Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98351wifi: virt_wifi: free skb when disconnected
- CVE-2026-98350wifi: brcmfmac: cyw: pass PMKID to firmware if present
- CVE-2026-98349wifi: libipw: reject too-short beacon and probe responses
- CVE-2026-98348wifi: libipw: reject too-short association responses
- CVE-2026-98347IB/IPoIB: Avoid restoring OPER_UP after multicast flush
- CVE-2026-98346wifi: cfg80211: don't get the radio mask for netdev-less wdevs
- CVE-2026-98345wifi: cfg80211: check IP header size in cfg80211_classify8021d()
- CVE-2026-98344dmaengine: Fix device kref underflow in dma_chan_put()
- CVE-2026-98343dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()
- CVE-2026-98342dmaengine: wait for RCU readers before releasing dma_device
- CVE-2026-98341wifi: cfg80211: don't free driver-owned scan requests
- CVE-2026-98340wifi: cfg80211: only group hidden BSSes with beacon entries
- CVE-2026-98339wifi: cfg80211: don't filter by BSS type when removing stale entries
- CVE-2026-98338wifi: cfg80211: ibss: ref BSS entry for joined event
- CVE-2026-98337wifi: mac80211: don't start a ROC while scanning
- CVE-2026-98336wifi: mac80211: don't offload TC setup on AP_VLAN interfaces
- CVE-2026-98335wifi: mac80211: abort chanswitch when leaving a mesh
- CVE-2026-98334wifi: mac80211: reset state when starting AP fails
- CVE-2026-98333wifi: mac80211: reset the LED state when ifup fails
- CVE-2026-98332wifi: mac80211: only operate on TDLS peers in the TDLS code
- CVE-2026-98331wifi: mac80211: unlist vifs when their netdev is unregistered
- CVE-2026-98330wifi: cfg80211: get the wiphy out of a dying network namespace
- CVE-2026-98329wifi: mac80211: don't allow injecting frames wider than the chanctx
- CVE-2026-98328wifi: mac80211: add HE 6 GHz capability in the scan elems len
- CVE-2026-98327wifi: mac80211: mesh: reset the CSA state when leaving
- CVE-2026-98326wifi: mac80211: mesh: release the channel if start fails
- CVE-2026-98325wifi: mac80211: set up the TX info early to fix failure paths
- CVE-2026-98324dmaengine: pxa: fix double counting of the hw descriptors
- CVE-2026-98323RDMA/siw: Bound fragmented header copies by the remaining length
- CVE-2026-98322netfilter: nft_nat: fully initialise new_addr in netmap setup