Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98381veth: manage XDP program pointers during channel resize
- CVE-2026-98380net/sched: reject IDR error pointers when deleting actions
- CVE-2026-98379netfilter: ip6t_rpfilter: reject routes without inet6_dev
- CVE-2026-98378bpf: Skip unsettled links in link iterator
- CVE-2026-98377vlan: require the MAC header to be present in __vlan_insert_inner_tag()
- CVE-2026-98376bpf: Use array_map_meta_equal for percpu array inner map replacement
- CVE-2026-98375xen/netfront: drop RX packets with a short Ethernet header
- CVE-2026-98374tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()
- CVE-2026-98373mm/hugetlb: preserve mremap address delta when skipping page tables
- CVE-2026-98372xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk()
- CVE-2026-98371xfrm: iptfs: fix runt reassembly panic from short inner tot_len
- CVE-2026-98370xfrm: fix compat ALLOCSPI request use-after-free
- CVE-2026-98369xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()
- CVE-2026-98368esp: downgrade zerocopy managed frags before mutating skb frags
- CVE-2026-98367RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept
- CVE-2026-98366RDMA/rxe: validate access flags before swapping the MR's PD
- CVE-2026-98365RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access
- CVE-2026-98364xfrm: hold net_device reference under RCU in bundle creation
- CVE-2026-98363firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS
- CVE-2026-98362clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate
- CVE-2026-98361RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths
- CVE-2026-98360RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds
- CVE-2026-98359RDMA/core: Reject unregistering netdevs in ib_get_eth_speed
- CVE-2026-98358IB/iser: reject a remote invalidation of an unregistered direction
- CVE-2026-98357IB/isert: wait for deferred control PDU completions before releasing the connection
- CVE-2026-98356RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup
- CVE-2026-98355RDMA/rtrs: guard against null kobj name
- CVE-2026-98354RDMA/mad: Fix receive buffer leak when PKey enforcement fails
- CVE-2026-98353RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables
- CVE-2026-98352RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted