Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98059bpf: Mark sched_process_wait argument as nullable
- CVE-2026-98058bpf: Mark syscall helpers as sleepable
- CVE-2026-98057ring-buffer: Add checking nr_subbufs to persistent ring buffer validation
- CVE-2026-98056nvme: remove stale namespaces by NSID range during scan
- CVE-2026-98055ASoC: Intel: avs: Clean up the bus when fetching ML caps fails
- CVE-2026-98054ASoC: Intel: avs: Fix unbalanced module reference count
- CVE-2026-98053ASoC: Intel: avs: Refactor and fix init_config access
- CVE-2026-98052net: bcmasp: clear txcb->last before writing each descriptor
- CVE-2026-98051net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times
- CVE-2026-98050mlxsw: spectrum_ptp: Fix napi_gro_receive() call from GC workqueue context
- CVE-2026-98049bpf: zero extend the result of an arena 32-bit cmpxchg
- CVE-2026-98048bpf: don't rewrite bpf_fastcall patterns entered by a jump
- CVE-2026-98047bpf: Check ancestor frames for rbtree callbacks
- CVE-2026-98046bpf: Mark bpf_btf_find_by_name_kind() as sleepable
- CVE-2026-98045bpf: Mark faultable stack helpers as sleepable
- CVE-2026-98044bpf: Reject legacy packet loads from callbacks
- CVE-2026-98043bpf: Don't infer non-NULL from a pointer with an unbounded offset
- CVE-2026-98042bpf: Don't resurrect a scalar id dropped by collect_linked_regs()
- CVE-2026-98041bpf: Don't predict JMP32 pointer vs zero comparisons
- CVE-2026-98040bpf: Mark the zero register precise for a register-form NULL check
- CVE-2026-98039bpf: Require MEM_PERCPU for percpu kptr stores
- CVE-2026-98038bpf: Keep refcount_acquire nullable for borrowed RCU kptrs
- CVE-2026-98037bpf: Reject untrusted allocated-object pointers
- CVE-2026-98036bpf: Preserve special fields in recycled rhtab elements
- CVE-2026-98035bpf: Cancel special fields when recycling rhtab elements
- CVE-2026-98034bpf: Mark NULL kptr stores precise
- CVE-2026-98033bpf: Preserve inner map identity in callback frames
- CVE-2026-98032tracing: Fix subbuf resize races with trace_pipe_raw readers
- CVE-2026-98031nexthop: Initialize extack in remove_nh_grp_entry()
- CVE-2026-98030net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size