Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98171smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs
- CVE-2026-98170smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()
- CVE-2026-98169smb: client: fix potential OOB read in smb3_enum_snapshots()
- CVE-2026-98168smb: client: fix reparse buffer bounds in cifs_query_reparse_point()
- CVE-2026-98167smb: client: fix server->total_read for compound encrypted PDUs
- CVE-2026-98166drm/ttm: fix swapped-out resources never leaving their bulk_move range
- CVE-2026-98164KVM: x86/mmu: Check write tracking in all address spaces
- CVE-2026-98163cgroup: Avoid iteration of dying tasks with zero refcount
- CVE-2026-98162smb/server: fix tree connection leak in smb2_tree_connect()
- CVE-2026-98161nvdimm: pmem: keep PREFLUSH before data writes
- CVE-2026-98160staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init()
- CVE-2026-100079usb: typec: ucsi: unregister debugfs entries on teardown
- CVE-2026-100078wifi: iwlwifi: mei: pass correct argument to function
- CVE-2026-100077drm/msm: Recover HW before retire hung submit
- CVE-2026-100076staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths
- CVE-2026-100075RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters
- CVE-2026-100074bpf: Mark bpf_refcount field as unique
- CVE-2026-100073ext4: fix transaction overflow during writeback
- CVE-2026-100072ACPI: platform: Use acpi_bus_get_primary_device()
- CVE-2026-100071net: hsr: free learned nodes on device setup failure
- CVE-2026-100070netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet
- CVE-2026-98159wifi: mt76: mt7921: validate CLC firmware records
- CVE-2026-98158ppp_async: drop the errored frame instead of resetting its headroom
- CVE-2026-98157EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation
- CVE-2026-98156drm/virtio: use the DMA API for resource backing on Xen
- CVE-2026-98155accel/qaic: Address potential out-of-bounds read in resp_worker()
- CVE-2026-98154nvme-rdma: fix -EIO cleanup order in queue_rq
- CVE-2026-98153nvme: fix racy access to FDP placement id array
- CVE-2026-98152nvmet-rdma: fix queue leak when connect backlog is exceeded
- CVE-2026-98151bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic