Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-23399nf_tables: nft_dynset: fix possible stateful expression memleak in error path
- CVE-2026-23398icmp: fix NULL pointer dereference in icmp_tag_validation()
- CVE-2026-23397nfnetlink_osf: validate individual option lengths in fingerprints
- CVE-2026-23396wifi: mac80211: fix NULL deref in mesh_matches_local()
- CVE-2026-23395Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
- CVE-2026-23394af_unix: Give up GC if MSG_PEEK intervened.
- CVE-2026-23393bridge: cfm: Fix race condition in peer_mep deletion
- CVE-2026-23392netfilter: nf_tables: release flowtable after rcu grace period on error
- CVE-2026-23391netfilter: xt_CT: drop pending enqueued packets on template removal
- CVE-2026-23390tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow
- CVE-2026-23389ice: Fix memory leak in ice_set_ringparam()
- CVE-2026-23388Squashfs: check metadata block offset is within range
- CVE-2026-23387pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe()
- CVE-2026-23386gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL
- CVE-2026-23385netfilter: nf_tables: clone set on flush only
- CVE-2026-23384RDMA/ionic: Fix kernel stack leak in ionic_create_cq()
- CVE-2026-23383bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing
- CVE-2026-23382HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
- CVE-2026-23381net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
- CVE-2026-23380tracing: Fix WARN_ON in tracing_buffers_mmap_close
- CVE-2026-23379net/sched: ets: fix divide by zero in the offload path
- CVE-2026-23378net/sched: act_ife: Fix metalist update behavior
- CVE-2026-23377ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz
- CVE-2026-23376nvmet-fcloop: Check remoteport port_state before calling done callback
- CVE-2026-23375mm: thp: deny THP for files on anonymous inodes
- CVE-2026-23374blktrace: fix __this_cpu_read/write in preemptible context
- CVE-2026-23373wifi: rsi: Don't default to -EOPNOTSUPP in rsi_mac80211_config
- CVE-2026-23372nfc: rawsock: cancel tx_work before socket teardown
- CVE-2026-23371sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting
- CVE-2026-23370platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data