Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-97968hwmon: (corsair-cpro) Create debugfs entries after hwmon registration
- CVE-2026-97967hwmon: (corsair-cpro) Remove debugfs entries when probe fails
- CVE-2026-97966octeontx2-pf: reset HTB scheduler topology before freeing queues
- CVE-2026-97965vxlan: initialize _md in vxlan_xmit_one()
- CVE-2026-97964ppp_synctty: ensure a writeable skb header
- CVE-2026-97963net: stmmac: initialize ptp_lock at probe time
- CVE-2026-97962net/mlx5e: Move representor vnic reporter to eswitch devlink port
- CVE-2026-97961perf/core: Allow list_del during perf_event_overflow()
- CVE-2026-97960perf/x86/intel: Prevent drain_pebs() reentry
- CVE-2026-97959net/sched: cls_route: free emptied bucket on filter move
- CVE-2026-97958net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain().
- CVE-2026-97957net: hinic: fix mailbox segment buffer overflow
- CVE-2026-97956net: net_failover: Fix the deadlock in net_failover_slave_name_change()
- CVE-2026-97955net: mana: restore the XDP program pointer when pre-allocation fails
- CVE-2026-97954net/rds: fix tcp stream corruption with large pages
- CVE-2026-97953net: stmmac: fix TX descriptor availability check for TSO traffic
- CVE-2026-97952sunvdc: unmap LDC cookies when the descriptor send fails
- CVE-2026-97951scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands
- CVE-2026-97950configfs: pin the symlink target's dirent instead of chasing ->ci_dentry
- CVE-2026-97949configfs: unhash the dentry before dropping the item in rmdir
- CVE-2026-97948powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver
- CVE-2026-97947x86/amd_node: Fix potential NULL pointer dereference
- CVE-2026-97946x86/amd_node: Fix PCI device reference counting in amd_smn_init()
- CVE-2026-97945x86/mm: Fix user-space data loss with MADV_FREE and THP
- CVE-2026-97944x86/cfi: Fix FineIBT hash offset in cfi_get_func_hash()
- CVE-2026-97943x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF
- CVE-2026-97942x86/alternatives: Exclude text poking against change_page_attr()
- CVE-2026-97941mm/slab: take n->list_lock in __slab_try_return_freelist() to avoid race
- CVE-2026-97940ipv6: fix fib6 walker UAF on seq stop
- CVE-2026-97939ipmr: account multicast table and route memory