Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98261cifs: Fix server use-after-free in cifs_chan_skip_or_disable()
- CVE-2026-98260exec: Cleanup POSIX timers right after de_thread()
- CVE-2026-98259fs/dax: check zero or empty entry before converting xarray entry
- CVE-2026-98258posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list
- CVE-2026-98257rds: ib: use rds_conn_drop() on protocol version mismatch
- CVE-2026-98256signal: Prevent exec() race
- CVE-2026-98255tcp: exclude old ACKs from tcp fast path
- CVE-2026-98254swiotlb: use the adjusted address for the highmem page lookup
- CVE-2026-98253RDMA/ucma: Serialize join and leave on copy_to_user failure
- CVE-2026-98252RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()
- CVE-2026-98251openvswitch: avoid reallocating confirmed conntrack labels
- CVE-2026-98250nfsd: fix handling of NFSEXP_PNFS in the netlink codepath
- CVE-2026-98249arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc
- CVE-2026-98248arm64: percpu: Fix LSE operations on {8,16}-bit types
- CVE-2026-98247Bluetooth: hci_codec: validate vendor codec count length
- CVE-2026-98246Bluetooth: hci_sync: Serialize local codec list cleanup
- CVE-2026-98245btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()
- CVE-2026-98244btrfs: clear free space tree creation state on rebuild failure
- CVE-2026-98243dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3
- CVE-2026-98242dma-buf: Fix silent overflow for phys vec to sgt
- CVE-2026-98241ipv6: xfrm: use full sockets in local error paths
- CVE-2026-98240net: ip_tunnel: initialize `options_len` before referencing options
- CVE-2026-98239net: lan743x: fix RX checksum use-after-free
- CVE-2026-98238net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()
- CVE-2026-98237net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain
- CVE-2026-98236net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value
- CVE-2026-98235net/sched: act_api: release tail references on DELACTION failure
- CVE-2026-98234net/sched: hhf: cap hh_flows_limit at change time
- CVE-2026-98233net/packet: clear RX owner on VNET header error
- CVE-2026-98232scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()