Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-93247Bluetooth: mgmt: fix 'hdev->discovery.uuids' NULL dereference
- CVE-2026-93246octeontx2-af: fix out-of-bounds read setting MSI-X irq affinity
- CVE-2026-93245apparmor: policy_int make sure list heads are initialized before fail path
- CVE-2026-93244drm/sysfb: simpledrm: Improve stride validation
- CVE-2026-93243mm/secretmem: properly account locked pages
- CVE-2026-93242scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()
- CVE-2026-93241memcg: bypass the reclaim and oom killer for dying tasks once oom_reaper is done
- CVE-2026-93240memcg: make the v1 soft limit knob inert
- CVE-2026-93239arm64: mm: Fix the lockless page-table walk in show_pte()
- CVE-2026-93238s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap
- CVE-2026-93237LoongArch: Add DIRECT_MAP_PHYSMEM_END definition
- CVE-2026-93236media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common
- CVE-2026-93235f2fs: fix to zero post-EOF data when extending file size
- CVE-2026-93234drm/gud: validate TV mode names before creating enum property
- CVE-2026-93233drm/nouveau/dmem: fix callocated underflow on large folio split
- CVE-2026-93232mm/hugetlb: fix boot panic with CONFIG_DEBUG_VM and HVO bootmem pages
- CVE-2026-93231lockd: fix swapped arguments in nlmsvc_match_ip()
- CVE-2026-93230mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier
- CVE-2026-93229nfsd: add missing read barrier to rpc_status_get dumpit seqcount retry
- CVE-2026-93228svcrdma: Reject Write/Reply chunks with segcount 0
- CVE-2026-93227mm/mm_init: deferred_grow_zone(): fix out-of-range first_deferred_pfn
- CVE-2026-93226ipv6: use RCU iterator to dump route exceptions
- CVE-2026-93225phy: fsl-imx8mq-usb: fix typec switch leak on probe error path
- CVE-2026-93224svcrdma: Fix unmatched rn_unregister on failed accept
- CVE-2026-93223staging: media: tegra-video: fix of_node_put() on VIP parse errors
- CVE-2026-93222signal: avoid shared siginfo namespace rewrites
- CVE-2026-93221nfsd: convert nfsd_net boolean flags to unsigned long flags word
- CVE-2026-93220sched_ext: Keep kick_sync waiting on the rq's own CPU
- CVE-2026-93219clocksource/drivers/timer-sun4i: Advertise a real minimum delta
- CVE-2026-93218mm/huge_memory: skip device-private PMDs in madvise_free_huge_pmd