Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-23155can: gs_usb: gs_usb_receive_bulk_callback(): fix error message
- CVE-2026-23154net: fix segmentation of forwarding fraglist GRO
- CVE-2026-23153firewire: core: fix race condition against transaction list
- CVE-2026-23152wifi: mac80211: correctly decode TTLM with default link map
- CVE-2026-23151Bluetooth: MGMT: Fix memory leak in set_ssp_complete
- CVE-2026-23150nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().
- CVE-2026-23149drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl()
- CVE-2026-23148nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference
- CVE-2026-23147btrfs: zlib: fix the folio leak on S390 hardware acceleration
- CVE-2026-23146Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work
- CVE-2026-23145ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
- CVE-2026-23144mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure
- CVE-2026-23143virtio_net: Fix misalignment bug in struct virtnet_info
- CVE-2026-23142mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure
- CVE-2026-23141btrfs: send: check for inline extents in range_is_hole_in_parent()
- CVE-2025-71202iommu/sva: invalidate stale IOTLB entries for kernel address space
- CVE-2026-23140bpf, test_run: Subtract size of xdp_frame from allowed metadata size
- CVE-2026-23139netfilter: nf_conncount: update last_gc only when GC has been performed
- CVE-2026-23138tracing: Add recursion protection in kernel stack trace recording
- CVE-2026-23137of: unittest: Fix memory leak in unittest_data_add()
- CVE-2026-23136libceph: reset sparse-read state in osd_fault()
- CVE-2025-71201netfs: Fix early read unlock of page with EOF in middle
- CVE-2026-23135wifi: ath12k: fix dma_free_coherent() pointer
- CVE-2026-23134slab: fix kmalloc_nolock() context check for PREEMPT_RT
- CVE-2026-23133wifi: ath10k: fix dma_free_coherent() pointer
- CVE-2026-23132drm/bridge: synopsys: dw-dp: fix error paths of dw_dp_bind
- CVE-2026-23131platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names
- CVE-2026-23130wifi: ath12k: fix dead lock while flushing management frames
- CVE-2026-23129dpll: Prevent duplicate registrations
- CVE-2026-23128arm64: Set __nocfi on swsusp_arch_resume()