Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98321netfilter: nf_nat: unregister and release hooks on error
- CVE-2026-98320netfilter: flowtable: hold reference on ct until flow is released
- CVE-2026-98319drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr
- CVE-2026-98318smb: client: validate absolute native symlink targets before NT fixups
- CVE-2026-98317neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS.
- CVE-2026-98316ALSA: bcd2000: Fix race between rawmidi and disconnect
- CVE-2026-98315ntfs: protect runlist updates with the runlist lock
- CVE-2026-98314ALSA: pcm: set timer->private_data before registering the PCM timer
- CVE-2026-98313drm/msm/dp: skip PUSH_IDLE when the link was never enabled
- CVE-2026-98312ALSA: 6fire: fix OOB write from device-reported iso length
- CVE-2026-98311wifi: virt_wifi: don't transfer operstate before register
- CVE-2026-98310drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory
- CVE-2026-98309drm/vc4: Use managed KMS polling to fix UAF on unbind
- CVE-2026-98308ALSA: hda: trace PCM open only after assigning a stream
- CVE-2026-98307wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()
- CVE-2026-98306seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation
- CVE-2026-98305net: dsa: mxl862xx: disable the stats poll on teardown
- CVE-2026-98304net: bcmgenet: restore the hardware filters on open
- CVE-2026-98303ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup
- CVE-2026-98302net: fddi: skfp: fix NULL deref when setting the MAC address while down
- CVE-2026-98301net: bridge: mst: move switchdev call outside rcu
- CVE-2026-98300tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv().
- CVE-2026-98299tcp: do not let tcp_rmem be set below 4096
- CVE-2026-98298dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg()
- CVE-2026-98297Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained
- CVE-2026-98296Bluetooth: btintel_pcie: validate TX skb length in send_sync
- CVE-2026-98295Bluetooth: coredump: Quiesce dump work on unregister
- CVE-2026-98294Bluetooth: hci_qca: Do not write to the serial port after it is closed
- CVE-2026-98293Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()
- CVE-2026-98292Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access