Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-23227drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free
- CVE-2026-23226ksmbd: add chann_lock to protect ksmbd_chann_list xarray
- CVE-2026-23225sched/mmcid: Don't assume CID is CPU owned on mode switch
- CVE-2026-23224erofs: fix UAF issue for file-backed mounts w/ directio option
- CVE-2026-23223xfs: fix UAF in xchk_btree_check_block_owner
- CVE-2026-23222crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly
- CVE-2026-23221bus: fsl-mc: fix use-after-free in driver_override_show()
- CVE-2026-23220ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths
- CVE-2025-71237nilfs2: Fix potential block overflow that cause system hang
- CVE-2025-71236scsi: qla2xxx: Validate sp before freeing associated memory
- CVE-2025-71235scsi: qla2xxx: Delay module unload while fabric scan in progress
- CVE-2025-71234wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add
- CVE-2025-71233PCI: endpoint: Avoid creating sub-groups asynchronously
- CVE-2025-71232scsi: qla2xxx: Free sp in error path to fix system crash
- CVE-2025-71231crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode
- CVE-2025-71230hfs: ensure sb->s_fs_info is always cleaned up
- CVE-2025-71229wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon()
- CVE-2026-23219mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single
- CVE-2026-23218gpio: loongson-64bit: Fix incorrect NULL check after devm_kcalloc()
- CVE-2026-23217riscv: trace: fix snapshot deadlock with sbi ecall
- CVE-2026-23216scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
- CVE-2026-23215x86/vmware: Fix hypercall clobbers
- CVE-2026-23214btrfs: reject new transactions if the fs is fully read-only
- CVE-2026-23213drm/amd/pm: Disable MMIO access during SMU Mode 1 reset
- CVE-2025-71227wifi: mac80211: don't WARN for connections on invalid channels
- CVE-2025-71225md: suspend array while updating raid_disks via sysfs
- CVE-2026-23212bonding: annotate data-races around slave->last_rx
- CVE-2026-23211mm, swap: restore swap_space attr aviod kernel panic
- CVE-2026-23210ice: Fix PTP NULL pointer dereference during VSI rebuild
- CVE-2026-23209macvlan: fix error recovery in macvlan_common_newlink()