Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98291Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit
- CVE-2026-98290Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup
- CVE-2026-98289af_unix: Unify scc_index when finalising SCC in __unix_walk_scc().
- CVE-2026-98288net: stmmac: fix TSO header length truncation
- CVE-2026-98287pppoatm: ensure a writable skb header and linear data
- CVE-2026-98286drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown
- CVE-2026-98285net: bridge: vlan: fix bugs caused by switchdev deletion errors
- CVE-2026-98284netlink: do not free nlk->groups while lockless readers can use it
- CVE-2026-98283KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()
- CVE-2026-98282powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba
- CVE-2026-98281futex: Also allocate private hash on vfork()
- CVE-2026-98280drm/xe/i2c: Disable IRQ on unbind
- CVE-2026-98279btrfs: handle lack of space when cleaning up verity items
- CVE-2026-98278net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check
- CVE-2026-98277eth: fbnic: ring the doorbell if a burst ends in a drop
- CVE-2026-98276net: lock the socket in sock_gettstamp()
- CVE-2026-98275net: ethernet: cortina: Ack RX overrun interrupt correctly
- CVE-2026-98274net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb()
- CVE-2026-98273x86/kprobes: Fix crash when probing CS CALL instructions
- CVE-2026-98272net: mvpp2: prevent buffer overflow in page_pool allocation
- CVE-2026-98271net: skbuff: do not leave stale header offsets after pskb_carve()
- CVE-2026-98270drm/amdgpu: check ras and obj before dereference
- CVE-2026-98269btrfs: abort transaction on failure to update inode for hole punching and reflinking
- CVE-2026-98268perf: Fix null pointer access in is_include_guest_event()
- CVE-2026-982679p: Fix v9fs_issue_write() to update i_size and remote_i_size
- CVE-2026-98266ALSA: core: Fix potential UAF after asynchronous card release
- CVE-2026-98265ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity
- CVE-2026-98264ALSA: virtio: reset device before deleting virtqueues
- CVE-2026-98263ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type
- CVE-2026-98262ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY