Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-23068spi: spi-sprd-adi: Fix double free in probe error path
- CVE-2026-23067iommu/io-pgtable-arm: fix size_t signedness bug in unmap path
- CVE-2026-23066rxrpc: Fix recvmsg() unconditional requeue
- CVE-2026-23065platform/x86/amd: Fix memory leak in wbrf_record()
- CVE-2026-23064net/sched: act_ife: avoid possible NULL deref
- CVE-2026-23063uacce: ensure safe queue release with state management
- CVE-2026-23062platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro
- CVE-2026-23061can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak
- CVE-2026-23060crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
- CVE-2026-23059scsi: qla2xxx: Sanitize payload size to prevent member overflow
- CVE-2026-23058can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak
- CVE-2026-23057vsock/virtio: Coalesce only linear skb
- CVE-2026-23056uacce: implement mremap in uacce_vm_ops to return -EPERM
- CVE-2025-71199iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver
- CVE-2025-71198iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection
- CVE-2025-71197w1: therm: Fix off-by-one buffer overflow in alarms_store
- CVE-2026-23055i2c: riic: Move suspend handling to NOIRQ phase
- CVE-2026-23054net: hv_netvsc: reject RSS hash key programming without RX indirection table
- CVE-2026-23053NFS: Fix a deadlock involving nfs_release_folio()
- CVE-2026-23052ftrace: Do not over-allocate ftrace memory
- CVE-2026-23051drm/amdgpu: fix drm panic null pointer when driver not support atomic
- CVE-2026-23050pNFS: Fix a deadlock when returning a delegation during open()
- CVE-2026-23049drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel
- CVE-2025-71196phy: stm32-usphyc: Fix off by one in probe()
- CVE-2025-71195dmaengine: xilinx: xdma: Fix regmap max_register
- CVE-2025-71194btrfs: fix deadlock in wait_current_trans() due to ignored transaction type
- CVE-2025-71193phy: qcom-qusb2: Fix NULL pointer dereference on early suspend
- CVE-2026-23048udp: call skb_orphan() before skb_attempt_defer_free()
- CVE-2026-23047libceph: make calc_target() set t->paused, not just clear it
- CVE-2026-23046virtio_net: fix device mismatch in devm_kzalloc/devm_kfree