Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98470KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode
- CVE-2026-98469KVM: arm64: Fix AArch32 DBGBXVR<n> handling
- CVE-2026-98468KVM: arm64: Fix spurious warning for benign stage 2 teardown race
- CVE-2026-98467KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race
- CVE-2026-98466KVM: arm64: Transfer the hyp stack pages out of the host stage-2
- CVE-2026-98465RISC-V: KVM: Serialize IMSIC attributes with vCPU migration
- CVE-2026-98464RISC-V: KVM: Synchronize hrtimer callback during teardown
- CVE-2026-98463sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags
- CVE-2026-98462Bluetooth: hci_conn: fix CIS hold ownership on reuse
- CVE-2026-98461Bluetooth: hci_sock: validate event length before filtering
- CVE-2026-98460Bluetooth: hci_sock: reject out-of-range OCF values
- CVE-2026-98459Bluetooth: ISO: balance the parent hold in hci_bind_bis()
- CVE-2026-98458Bluetooth: ISO: release unused CIS holds after channel attach
- CVE-2026-98457Bluetooth: L2CAP: validate frame length before control and FCS access
- CVE-2026-98456Bluetooth: mgmt: fix race in read_unconf_index_list()
- CVE-2026-98455Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO
- CVE-2026-98454smb: client: fix create context out-of-bounds reads
- CVE-2026-98453smb: client: close handle after create-context parsing failure
- CVE-2026-98452smb: client: clean up failed cached directory opens
- CVE-2026-98451smb: client: use finish_no_open() for non-regular inodes
- CVE-2026-98450smb: client: close completed creates on compound wait errors
- CVE-2026-98449smb: client: delete compound mids on send failure before unlock
- CVE-2026-98448xfs: release orphanage dir inode if chown fails
- CVE-2026-98447xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots
- CVE-2026-98446xfs: don't let hidden_space go negative in xfs_metafile_resv_init
- CVE-2026-98445xfs: don't let memory failures leak blocks and kill repairs
- CVE-2026-98444xfs: drop dquot flush lock when we can't find a buffer to flush
- CVE-2026-98443xfs: fix cursor and pointer handling when recovering iunlink buckets
- CVE-2026-98442net/sched: act_ct: fix helper UAF due to extensions realloc
- CVE-2026-98441net/sched: act_ct: avoid modifying shared unconfirmed ct entry