Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-97600ieee802154: cc2520: fix FIFOP work use-after-free
- CVE-2026-97599ieee802154: hwsim: serialize pib updates to fix double-free
- CVE-2026-97598ipv4: fib: bound automatic table ID allocation
- CVE-2026-97597ipv6: flowlabel: cap duplicate leases per socket
- CVE-2026-97596ipvs: reject invalid states in connection template sync records
- CVE-2026-97595mac802154: fix use-after-free of sdata via queued RX frames
- CVE-2026-97594landlock: Fix use-after-free of the source's parent directory
- CVE-2026-97593iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX
- CVE-2026-97592s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm
- CVE-2026-97591s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine
- CVE-2026-97590s390/crypto: Fix missing scrub of temp buffers with PAES algorithm
- CVE-2026-97589s390/crypto: Fix wrong return code to engine in asynch callbacks
- CVE-2026-97588s390/crypto: Map EBUSY to EIO when key conversion fails repeatedly
- CVE-2026-97587perf: RISC-V: store available counter mask as bitmap
- CVE-2026-97586afs: Fix missing kunmap in afs_dir_search_bucket()
- CVE-2026-97585afs: Fix double-unmap of directory block
- CVE-2026-97584afs: Fix incorrect free in candidate cleanup in afs_lookup_server()
- CVE-2026-97583afs: Clear stale peer app data after address list changes
- CVE-2026-97582hwmon: (gpio-fan) Fix use-after-free in alarm work
- CVE-2026-97581media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity
- CVE-2026-97580media: rkvdec: bound HEVC tile loops and PPS id to the array capacity
- CVE-2026-97579media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity
- CVE-2026-97578media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer
- CVE-2026-97577media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity
- CVE-2026-97576media: v4l2-ctrls: validate HEVC tile counts
- CVE-2026-97575media: v4l2-ctrls: validate AV1 tile counts
- CVE-2026-97574bnxt_en: Don't free the live ring's TPA state on queue restart failure
- CVE-2026-97573bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset()
- CVE-2026-97572bnxt_en: Propagate RX ring init failures in bnxt_init_nic()
- CVE-2026-97571bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc()