Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-93277RDMA/bnxt_re: Validate udata before executing commands
- CVE-2026-93276phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator
- CVE-2026-93275perf/x86/intel/pt: Fix stop/start with no update
- CVE-2026-93274pinctrl: bcm2835: Don't remove an unregistered GPIO chip
- CVE-2026-93273regulator: tps6594: Fix device node reference leaks in multiphase loop
- CVE-2026-93272remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3
- CVE-2026-93271wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate
- CVE-2026-93270bpf: Disallow interpreter fallback for BPF_ADDR_PERCPU insn
- CVE-2026-93269ext4: fix circular lock dependency in ext4_ext_migrate
- CVE-2026-93268ext4: skip extra isize expansion during mount to prevent deadlock
- CVE-2026-93267RDMA/core: Fix potential use after free in uverbs_free_dmah()
- CVE-2026-93266arm64: RSI: fix field-spanning write warning in attestation token init
- CVE-2026-93265PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node
- CVE-2026-93264RDMA/efa: Fix PBL chunk length computation
- CVE-2026-93263clk: eswin: Zero-initialize stack-allocated clk_init_data
- CVE-2026-93262md/raid5-ppl: fix use-after-free in ppl_do_flush()
- CVE-2026-93261locking/lockdep: Fix NULL pointer dereference in __lock_set_class()
- CVE-2026-93260powerpc/xive: propagate IPI init errors to prevent use-after-free
- CVE-2026-93259powerpc/irq: Fix missing r2 clobber in PCREL inline assembly
- CVE-2026-93258ocfs2: do not use make_bad_inode() in ocfs2_read_inode_block_full()
- CVE-2026-93257block: handle nogenerate/noverify properly in fs-integrity
- CVE-2026-93256arm64: hibernate: mask DAIF before restoring hibernated kernel
- CVE-2026-93255btrfs: make sure EXTENT_BUFFER_READING is cleared under refs_lock
- CVE-2026-93254arm64: entry: Avoid unnecessary local_irq_disable() on kernel exit
- CVE-2026-93253sched/isolation: Defer freeing of cpumask memblock memory to initcall
- CVE-2026-93252ocfs2: fix circular locking dependency in ocfs2_init_acl()
- CVE-2026-93251ACPI: bus: Introduce acpi_bus_get_primary_device()
- CVE-2026-93250vxlan: mdb: Fix use-after-free in vxlan_mdb_flush()
- CVE-2026-93249spi: amlogic-spisg: Make sure clk_init_data is fully initialized
- CVE-2026-93248drm/xe: don't WARN on kernel job timeout when device already wedged