Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-97938reboot: fix cad_pid use-after-free race
- CVE-2026-97937ftrace: fork: Initialize function graph state before copy_exec_state()
- CVE-2026-97936tracing: Fix memory corruption from the histogram stacktrace modifier
- CVE-2026-97935tracing: Set the trace clock before registering the histogram trigger
- CVE-2026-97934tracing: Fix memory corruption from a "STACKTRACE" histogram key
- CVE-2026-97933tracing: Take trace_array reference when opening a tracer options file
- CVE-2026-97932tracing: Don't dereference trace_event_file in deferred trigger free
- CVE-2026-97931ALSA: us122l: Prevent write upgrades for read mappings
- CVE-2026-97930ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf
- CVE-2026-97929ALSA: usbusx2y: validate URB actual_length in interrupt callback
- CVE-2026-97928drm/amdgpu: skip the VMID 0 flush for VRAM
- CVE-2026-97927ufs: create the root dentry after loading cylinder metadata
- CVE-2026-97926ufs: validate cylinder group metadata before caching it
- CVE-2026-97925tick/broadcast: Plug clockevents replacement race
- CVE-2026-97924tracing/user_events: Don't destroy fields when event removal fails
- CVE-2026-97923tracing: Free histogram the var ref when its initialization fails
- CVE-2026-97922tracing: Free histogram var refs regardless of how often they are referenced
- CVE-2026-97921tracing: Free histogram the field rejected for a bad modifier
- CVE-2026-97920tracing: Keep the entry count when the histogram stats allocation fails
- CVE-2026-97919tracing: Take the reference before publishing the named histogram trigger
- CVE-2026-97918tracing: Undo the registration when enabling the histogram trigger fails
- CVE-2026-97917accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr
- CVE-2026-97916accel/ivpu: Validate firmware log buffer metadata
- CVE-2026-97915accel/ivpu: Limit firmware log name prints to field size
- CVE-2026-97914accel: ethosu: Fix ethosu_job_open() return value
- CVE-2026-97913accel: ethosu: Ensure cmd stream ends with a stop op
- CVE-2026-97912accel: ethosu: Ensure SRAM size is 0 on mapping failure
- CVE-2026-97911accel: ethosu: Ensure SRAM region size matches job
- CVE-2026-97910ASoC: sprd: validate compress buffer sizes against fixed allocations
- CVE-2026-97909ASoC: sti: initialize IRQ lock before requesting IRQ