Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98231xfrm: serialize state GC with device state flush
- CVE-2026-98230xfrm: use hlist_del_init_rcu for state_cache and state_cache_input
- CVE-2026-98229xfrm: save input state data before secpath resets
- CVE-2026-98228mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ
- CVE-2026-98227memstick: ms_block: destroy io_queue workqueue on removal
- CVE-2026-98226mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count
- CVE-2026-98225mm/shrinker: fix bogus set_shrinker_bit() with cgroup.memory=nokmem
- CVE-2026-98224mm/vma: correctly unaccount on mmap_prepare() failure
- CVE-2026-98223mm: filemap: retain mapped dropbehind folios
- CVE-2026-98222KEYS: encrypted: fix integer overflow of datablob_len
- CVE-2026-98221KEYS: trusted: Fix tpm2_load_cmd() boundary check
- CVE-2026-98220sched_ext: Fix NULL sched deref in kfunc sub-sched error paths
- CVE-2026-98219sched_ext: Close the pre-enable ops error claim window
- CVE-2026-98218i2c: atr: fix dangling adapter pointer on add failure
- CVE-2026-98217IB/mlx4: Fix use-after-free on pkey sysfs registration failure
- CVE-2026-98216IB/hfi1: Fix the PIO_CRED credit-return mmap
- CVE-2026-98215selinux: preserve user SID across nested backing files
- CVE-2026-98214selinux: recheck intermediate backing files on mprotect()
- CVE-2026-98213mmc: core: Cancel SDIO IRQ work before freeing host
- CVE-2026-98212mmc: hsq: Fix use-after-free in retry work
- CVE-2026-98211mmc: mmci: Fix use-after-free in busy-timeout work
- CVE-2026-98210mmc: mxcmmc: cancel data work and watchdog on remove
- CVE-2026-98209mmc: sdhci-of-aspeed: Remove children before releasing SDC resources
- CVE-2026-98208mmc: sdio_uart: fix xmit_fifo leak when the port table is full
- CVE-2026-98207mmc: spi: reset bytes_xfered before retrying CRC failures
- CVE-2026-98206Input: cyttsp5 - clamp the HID report size before memcpy
- CVE-2026-98205Input: evdev - zero absinfo before partial copy in EVIOCSABS
- CVE-2026-98204Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()
- CVE-2026-98203Input: soc_button_array - check btns_desc->package.count
- CVE-2026-98202Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound