Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-97540net: usb: pegasus: don't rely on id table pointer arithmetic
- CVE-2026-97539usb: xusbatm: don't rely on id table pointer arithmetic
- CVE-2026-97538hwmon: (asus_rog_ryujin) Validate HID report lengths
- CVE-2026-97537scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking
- CVE-2026-97536scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown
- CVE-2026-97535scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size
- CVE-2026-97534f2fs: accurately adjust free_sections during free_segment_range
- CVE-2026-97533x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF
- CVE-2026-97532scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path
- CVE-2026-97531scsi: qla2xxx: Skip vport under deletion in report ID acquisition
- CVE-2026-97530scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature
- CVE-2026-97529scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[]
- CVE-2026-97528scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error
- CVE-2026-97527scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock
- CVE-2026-97526s390/pai: Support CPU hotplug for PMU PAI
- CVE-2026-97525x86/mm/pat: Allocate split page tables as kernel page tables
- CVE-2026-97524mptcp: avoid unneeded actions on subflow reset
- CVE-2026-97523mptcp: close race between scheduler and state change
- CVE-2026-97522mptcp: fix bad accounting in __mptcp_subflow_push_pending()
- CVE-2026-97521gfs2: fix quota init duplicate scan
- CVE-2026-97520gfs2: move quota_init qc iterator increment
- CVE-2026-97519drm/xe: Fix null pointer dereference in devcoredump cleanup
- CVE-2026-97518wifi: cfg80211: reject duplicate wiphy cipher suite entries
- CVE-2026-97517wifi: nl80211: reject beacons with bad HE operation
- CVE-2026-97516wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result()
- CVE-2026-97515i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845
- CVE-2026-97514media: chips-media: wave5: Fix Reports from Kernel Lock Validator
- CVE-2026-97513media: chips-media: wave5: Release m2m_ctx after Instance Removed from List
- CVE-2026-97512spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM
- CVE-2026-97511wifi: mac80211: avoid out-of-bounds access in monitor