Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-97435net: dsa: sja1105: flower: reject cross-chip redirect
- CVE-2026-97434dpaa2-switch: fix handling of NAPI on the remove path
- CVE-2026-97433nvme: validate FDP configuration descriptor sizes
- CVE-2026-97432wifi: iwlwifi: mvm: fix P2P-Device binding handling
- CVE-2026-97431drm/amd/display: Avoid DPMS-on for phantom stream
- CVE-2026-97430xhci: Prevent queuing new commands if xhci is inaccessible
- CVE-2026-97429drm/amdkfd: fix UAF race in destroy_queue_cpsch
- CVE-2026-97428drm/amdgpu: harden FRU PIA parsing with bounded helpers
- CVE-2026-97427drm/amd/pm: bound pp_dpm_set_pp_table() memcpy
- CVE-2026-97426drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error
- CVE-2026-97425drm/amdgpu: fix buffer overflow during vBIOS update
- CVE-2026-97424drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq
- CVE-2026-97423cxl/region: Validate partition index before array access
- CVE-2026-97422drm/amdkfd: fix SMI event cross-process information leak
- CVE-2026-97421RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()
- CVE-2026-97420bpf: NUL-terminate replaced sysctl value
- CVE-2026-97419hsr: broadcast netlink notifications in the device's net namespace
- CVE-2026-97418ALSA: es18xx: check control allocation before private data setup
- CVE-2026-97417netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()
- CVE-2026-97416btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()
- CVE-2026-97415btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF
- CVE-2026-97414ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend()
- CVE-2026-97413RDMA/rtrs-srv: Fix integer underflow in process_read and process_write
- CVE-2026-97412pds_core: quiesce DMA before freeing resources
- CVE-2026-97411net: ibm: emac: mal: fix potential system hang in mal_remove()
- CVE-2026-97410netconsole: take target_cleanup_list_lock in drop_netconsole_target()
- CVE-2026-97409nvme-fc: Do not cancel requests in io target before it is initialized
- CVE-2026-97408Bluetooth: L2CAP: validate connectionless PSM length
- CVE-2026-97407ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt
- CVE-2026-93830net: stmmac: xgmac2: disable RBUE in default RX interrupt mask