Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98530kprobes: Fix permanent hang when flushing the kprobe optimizer
- CVE-2026-98529gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()
- CVE-2026-98528gpio: cdev: fix kernel stack leak to user-space in error path
- CVE-2026-98527gpio: zynq: fix runtime PM leak on request error path
- CVE-2026-98526llc: reserve device headroom for allocated frames
- CVE-2026-98525mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag()
- CVE-2026-98524rds: ib: Clear the sg list when mapping an MR fails
- CVE-2026-98523drm/client: fix restore of partially initialized client
- CVE-2026-98522drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()
- CVE-2026-98521drm/i915: fix incorrect RCU teardown order
- CVE-2026-98520drm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping
- CVE-2026-98519drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()
- CVE-2026-98518drm/nouveau/dmem: pin VRAM for the whole registered range
- CVE-2026-98517drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM
- CVE-2026-98516drm/nouveau: Fix bridge reference leak in nv1a_ram_new()
- CVE-2026-98515drm/nouveau: fix double-free in nvif_vmm_dtor
- CVE-2026-98514drm/nouveau: Fix gem reference leak in validate_init()
- CVE-2026-98513drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()
- CVE-2026-98512drm/nouveau: RCU-free the scheduler-containing nouveau_sched
- CVE-2026-98511drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()
- CVE-2026-98510drm/xe/vm: nuke PTs only after unlinking contested VMAs
- CVE-2026-98509drm/virtio: fix memory leak of fence event on execbuffer failure
- CVE-2026-98508drm/virtio: fix NULL pointer dereference on fence allocation failure
- CVE-2026-98507mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish
- CVE-2026-98506mm/hugetlb: do not dissolve gigantic pages without runtime support
- CVE-2026-98505mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()
- CVE-2026-98504PCI: of_property: Omit bus properties without a subordinate bus
- CVE-2026-98503packet: use ubuf_info completion for TX_RING packets
- CVE-2026-98502HID: alps: unregister DualPoint Stick input device on remove
- CVE-2026-98501HID: alps: fix use-after-free on input2 registration failure