Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-23278netfilter: nf_tables: always walk all pending catchall elements
- CVE-2026-23277net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit
- CVE-2026-23276net: add xmit recursion limit to tunnel xmit functions
- CVE-2026-23275io_uring: ensure ctx->rings is stable for task work flags manipulation
- CVE-2026-23274netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
- CVE-2026-23273macvlan: observe an RCU grace period in macvlan_common_newlink() error path
- CVE-2026-23272netfilter: nf_tables: unconditionally bump set->nelems before insertion
- CVE-2026-23271perf: Fix __perf_event_overflow() vs perf_remove_from_context() race
- CVE-2026-23270net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks
- CVE-2026-23269apparmor: validate DFA start states are in bounds in unpack_pdb
- CVE-2026-23268apparmor: fix unprivileged local user can do privileged policy management
- CVE-2026-23267f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes
- CVE-2026-23266fbdev: rivafb: fix divide error in nv3_arb()
- CVE-2026-23265f2fs: fix to do sanity check on node footer in {read,write}_end_io
- CVE-2026-23264Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem"
- CVE-2026-23263io_uring/zcrx: fix page array leak
- CVE-2026-23262gve: Fix stats report corruption on queue count change
- CVE-2026-23261nvme-fc: release admin tagset if init fails
- CVE-2026-23260regmap: maple: free entry on mas_store_gfp() failure
- CVE-2026-23259io_uring/rw: free potentially allocated iovec on cache put failure
- CVE-2026-23258net: liquidio: Initialize netdev pointer before queue setup
- CVE-2026-23257net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup
- CVE-2026-23256net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup
- CVE-2026-23255net: add proper RCU protection to /proc/net/ptype
- CVE-2026-23254net: gro: fix outer network offset
- CVE-2025-71270LoongArch: Enable exception fixup for specific ADE subcode
- CVE-2025-71269btrfs: do not free data reservation in fallback from inline due to -ENOSPC
- CVE-2025-71268btrfs: fix reservation leak in some error paths when inserting inline extent
- CVE-2026-23253media: dvb-core: fix wrong reinitialization of ringbuffer on reopen
- CVE-2026-23252xfs: get rid of the xchk_xfile_*_descr calls