Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-23208ALSA: usb-audio: Prevent excessive number of frames
- CVE-2026-23207spi: tegra210-quad: Protect curr_xfer check in IRQ handler
- CVE-2026-23206dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero
- CVE-2026-23205smb/client: fix memory leak in smb2_open_file()
- CVE-2026-23204net/sched: cls_u32: use skb_header_pointer_careful()
- CVE-2026-23203net: cpsw_new: Execute ndo_set_rx_mode callback in a work queue
- CVE-2026-23202spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer
- CVE-2026-23201ceph: fix oops due to invalid pointer for kfree() in parse_longname()
- CVE-2026-23200ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF
- CVE-2026-23199procfs: avoid fetching build ID while holding VMA lock
- CVE-2026-23198KVM: Don't clobber irqfd routing type when deassigning irqfd
- CVE-2026-23197i2c: imx: preserve error state in block data length handler
- CVE-2026-23196HID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer
- CVE-2026-23195cgroup/dmem: avoid pool UAF
- CVE-2026-23194rust_binder: correctly handle FDA objects of length zero
- CVE-2026-23193scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()
- CVE-2026-23192linkwatch: use __dev_put() in callers to prevent UAF
- CVE-2026-23191ALSA: aloop: Fix racy access at PCM trigger
- CVE-2026-23190ASoC: amd: fix memory leak in acp3x pdm dma ops
- CVE-2026-23189ceph: fix NULL pointer dereference in ceph_mds_auth_match()
- CVE-2026-23188net: usb: r8152: fix resume reset deadlock
- CVE-2026-23187pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains
- CVE-2026-23186hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify()
- CVE-2026-23185wifi: iwlwifi: mld: cancel mlo_scan_start_wk
- CVE-2026-23184binder: fix UAF in binder_netlink_report()
- CVE-2026-23183cgroup/dmem: fix NULL pointer dereference when setting max
- CVE-2026-23182spi: tegra: Fix a memory leak in tegra_slink_probe()
- CVE-2026-23181btrfs: sync read disk super and set block size
- CVE-2026-23180dpaa2-switch: add bounds check for if_id in IRQ handler
- CVE-2026-23179nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()