416mm/mseal: update VMA end correctly on merge
- CVE-2026-23415futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()
- CVE-2026-23414tls: Purge async_hold in tls_decrypt_async_wait()
- CVE-2026-23413clsact: Fix use-after-free in init/destroy rollback asymmetry
- CVE-2026-23412netfilter: bpf: defer hook memory release until rcu readers are done
- CVE-2026-23411apparmor: fix race between freeing data and fs accessing it
- CVE-2026-23410apparmor: fix race on rawdata dereference
- CVE-2026-23409apparmor: fix differential encoding verification
- CVE-2026-23408apparmor: Fix double free of ns_name in aa_replace_profiles()
- CVE-2026-23407apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
- CVE-2026-23406apparmor: fix side-effect bug in match_char() macro usage
- CVE-2026-23405apparmor: fix: limit the number of levels of policy namespaces
- CVE-2026-23404apparmor: replace recursive profile removal with iterative approach
- CVE-2026-23403apparmor: fix memory leak in verify_header
- CVE-2026-23402KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE
- CVE-2026-23401KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE
- CVE-2026-23400rust_binder: call set_notification_done() without proc lock