Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-23023idpf: fix memory leak in idpf_vport_rel()
- CVE-2026-23022idpf: fix memory leak in idpf_vc_core_deinit()
- CVE-2026-23021net: usb: pegasus: fix memory leak in update_eth_regs_async()
- CVE-2026-23020net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
- CVE-2026-23019net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
- CVE-2026-23018btrfs: release path before initializing extent tree in btrfs_read_locked_inode()
- CVE-2026-23017idpf: fix error handling in the init_task on load
- CVE-2026-23016inet: frags: drop fraglist conntrack references
- CVE-2026-23015gpio: mpsse: fix reference leak in gpio_mpsse_probe() error paths
- CVE-2025-71184btrfs: fix NULL dereference on root when tracing inode eviction
- CVE-2025-71183btrfs: always detect conflicting inodes when logging inode refs
- CVE-2025-71182can: j1939: make j1939_session_activate() fail if device is no longer registered
- CVE-2025-71181rust_binder: remove spin_lock() in rust_shrink_free_page()
- CVE-2025-71180counter: interrupt-cnt: Drop IRQF_NO_THREAD flag
- CVE-2026-23014perf: Ensure swevent hrtimer is properly destroyed
- CVE-2026-23013net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback
- CVE-2026-23012mm/damon/core: remove call_control in inactive contexts
- CVE-2026-23011ipv4: ip_gre: make ipgre_header() robust
- CVE-2026-23010ipv6: Fix use-after-free in inet6_addr_del().
- CVE-2026-23009xhci: sideband: don't dereference freed ring when removing sideband endpoint
- CVE-2026-23008drm/vmwgfx: Fix KMS with 3D on HW version 10
- CVE-2026-23007block: zero non-PI portion of auto integrity buffer
- CVE-2026-23006ASoC: tlv320adcx140: fix null pointer
- CVE-2026-23005x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1
- CVE-2026-23004dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()
- CVE-2026-23003ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
- CVE-2026-23002lib/buildid: use __kernel_read() for sleepable context
- CVE-2026-23001macvlan: fix possible UAF in macvlan_forward_source()
- CVE-2026-23000net/mlx5e: Fix crash on profile change rollback failure
- CVE-2026-22999net/sched: sch_qfq: do not free existing class in qfq_change_class()