Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98440KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction
- CVE-2026-98439smb/server: cancel async requests when closing connection
- CVE-2026-98438mptcp: options: fix uninit-value in mptcp_write_data_fin
- CVE-2026-98437media: qcom: iris: fix runtime PM reference leaks
- CVE-2026-98436accel/amdxdna: Disable device buffer exporting
- CVE-2026-98435EDAC/altera: Use parent device for devres in altr_portb_setup()
- CVE-2026-98434sysctl: Check range in proc_dointvec_ms_jiffies_minmax
- CVE-2026-98433KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure
- CVE-2026-99999ipv4: validate checksum_start before completing checksum
- CVE-2026-98432ipv4: free inet_opt and ireq_opt after an RCU grace period
- CVE-2026-98431RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency
- CVE-2026-98430RDMA/efa: Keep admin queues alive while IRQ is registered
- CVE-2026-98429RDMA/efa: Keep EQ resources alive while IRQ is registered
- CVE-2026-98428ALSA: usb: 6fire: Avoid embedded URBs
- CVE-2026-98427net/sched: codel: bound the dropping loop per dequeue call
- CVE-2026-98426wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path
- CVE-2026-98425wifi: mac80211: don't warn when an IBSS has no channel to scan
- CVE-2026-98424wifi: cfg80211: undo netns switch if renaming the wiphy fails
- CVE-2026-98423wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping
- CVE-2026-98422wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown
- CVE-2026-98421wifi: mac80211: require a peer station for TDLS setup confirm
- CVE-2026-98420ksmbd: follow SMB2 session expiration semantics
- CVE-2026-98419drop_monitor: fix out-of-bounds write in reset_per_cpu_data()
- CVE-2026-98418sched/core: Avoid false migration warning for proxy donors
- CVE-2026-98417net: xfrm: reject unrepresentable espintcp transport headers
- CVE-2026-98416dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()
- CVE-2026-98415soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node
- CVE-2026-98414memcg: avoid charging the root memcg from obj_cgroup_charge_pages()
- CVE-2026-98413selinux: always fill AVC decision in avc_has_perm_noaudit()
- CVE-2026-98412power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()