Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-93799wifi: iwlwifi: mvm: validate sta_id in BA window status notif
- CVE-2026-93798btrfs: fix reloc root cleanup in merge_reloc_roots()
- CVE-2026-93797wifi: iwlwifi: mvm: fix an off-by-1 boundary check
- CVE-2026-93796wifi: iwlwifi: pcie: null RX pointers after free
- CVE-2026-93795blk-cgroup: fix leaks and online flag on radix_tree_insert failure
- CVE-2026-93794smb/client: flush dirty data before punching a hole
- CVE-2026-93793wifi: iwlwifi: mvm: validate TX_CMD response layout
- CVE-2026-93792wifi: iwlwifi: mvm: fix a possible underflow
- CVE-2026-93791wifi: iwlwifi: mvm: add a check on the tid coming from the firmware
- CVE-2026-93790wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif
- CVE-2026-93789wifi: iwlwifi: bound aligned TLV advance in FW parser
- CVE-2026-93788wifi: iwlwifi: acpi: validate WGDS table revision index
- CVE-2026-93787smb: client: bound dirent name against end of SMB response in cifs_filldir
- CVE-2026-93786ksmbd: preserve VFS inherited POSIX ACL mask
- CVE-2026-93785cifs: validate idmap key payload length
- CVE-2026-93784wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie()
- CVE-2026-93783Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame
- CVE-2026-93782vhost-scsi: flush backend after device ioctls
- CVE-2026-93781scsi: core: Do not block on tag allocation in scsi_eh_lock_door()
- CVE-2026-93288netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state
- CVE-2026-93287i2c: smbus: reject oversized block transfers in the common path
- CVE-2026-93286net: appletalk: fix NULL pointer dereference in aarp_send_ddp()
- CVE-2026-93285f2fs: embed f2fs_gc_kthread in f2fs_sb_info
- CVE-2026-93284drm/pagemap: dma-unmap pages before handling migration errors
- CVE-2026-93283i3c: master: Fix device_register() error path
- CVE-2026-93282ksmbd: fix maximum allowed access checks
- CVE-2026-93281wifi: rtw89: fix HE extended capability length check
- CVE-2026-93280greybus: audio: bound the topology section sizes against the fetched size
- CVE-2026-93279staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown
- CVE-2026-93278staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown