Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98089bonding: alb: fix uninitialized transport header access in alb_determine_nd()
- CVE-2026-98088scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in _base_assign_reply_queues()
- CVE-2026-98087sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate
- CVE-2026-98086ALSA: ump: do not touch legacy_rmidi before it exists
- CVE-2026-98085bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge
- CVE-2026-98084bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks
- CVE-2026-98083btrfs: fix transaction use-after-free in raid stripe insertion
- CVE-2026-98082btrfs: fix the possible bioc_list memory leak during error
- CVE-2026-98081btrfs: zoned: finish active block group cleanup if call_zone_finish() fails
- CVE-2026-98080btrfs: do not force reloc root creation during qgroup_account_snapshot()
- CVE-2026-98079btrfs: zstd: fix lost wakeup when waiting for a workspace
- CVE-2026-98078ipvs: fix reversed sequence option serialization
- CVE-2026-98077netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()
- CVE-2026-98076tracing/probes: Fix use-after-free on field name/type of events with multiple probes
- CVE-2026-98075bpf: reject BPF_PSEUDO_FUNC reference to the main program
- CVE-2026-98074bonding: do not clear curr_active_slave prematurely when releasing all slaves
- CVE-2026-98073net: Remove conflicting altnames for dying netns in __dev_change_net_namespace().
- CVE-2026-98072net/rds: use wq_has_sleeper() in release_in_xmit()
- CVE-2026-98071net/rds: clear cp_flags bits individually in rds_conn_path_reset()
- CVE-2026-98070net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks()
- CVE-2026-98069net/rds: acquire the fastpath locks in rds_conn_shutdown()
- CVE-2026-98068net/rds: don't let rds_conn_shutdown() consume a concurrent drop
- CVE-2026-98067erofs: disable LZ4 rolling decompression for now
- CVE-2026-98066ALSA: caiaq: Fix potential double-free at error path
- CVE-2026-98065bpf: Reject key-less BTF for hash maps
- CVE-2026-98064bpf: Fix NULL-ptr-deref when showing a void BTF type
- CVE-2026-98063bpf: Fix NULL-ptr-deref in btf_var_show()
- CVE-2026-98062bpf: Mark signal tracepoint siginfo arguments as scalar
- CVE-2026-98061bpf: Reject tail calls directly from callback frames
- CVE-2026-98060bpf: Reject resilient lock operations in rbtree callbacks