Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-97570bnxt_en: Bound SW TPA IDs to prevent crashes
- CVE-2026-97569bnxt_en: Prevent queue stop with deferred completions
- CVE-2026-97568mptcp: syncookies: remember the request backup flag
- CVE-2026-97567mptcp: prevent race between disconnect() and rtx
- CVE-2026-97566mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0
- CVE-2026-97565smb: client: reject short READ responses in CIFSSMBRead()
- CVE-2026-97564smb: client: reject userspace cifs.idmap descriptions
- CVE-2026-97563smb: client: reject out-of-bounds DataOffset in CIFSSMBRead()
- CVE-2026-97562smb: client: pin DFS superblock in iterator callback
- CVE-2026-97561smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid
- CVE-2026-97560smb: client: fix one-byte OOB read in smb2_parse_native_symlink()
- CVE-2026-97559smb: client: fail DACL rewrite when the new DACL exceeds 64K
- CVE-2026-97558smb: client: fix cifsFileInfo reference leak in deferred close
- CVE-2026-97557smb: client: avoid leaking refcount in cifs_queue_oplock_break()
- CVE-2026-97556smb: client: avoid leaking refcount when cifs_sb_tlink() fails
- CVE-2026-97555smb: client: fix heap overflow in DACL owner/group rewrite
- CVE-2026-97554smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr()
- CVE-2026-97553xfs: lock the healthmon when inserting unmount event
- CVE-2026-97552xfs: initialise error in xfs_defer_finish_one()
- CVE-2026-97551xfs: initialise args->total for parent pointer updates
- CVE-2026-97550xfs: fix unit conversions in per_binval computation
- CVE-2026-97549xfs: fix under-reservation of blocks when repairing sf directories
- CVE-2026-97548xfs: fix the rtrmap and rtrefcount _maxlevels_ondisk functions
- CVE-2026-97547xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN
- CVE-2026-97546xfs: don't spin forever on zero-length dirents when salvaging them
- CVE-2026-97545xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails
- CVE-2026-97544xfs: don't leak dqacct if rhashtable insertion fails
- CVE-2026-97543xfs: destroy seen inode bitmap when we fail to add a dirpath
- CVE-2026-97542xfs: bail out on bitmap errors in xrep_agfl_fill
- CVE-2026-97541wifi: ath9k_htc: don't store usb_device_id