Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-97510thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response()
- CVE-2026-97509thunderbolt: Keep XDomain reference during the lifetime of a service
- CVE-2026-97508thunderbolt: Set tb->root_switch to NULL when domain is stopped
- CVE-2026-97507media: dm1105: fix missing error check for dma_alloc_coherent
- CVE-2026-97506crypto: ixp4xx - fix buffer chain unwind on allocation failure
- CVE-2026-97505PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store()
- CVE-2026-97504watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk
- CVE-2026-97503genirq/proc: Size interrupt directory names for 10-digit interrupt numbers
- CVE-2026-97502mmc: davinci: avoid NULL deref of host->data in IRQ handler
- CVE-2026-97501pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction
- CVE-2026-97500wifi: rtw89: phy: check length before parsing PHY status IE
- CVE-2026-97499coresight: perf: Retrieve path and source from event data
- CVE-2026-97498drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction
- CVE-2026-97497drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id
- CVE-2026-97496drm/amdkfd: Fix OOB memory exposure in get_wave_state()
- CVE-2026-97495drm/amdkfd: Check bounds on allocate_doorbell
- CVE-2026-97494drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw
- CVE-2026-97493drm/amdgpu: Bound GPIO I2C table entry count from VBIOS
- CVE-2026-97492wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed
- CVE-2026-97491net/rds: Don't sleep inside rds_ib_conn_path_shutdown
- CVE-2026-97490affs: handle set_blocksize failures
- CVE-2026-97489bfs: handle set_blocksize failures
- CVE-2026-97488qnx4: handle set_blocksize failures
- CVE-2026-97487jfs: handle set_blocksize failures
- CVE-2026-97486hpfs: handle set_blocksize failures
- CVE-2026-97485omfs: handle set_blocksize failures
- CVE-2026-97484usbip: vhci_hcd: fix NULL deref in status_show_vhci
- CVE-2026-97483usb: core: hcd: fix possible deadlock in rh control transfers
- CVE-2026-97482usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log
- CVE-2026-97481serial: 8250: fix possible ISR soft lockup