Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-23307can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message
- CVE-2026-23306scsi: pm8001: Fix use-after-free in pm8001_queue_command()
- CVE-2026-23305accel/rocket: fix unwinding in error path in rocket_probe
- CVE-2026-23304ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
- CVE-2026-23303smb: client: Don't log plaintext credentials in cifs_set_cifscreds
- CVE-2026-23302net: annotate data-races around sk->sk_{data_ready,write_space}
- CVE-2026-23301ASoC: SDCA: Add allocation failure check for Entity name
- CVE-2026-23300net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop
- CVE-2026-23299Bluetooth: purge error queues in socket destructors
- CVE-2026-23298can: ucan: Fix infinite loop from zero-length messages
- CVE-2026-23297nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit().
- CVE-2026-23296scsi: core: Fix refcount leak for tagset_refcnt
- CVE-2026-23295accel/amdxdna: Fix dead lock for suspend and resume
- CVE-2026-23294bpf: Fix race in devmap on PREEMPT_RT
- CVE-2026-23293net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
- CVE-2026-23292scsi: target: Fix recursive locking in __configfs_open_file()
- CVE-2026-23291nfc: pn533: properly drop the usb interface reference on disconnect
- CVE-2026-23290net: usb: pegasus: validate USB endpoints
- CVE-2026-23289IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()
- CVE-2026-23288accel/amdxdna: Fix out-of-bounds memset in command slot handling
- CVE-2026-23287irqchip/sifive-plic: Fix frozen interrupt due to affinity setting
- CVE-2026-23286atm: lec: fix null-ptr-deref in lec_arp_clear_vccs
- CVE-2026-23285drbd: fix null-pointer dereference on local read error
- CVE-2026-23284net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()
- CVE-2026-23283regulator: fp9931: Fix PM runtime reference leak in fp9931_hwmon_read()
- CVE-2026-23282smb: client: fix oops due to uninitialised var in smb2_unlink()
- CVE-2026-23281wifi: libertas: fix use-after-free in lbs_free_adapter()
- CVE-2026-23280accel/amdxdna: Prevent ubuf size overflow
- CVE-2026-23279wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()
- CVE-2026-31788xen/privcmd: restrict usage in unprivileged domU