Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-97908Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev
- CVE-2026-97907Bluetooth: btrtl: Don't leak return code when parsing firmware format v2
- CVE-2026-97906bootconfig: Fix integer overflow in initrd size check
- CVE-2026-97905cpufreq: zero-initialize policy cpumask before sysfs publication
- CVE-2026-97904cpufreq: initialize policy rwsem before sysfs publication
- CVE-2026-97903exit: hold a reference to thread_pid across proc_flush_pid
- CVE-2026-97902fs: don't return -EINVAL for successful nested thaw
- CVE-2026-97901genetlink: pin family module during policy dump
- CVE-2026-97900drm/drm_exec: fix up contended obj when num_objects is 0
- CVE-2026-97899drm/i915: Fix memory leak in query_perf_config_list()
- CVE-2026-97621drm/rockchip: analogix_dp: fix unchecked bound endpoint name length
- CVE-2026-97620drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches
- CVE-2026-97619io_uring/rw: end write accounting from ->ki_complete
- CVE-2026-97617ring-buffer: Check resize_disabled before publishing the new subbuf order
- CVE-2026-97616net/sched: act_api: release all action references on NEWACTION failure
- CVE-2026-97615net: bridge: use option bits for CFM/MRP frame handlers
- CVE-2026-97614net: dsa: tag_brcm: legacy FCS: request needed tailroom
- CVE-2026-97613net: mana: Reserve extra CQ slot for the fence completion CQE
- CVE-2026-97612net: mpls: clear inner_protocol when the last label is popped
- CVE-2026-97611net: openvswitch: fix use-after-free of the flow table mask array
- CVE-2026-97610netfs: Fix uninitialized return value in netfs_unbuffered_write()
- CVE-2026-97609netfilter: cttimeout: prevent UAF during module unload
- CVE-2026-97608netfilter: nf_log: unregister loggers before per-net teardown
- CVE-2026-97607vdpa: ifcvf: Put device on unsupported feature error
- CVE-2026-97606fs: autofs: fix memory leak in autofs_fill_super()
- CVE-2026-97605erofs: preserve LZMA decoders on resize failure
- CVE-2026-97604fbdev: vfb: defer cleanup until the last reference
- CVE-2026-97603idpf: disable DIM work before freeing q_vectors
- CVE-2026-97602inet: frags: invalidate queues before flushing them
- CVE-2026-97601ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink