Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-23339nfc: nci: free skb on nci_transceive early error paths
- CVE-2026-23338drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings
- CVE-2026-23337pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config()
- CVE-2026-23336wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()
- CVE-2026-23335RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()
- CVE-2026-23334can: usb: f81604: handle short interrupt urb messages properly
- CVE-2026-23332cpufreq: intel_pstate: Fix crash during turbo disable
- CVE-2026-23331udp: Unhash auto-bound connected sk from 4-tuple hash table when disconnected.
- CVE-2026-23330nfc: nci: complete pending data exchange on device close
- CVE-2026-23329libie: don't unroll if fwlog isn't supported
- CVE-2026-23328accel/amdxdna: Fix NULL pointer dereference of mgmt_chann
- CVE-2026-23327cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()
- CVE-2026-23326xsk: Fix fragment node deletion to prevent buffer leak
- CVE-2026-23325wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()
- CVE-2026-23324can: usb: etas_es58x: correctly anchor the urb in the read bulk callback
- CVE-2026-23323hwmon: (macsmc) Fix regressions in Apple Silicon SMC hwmon driver
- CVE-2026-23322ipmi: Fix use-after-free and list corruption on sender error
- CVE-2026-23321mptcp: pm: in-kernel: always mark signal+subflow endp as used
- CVE-2026-23319bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim
- CVE-2026-23318ALSA: usb-audio: Use correct version for UAC3 header validation
- CVE-2026-23317drm/vmwgfx: Return the correct value in vmw_translate_ptr functions
- CVE-2026-23316net: ipv4: fix ARM64 alignment fault in multipath hash seed
- CVE-2026-23315wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()
- CVE-2026-23314regulator: bq257xx: Fix device node reference leak in bq257xx_reg_dt_parse_gpio()
- CVE-2026-23313i40e: Fix preempt count leak in napi poll tracepoint
- CVE-2026-23312net: usb: kaweth: validate USB endpoints
- CVE-2026-23311perf/core: Fix invalid wait context in ctx_sched_in()
- CVE-2026-23310bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded
- CVE-2026-23309tracing: Add NULL pointer check to trigger_data_free()
- CVE-2026-23308pinctrl: equilibrium: fix warning trace on load