Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-23251xfs: only call xf{array,blob}_destroy if we have a valid pointer
- CVE-2026-23250xfs: check return value of xchk_scrub_create_subord
- CVE-2026-23249xfs: check for deleted cursors when revalidating two btrees
- CVE-2026-23248perf/core: Fix refcount bug and potential UAF in perf_mmap
- CVE-2026-23247tcp: secure_seq: add back ports to TS offset
- CVE-2026-23246wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration
- CVE-2026-23245net/sched: act_gate: snapshot parameters with RCU on replace
- CVE-2026-23244nvme: fix memory allocation in nvme_pr_read_keys()
- CVE-2026-23243RDMA/umad: Reject negative data_len in ib_umad_write
- CVE-2026-23242RDMA/siw: Fix potential NULL pointer dereference in header processing
- CVE-2025-71267fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
- CVE-2025-71266fs: ntfs3: check return value of indx_find to avoid infinite loop
- CVE-2025-71265fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata
- CVE-2026-23241audit: add missing syscalls to read class
- CVE-2025-71239audit: add fchmodat2() to change attributes class
- CVE-2026-23240tls: Fix race condition in tls_sw_cancel_work_tx()
- CVE-2026-23239espintcp: Fix race condition in espintcp_close()
- CVE-2024-14027xattr: switch to CLASS(fd)
- CVE-2026-23238romfs: check sb_set_blocksize() return value
- CVE-2026-23237platform/x86: classmate-laptop: Add missing NULL pointer checks
- CVE-2026-23236fbdev: smscufx: properly copy ioctl memory to kernelspace
- CVE-2026-23235f2fs: fix out-of-bounds access in sysfs attribute read/write
- CVE-2026-23234f2fs: fix to avoid UAF in f2fs_write_end_io()
- CVE-2026-23233f2fs: fix to avoid mapping wrong physical block for swapfile
- CVE-2026-23232Revert "f2fs: block cache/dio write during f2fs_enable_checkpoint()"
- CVE-2025-71238scsi: qla2xxx: Fix bsg_done() causing double free
- CVE-2026-23231netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
- CVE-2026-23230smb: client: split cached_fid bitfields to avoid shared-byte RMW races
- CVE-2026-23229crypto: virtio - Add spinlock protection with virtqueue notification
- CVE-2026-23228smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()