Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-98029eth: nfp: bound the ntuple rule dump by the caller's buffer size
- CVE-2026-98028eth: nfp: drop the replaced rule from the list when reprogramming fails
- CVE-2026-98027net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size
- CVE-2026-98026net: bridge: mcast: properly convert mglist to rcu
- CVE-2026-98025net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow
- CVE-2026-98024s390/ism: folio_put() after error
- CVE-2026-98023vxlan: reject dynamic fdb entries that reference a nexthop id
- CVE-2026-98022net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations
- CVE-2026-98021net: reject oversized tx_queue_len at netlink parse time
- CVE-2026-98020pds_core: fix cmd_regs access racing BAR unmap on reset
- CVE-2026-98019bpf: mark a NULL call argument precise
- CVE-2026-98018net: mctp: i3c: serialize probe with bus removal
- CVE-2026-98017net/sched: defer qdisc freeing after failed creation
- CVE-2026-98016net/mlx5e: Fix use-after-free race in sample_restore_put()
- CVE-2026-98015net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put
- CVE-2026-98014net/mlx5: E-Switch, prevent mc_list repopulation during vport disable
- CVE-2026-98013net/sched: fq_pie: clamp quantum in change path
- CVE-2026-98012net/sched: sfq: clamp quantum in change path
- CVE-2026-98011net/sched: hhf: clamp quantum in change and init paths
- CVE-2026-98010net/sched: drr: clamp quantum in change class
- CVE-2026-98009net/sched: ets: clamp quantum in parse and fallback paths
- CVE-2026-98008net: macb: fix NULL pointer dereference on unbind with fixed-link
- CVE-2026-98007bpf: Reject non-scalar bpf_loop iteration counts
- CVE-2026-98006ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev
- CVE-2026-98005erofs: delimit inode_share cache key components
- CVE-2026-98004iommu/riscv: Serialize command queue publishing
- CVE-2026-98003iommu/amd: Do not reallocate GA log buffers on resume
- CVE-2026-98002iommu/amd: Fix ineffective error check in nested domain allocation
- CVE-2026-98001hwmon: (ltc4282) Make sure clk_init_data is fully initialized
- CVE-2026-98000hwmon: Fix potential UAF in pec_store