Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-22998nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
- CVE-2026-22997net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts
- CVE-2026-22996net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv
- CVE-2025-71163dmaengine: idxd: fix device leaks on compat bind and unbind
- CVE-2025-71162dmaengine: tegra-adma: Fix use-after-free
- CVE-2026-22995ublk: fix use-after-free in ublk_partition_scan_work
- CVE-2026-22994bpf: Fix reference count leak in bpf_prog_test_run_xdp()
- CVE-2026-22993idpf: Fix RSS LUT NULL ptr issue after soft reset
- CVE-2026-22992libceph: return the handler error from mon_handle_auth_done()
- CVE-2026-22991libceph: make free_choose_arg_map() resilient to partial allocation
- CVE-2026-22990libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
- CVE-2026-22989nfsd: check that server is running in unlock_filesystem
- CVE-2026-22988arp: do not assume dev_hard_header() does not change skb->head
- CVE-2026-22987net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy
- CVE-2026-22986gpiolib: fix race condition for gdev->srcu
- CVE-2026-22985idpf: Fix RSS LUT NULL pointer crash on early ethtool operations
- CVE-2026-22984libceph: prevent potential out-of-bounds reads in handle_auth_done()
- CVE-2026-22983net: do not write to msg_get_inq in callee
- CVE-2026-22982net: mscc: ocelot: Fix crash when adding interface under a lag
- CVE-2026-22981idpf: detach and close netdevs while handling a reset
- CVE-2026-22980nfsd: provide locking for v4_end_grace
- CVE-2026-22979net: fix memory leak in skb_segment_list for GRO packets
- CVE-2026-22978wifi: avoid kernel-infoleak from struct iw_point
- CVE-2025-71161dm-verity: disable recursive forward error correction
- CVE-2025-71160netfilter: nf_tables: avoid chain re-validation if possible
- CVE-2025-71159btrfs: fix use-after-free warning in btrfs_get_or_create_delayed_node()
- CVE-2025-71158gpio: mpsse: ensure worker is torn down
- CVE-2025-71157RDMA/core: always drop device refcount in ib_del_sub_device_and_put()
- CVE-2025-71156gve: defer interrupt enabling until NAPI registration
- CVE-2025-71155KVM: s390: Fix gmap_helper_zap_one_page() again