Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-23045net/ena: fix missing lock when update devlink params
- CVE-2026-23044PM: hibernate: Fix crash when freeing invalid crypto compressor
- CVE-2026-23043btrfs: fix NULL pointer dereference in do_abort_log_replay()
- CVE-2026-23042idpf: fix aux device unplugging when rdma is not supported by vport
- CVE-2026-23041bnxt_en: Fix NULL pointer crash in bnxt_ptp_enable during error cleanup
- CVE-2026-23040wifi: mac80211_hwsim: fix typo in frequency notification
- CVE-2025-71192ALSA: ac97: fix a double free in snd_ac97_controller_register()
- CVE-2026-23039drm/gud: fix NULL fb and crtc dereferences on USB disconnect
- CVE-2026-23038pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
- CVE-2026-23037can: etas_es58x: allow partial RX URB allocation to succeed
- CVE-2026-23036btrfs: release path before iget_failed() in btrfs_read_locked_inode()
- CVE-2026-23035net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv
- CVE-2026-23034drm/amdgpu/userq: Fix fence reference leak on queue teardown v2
- CVE-2026-23033dmaengine: omap-dma: fix dma_pool resource leak in error paths
- CVE-2026-23032null_blk: fix kmemleak by releasing references to fault configfs items
- CVE-2026-23031can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
- CVE-2026-23030phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe()
- CVE-2026-23029LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy()
- CVE-2026-23028LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy()
- CVE-2026-23027LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy()
- CVE-2026-23026dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()
- CVE-2026-23025mm/page_alloc: prevent pcp corruption with SMP=n
- CVE-2025-71191dmaengine: at_hdmac: fix device leak on of_dma_xlate()
- CVE-2025-71190dmaengine: bcm-sba-raid: fix device leak on probe
- CVE-2025-71189dmaengine: dw: dmamux: fix OF node leak on route allocation failure
- CVE-2025-71188dmaengine: lpc18xx-dmamux: fix device leak on route allocation
- CVE-2025-71187dmaengine: sh: rz-dmac: fix device leak on probe failure
- CVE-2025-71186dmaengine: stm32: dmamux: fix device leak on route allocation
- CVE-2025-71185dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
- CVE-2026-23024idpf: fix memory leak of flow steer list on rmmod