Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-97998netfilter: nfnetlink_log: cope with concurrent instance destruction
- CVE-2026-97997virtio_ring: fix stale descriptor flags after a failed packed add
- CVE-2026-97996virtio: fix use-after-free in unregister_virtio_device()
- CVE-2026-97995virtio_console: do not free control-out buffers on remove
- CVE-2026-97994vhost/vdpa: reject VRING_NUM larger than device max
- CVE-2026-97993vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx
- CVE-2026-97992vhost-vdpa: protect config_ctx from being freed under the config callback
- CVE-2026-97991vdpa_sim_blk: reject out-of-range sector starts
- CVE-2026-97990vdpa_sim_net: check TX pull result before RX copy
- CVE-2026-97989vduse: validate virtqueue alignment
- CVE-2026-97988vhost: invalidate vring access on IOTLB transitions
- CVE-2026-97987virtio_input: reset device if input_register_device() fails
- CVE-2026-97986virtio_input: stop callbacks before unregistering input device
- CVE-2026-97985af_unix: Update last skb marker in manage_oob().
- CVE-2026-97984net: ipv6: Fix UDP length overflow with PMTU discover and big MTU
- CVE-2026-97983vduse: return compat ioctl results directly
- CVE-2026-97982net: ethernet: cortina: Fix budget accounting
- CVE-2026-97981net: ethernet: cortina: Count dropped frames as NAPI work
- CVE-2026-97980s390/debug: Fix NULL pointer dereference in debug_set_level()
- CVE-2026-97979ice: add missing xa_destroy for sched_node_ids
- CVE-2026-97978eth: ice: don't dereference pointers from TP_printk()
- CVE-2026-97977Bluetooth: btusb: Fix UAF of btusb_data by rx_work
- CVE-2026-97976Bluetooth: btintel_pcie: validate packet_len before skb_put_data
- CVE-2026-97975Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del()
- CVE-2026-97974ipv6: null-check fib6_node before accessing in __ip6_del_rt_siblings()
- CVE-2026-97973net: macb: destroy the phylink instance on the probe error path
- CVE-2026-97972net: macb: put the "mdio" child node reference on success
- CVE-2026-97971nstree: check listing permission before taking a namespace reference
- CVE-2026-97970watchdog: msc313e: Avoid division by zero
- CVE-2026-97969watchdog: msc313e: Fix clock leak and spurious timer in settimeout()