Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-93217mm/madvise: skip device-private PMDs in cold and pageout walks
- CVE-2026-93216mm/page_owner: use memcg_data snapshot to avoid TOCTOU in print_page_owner_memcg()
- CVE-2026-93215cdx: Fix double free when sysfs file creation fails
- CVE-2026-93214usb: gadget: f_tcm: fix deadlock in usbg_make_tpg()
- CVE-2026-93213of: fix out-of-bounds read in of_alias_scan() stem parser
- CVE-2026-93212nfsd: guard nfsd_serv deref in nfsd_file_net_dispose
- CVE-2026-93211nfsd: initialize DRC hash table before registering shrinker
- CVE-2026-93210smb: client: harden DFS cache against invalid target hints
- CVE-2026-93209Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb
- CVE-2026-93208kasan: fix cache shrink race with CPU hotplug
- CVE-2026-93207SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry
- CVE-2026-93206PCI/proc: Use file_ns_capable() when checking config space read access
- CVE-2026-93205iommu/arm-smmu-v3: Manage teardown with devm
- CVE-2026-93204batman-adv: dat: atomically update mac addresses
- CVE-2026-93203batman-adv: bla: avoid CRC corruption due to parallel claim add
- CVE-2026-93202i3c: master: Fix recursive locking during device registration
- CVE-2026-93201dm-pcache: validate seg_id fields from persistent memory
- CVE-2026-93200i3c: master: Fix use-after-free of master->this
- CVE-2026-93199i3c: master: Do not treat master device as a duplicate target
- CVE-2026-93198dm-pcache: validate the persisted dirty_tail chain at load
- CVE-2026-93197memcg: move LRU size accounting on reparenting instead of copying it
- CVE-2026-93196nvdimm: virtio_pmem: refcount requests for token lifetime
- CVE-2026-93195drm/bridge: synopsys: dw-dp: Support unregistering the AUX channel
- CVE-2026-93194drm/rockchip: dw_dp: Release core resources
- CVE-2026-93193drm/rockchip: analogix_dp: Fix OF node reference leak via auto cleanup
- CVE-2026-93192drm/v3d: Clear queue->active_job when v3d_fence_create() fails
- CVE-2026-93191smack: fix incorrect task context in smack_msg_queue_msgrcv
- CVE-2026-93190platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count
- CVE-2026-93189HID: core: quiesce input in hid_hw_stop() to prevent use-after-free
- CVE-2026-93188HID: roccat: bound device-supplied profile index