Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-93829smb: client: fix races in cifsd thread creation
- CVE-2026-93828exfat: fix handling of damaged volume in exfat_create_upcase_table()
- CVE-2026-93827virtio-fs: avoid double-free on failed queue setup
- CVE-2026-93826HID: hidpp: fix potential UAF in hidpp_connect_event()
- CVE-2026-93825spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data()
- CVE-2026-93824tls: reject the combination of TLS and sockmap
- CVE-2026-93823drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl
- CVE-2026-93822PCI: iproc: Protect root bus removal with rescan lock
- CVE-2026-93821PCI: altera: Protect root bus removal with rescan lock
- CVE-2026-93820PCI: rockchip: Protect root bus removal with rescan lock
- CVE-2026-93819PCI: mediatek: Protect root bus removal with rescan lock
- CVE-2026-93818PCI: plda: Protect root bus removal with rescan lock
- CVE-2026-93817perf: Fix addr_filter_ranges lifetime
- CVE-2026-93816f2fs: validate inline dentry name lengths before conversion
- CVE-2026-93815net: au1000: move free_irq out of the close-time spinlocked section
- CVE-2026-93814spi: core: Abort active target transfer on controller suspend
- CVE-2026-93813btrfs: tree-checker: validate INODE_REF's namelen
- CVE-2026-93812ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr
- CVE-2026-93811ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling
- CVE-2026-93810cachefiles: Fix double fput
- CVE-2026-93809drm/amdgpu: flush pending RCU callbacks on module unload
- CVE-2026-93808ALSA: usb-audio: caiaq: validate EP1 reply lengths
- CVE-2026-93807wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers
- CVE-2026-93806wifi: cfg80211: validate assoc response length before status and IE access
- CVE-2026-93805wifi: cfg80211: validate rx/tx MLME callback frame lengths before access
- CVE-2026-93804wifi: mac80211: ibss: wait for in-flight TX on disconnect
- CVE-2026-93803wifi: libipw: fix key index receive bound checks
- CVE-2026-93802wifi: rsi: validate beacon length before fixed buffer copy
- CVE-2026-93801smb/client: zero-initialize stack-allocated cifs_open_info_data
- CVE-2026-93800btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()