Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98150bpf: Fix BPF_F_CPU validation for sparse CPU IDs
- CVE-2026-98149bpf: Fix percpu map update indexing with sparse CPU IDs
- CVE-2026-98148drm/gud: validate GUD_ROTATION_0 is present in supported rotations
- CVE-2026-98147printk: Don't WARN on kthread_run failure.
- CVE-2026-98146accel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain
- CVE-2026-98145accel/amdxdna: reject a command chain that carries no commands
- CVE-2026-98144accel/amdxdna: put the chained BO when its mapping fails
- CVE-2026-98143accel: ethosu: Don't read the U65 rounding mode as a storage mode
- CVE-2026-98142drm/cirrus-qemu: Validate BAR0 size during probe
- CVE-2026-98141ntfs: propagate reparse index insertion failure
- CVE-2026-98140ntfs: fix kmap_local leak in write_mft_record_nolock() error paths
- CVE-2026-98139ntfs: only count successfully cleared runs when freeing clusters
- CVE-2026-98138ntfs: do not mark the volume clean in sync_fs when errors were recorded
- CVE-2026-98137ntfs: treat any nonzero dio zero-range return as an error
- CVE-2026-98136ntfs: bound $AttrDef table walk to the loaded table size
- CVE-2026-98135ntfs: reject invalid sectors_per_cluster in the boot sector
- CVE-2026-98134bpf: check_cond_jmp_op(): properly infer if register is null
- CVE-2026-98133ntfs: leave HasEA flag untouched on setxattr failure
- CVE-2026-98132bpf: don't downgrade half-dead scalar zero spills to STACK_ZERO
- CVE-2026-98131net: stmmac: fix dma mapping leak in stmmac_tso_xmit()
- CVE-2026-98130sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START
- CVE-2026-98129scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add()
- CVE-2026-98128scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add()
- CVE-2026-98127smb/client: validate new EOF for insert range
- CVE-2026-98126smb/client: validate new EOF for zero range
- CVE-2026-98125smb/client: fix stale page cache in insert/collapse range
- CVE-2026-98124smb/client: invalidate fscache for fallocate range operations
- CVE-2026-98123sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration
- CVE-2026-98122vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del()
- CVE-2026-98121watchdog: msc313e: Fix NULL pointer dereference in PM callbacks