Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98120netfs: Fix subreq ref leak
- CVE-2026-98119netfs: break unbuffered write when netfs_alloc_subrequest() fails
- CVE-2026-98118netfs: Fix readahead synchronisation issues by loading all folios upfront
- CVE-2026-98117cachefiles: Fix potential UAF/KASAN warning
- CVE-2026-98116ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF
- CVE-2026-98115ksmbd: safely drain sessions during logoff
- CVE-2026-98114ksmbd: propagate DACL parsing errors
- CVE-2026-98113ksmbd: rate limit unmapped SID errors
- CVE-2026-98112ksmbd: fix listener task lifetime on netdev events
- CVE-2026-98111Bluetooth: btintel: validate version TLV value lengths
- CVE-2026-98110Bluetooth: btintel: bound firmware ID by TLV length
- CVE-2026-98109Bluetooth: hci_core: Fix race condition during device registration
- CVE-2026-98108Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan
- CVE-2026-98107Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect
- CVE-2026-98106drm/pagemap: Prevent double migration of device pages
- CVE-2026-98105net: ethernet: oa_tc6: Improve the error recovery
- CVE-2026-98104net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted
- CVE-2026-98103igmp: convert struct ip_sf_list to RCU
- CVE-2026-98102ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src()
- CVE-2026-98101ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source()
- CVE-2026-98099ipv6: mcast: use rcu_assign_pointer() for __rcu list updates
- CVE-2026-98098tipc: fix NULL deref in tipc_named_node_up() on empty publication list
- CVE-2026-98097tipc: Dont send random pad bytes in RESET/ACTIVATE messages
- CVE-2026-98096ipv6: sr: restore network header before routing and forwarding
- CVE-2026-98095af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header().
- CVE-2026-98094staging: fbtft: make dirty_lock IRQ-safe
- CVE-2026-98093ASoC: fsl_micfil: balance mclk enable/disable
- CVE-2026-98092ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close()
- CVE-2026-98091btrfs: detach failed sprout device from transaction update list
- CVE-2026-98090btrfs: restore active device pointers after failed sprout