Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-23178HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report()
- CVE-2026-23177mm, shmem: prevent infinite loop on truncate race
- CVE-2026-23176platform/x86: toshiba_haps: Fix memory leaks in add/remove routines
- CVE-2026-23175net: cpsw: Execute ndo_set_rx_mode callback in a work queue
- CVE-2026-23174nvme-pci: handle changing device dma map requirements
- CVE-2025-71224wifi: mac80211: ocb: skip rx_no_sta when interface is not joined
- CVE-2025-71223smb/server: fix refcount leak in smb2_open()
- CVE-2025-71222wifi: wlcore: ensure skb headroom before skb_push
- CVE-2025-71221dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
- CVE-2025-71220smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()
- CVE-2025-71204smb/server: fix refcount leak in parse_durable_handle_context()
- CVE-2025-71203riscv: Sanitize syscall table indexing under speculation
- CVE-2026-23173net/mlx5e: TC, delete flows only for existing peers
- CVE-2026-23172net: wwan: t7xx: fix potential skb->frags overflow in RX path
- CVE-2026-23171bonding: fix use-after-free due to enslave fail after slave array update
- CVE-2026-23170drm/imx/tve: fix probe device leak
- CVE-2026-23169mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()
- CVE-2026-23168flex_proportions: make fprop_new_period() hardirq safe
- CVE-2026-23167nfc: nci: Fix race between rfkill and nci_unregister_device().
- CVE-2026-23166ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues
- CVE-2026-23165sfc: fix deadlock in RSS config read
- CVE-2026-23164rocker: fix memory leak in rocker_world_port_post_fini()
- CVE-2026-23163drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove
- CVE-2026-23162drm/xe/nvm: Fix double-free on aux add failure
- CVE-2026-23161mm/shmem, swap: fix race of truncate and swap entry split
- CVE-2026-23160octeon_ep: Fix memory leak in octep_device_setup()
- CVE-2026-23159perf: sched: Fix perf crash with new is_user_task() helper
- CVE-2026-23158gpio: virtuser: fix UAF in configfs release path
- CVE-2026-23157btrfs: do not strictly require dirty metadata threshold for metadata writepages
- CVE-2026-23156efivarfs: fix error propagation in efivar_entry_get()