Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98201Input: zero ff_effect before compat copy in input_ff_effect_from_user
- CVE-2026-98200hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show()
- CVE-2026-98199hwmon: (pmbus/core) increase number of phases and add new mask
- CVE-2026-98198hwmon: (pwm-fan) Stop RPM timer before freeing tach data
- CVE-2026-98197hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove
- CVE-2026-98196wifi: brcmsmac: fix UAF in brcms_free_timer()
- CVE-2026-98195wifi: iwlegacy: fix broadcast stations deallocation
- CVE-2026-98194wifi: libertas_tf: fix UAF in lbtf_free_adapter()
- CVE-2026-98193wifi: libipw: reject TKIP frames without a full MIC
- CVE-2026-98192wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown
- CVE-2026-98191wifi: wlcore: release runtime PM ref on regdomain config failure
- CVE-2026-98190wifi: wilc1000: fix out-of-bounds read in P2P public action frames
- CVE-2026-98189wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()
- CVE-2026-98188wifi: p54: validate curve data length in the calibration curve converters
- CVE-2026-98187wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST
- CVE-2026-98186wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length
- CVE-2026-98185wifi: mwifiex: validate scan response extents
- CVE-2026-98184wifi: mwifiex: prevent authentication frame length truncation
- CVE-2026-98183wifi: mac80211: avoid out-of-bounds read for empty PREQ elements
- CVE-2026-98182wifi: mac80211: refuse to make a monitor active when it has no queue
- CVE-2026-98181drm/gud: fix out-of-bounds write in gud_plane_atomic_check()
- CVE-2026-98180drm/msm: RCU-free the scheduler-containing ring and VM objects
- CVE-2026-98179drm/amdgpu: fix rmmio iounmap skipped on device removal
- CVE-2026-98178drm/amdgpu: Skip KFD mapping clear before initialization
- CVE-2026-98177drm/amdkfd: Avoid integer underflow in EOP ring size calculation.
- CVE-2026-98176drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc
- CVE-2026-98175smb: client: cancel reconnect work in clean_demultiplex_info()
- CVE-2026-98174smb: client: fix rlist race and missing initialization
- CVE-2026-98173smb: client: fix use-after-free of iface in cifs_try_adding_channels()
- CVE-2026-98172smb: client: fix smbd_connection leak on cifs_get_tcp_session() error