Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-99161i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()
- CVE-2026-99160ring-buffer: Do not show buffer_meta for CPUs without a buffer
- CVE-2026-99159ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx()
- CVE-2026-99158ring-buffer: Fix false warning in ring_buffer_map_get_reader()
- CVE-2026-99157scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies
- CVE-2026-99156scsi: st: Fix use-after-free race between st_remove() and st_open()
- CVE-2026-99155scsi: xen/scsifront: Check for a NULL shadow entry on a backend response
- CVE-2026-99154scsi: libiscsi: Reject a negative task index from parse_pdu_itt
- CVE-2026-99153scsi: libiscsi: Validate the ITT reflected in a Reject PDU
- CVE-2026-99152scsi: libiscsi: Validate the task named by a management response
- CVE-2026-99151drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions
- CVE-2026-99150drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr
- CVE-2026-99149drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl
- CVE-2026-99148drm/amdgpu: keep the eviction fence until the last handle is closed
- CVE-2026-99147drm/exec: don't immediately add prelocked obj to array of locked objs
- CVE-2026-99146drm/i915/dmc: Add sanity check for DMC load address
- CVE-2026-99145drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state change
- CVE-2026-99144sched_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue
- CVE-2026-99143tracing: Keep the predicate limit separate from program capacity
- CVE-2026-99142tracing: Check operator stack capacity before pushing
- CVE-2026-99141tracing: Fix crash in print_graph_function_event()
- CVE-2026-99140tracing: Fix hist trigger timestamps for buffered events
- CVE-2026-99139tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)
- CVE-2026-99138tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)
- CVE-2026-99137cifs: don't update i_size in cifs_do_truncate without a cached handle
- CVE-2026-99136dm-crypt: fix a tiny race condition in crypt_dec_pending
- CVE-2026-99135dm-integrity: fix infinite loop on discard with large tag size
- CVE-2026-99134mac802154: fix data race and NULL deref on local->assoc_dev
- CVE-2026-99133net/iucv: fix the recvmsg window update
- CVE-2026-99132xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf