Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98500HID: hid-oxp: use cancel_delayed_work_sync() in remove
- CVE-2026-98499HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()
- CVE-2026-98498net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()
- CVE-2026-98497net/mlx5e: fix swapped IPv6 IPsec policy masks
- CVE-2026-98496net: airoha: npu: cancel wdt_work after releasing the WDT IRQ
- CVE-2026-98495net: arp: terminate device name before lookup
- CVE-2026-98494net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read
- CVE-2026-98493net: ipconfig: bound DHCP option construction
- CVE-2026-98492net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths
- CVE-2026-98491net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry
- CVE-2026-98490net: openvswitch: conntrack: fix helper UAF due to extensions realloc
- CVE-2026-98489net: atl1c: fix soft lockup on out-of-range tpd_cons read
- CVE-2026-98488net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read
- CVE-2026-98487net: bridge: mdb: restart port group walk after deletion
- CVE-2026-98486net: ena: fix MMIO read buffer leak on probe failure
- CVE-2026-98485netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read
- CVE-2026-98484netfilter: nf_tables: skip expired catchall elements on insert and delete
- CVE-2026-98483nfc: fix use-after-free in nfc_get_local_general_bytes
- CVE-2026-98482nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()
- CVE-2026-98481nfc: port100: reject frames whose declared length exceeds the received data
- CVE-2026-98480nfc: trf7970a: power down on startup RX gain failure
- CVE-2026-98479scsi: libiscsi_tcp: Check the data direction of a Data-In PDU
- CVE-2026-98478scsi: ufs: core: Keep internal commands dispatchable during error handling
- CVE-2026-98477perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()
- CVE-2026-98476s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()
- CVE-2026-98475s390/cmf: Fix virtual vs physical address confusion
- CVE-2026-98474s390/pci: Fix missing device lock in zpci_report_status()
- CVE-2026-98473s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config
- CVE-2026-98472KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV
- CVE-2026-98471KVM: SEV: Do cache maintenance on the source VM during intra-host migration