Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-97480tty: serial: 8250: protect against NULL uart->port.dev in register
- CVE-2026-97479driver core: Avoid warning when removing a device while its supplier is unbinding
- CVE-2026-97478virt: acrn: Fix irqfd use-after-free during eventfd shutdown
- CVE-2026-97477RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind()
- CVE-2026-97476rds: filter RDS_INFO_* getsockopt by caller's netns
- CVE-2026-97475thermal/drivers/tegra/soctherma: Switch to devm cooling device registration
- CVE-2026-97474wifi: iwlwifi: mld: purge async notifications upon nic error
- CVE-2026-97473powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked()
- CVE-2026-97472ipv6: addrconf: fix temp address generation after prefix deprecation
- CVE-2026-97456ACPICA: Fix condition check in acpi_ps_parse_loop()
- CVE-2026-97455ACPICA: Fix use-after-free in acpi_ds_terminate_control_method()
- CVE-2026-97454ACPICA: add boundary checks in acpi_ps_get_next_field()
- CVE-2026-97453ACPICA: validate byte_count in acpi_ps_get_next_package_length()
- CVE-2026-97452ACPICA: Prevent adding invalid references
- CVE-2026-97451ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op)
- CVE-2026-97450ACPICA: validate handler object type in two places
- CVE-2026-97449ACPICA: Add package limit checks in parser functions
- CVE-2026-97448ACPICA: Add validation for node in acpi_ns_build_normalized_path()
- CVE-2026-97447ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op()
- CVE-2026-97446ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package()
- CVE-2026-97445ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources()
- CVE-2026-97444ACPICA: add boundary checks in two places
- CVE-2026-97443perf/ftrace: Fix WARNING in __unregister_ftrace_function
- CVE-2026-97442wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi
- CVE-2026-97441ata: ahci: fail probe if BAR too small for claimed ports
- CVE-2026-97440net: qrtr: fix node refcount leak on ctrl packet alloc failure
- CVE-2026-97439fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib
- CVE-2026-97438fs/ntfs3: validate index entry key bounds
- CVE-2026-97437ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e()
- CVE-2026-97436dpaa2-switch: rework FDB management on the bridge leave path