Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-93187ASoC: SOF: ipc4-topology: Return error for invalid number of formats
- CVE-2026-93186cxl/mbox: Clamp mailbox output allocation to the payload size
- CVE-2026-93185ASoC: rt700-sdw: always drain jack work on remove
- CVE-2026-93184ASoC: fsl_audmix: rework runtime PM handling in probe
- CVE-2026-93183drm/lima: call drm_mm_init() with a valid allocation range
- CVE-2026-93182sched/fair: Fix overflow in update_tg_cfs_runnable()
- CVE-2026-93181perf/x86/intel/uncore: Fix uncore_box ref/unref ordering
- CVE-2026-93180drm/panthor: Fix NPD issue on partial unmap of an evicted BO
- CVE-2026-93179drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read
- CVE-2026-93178drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup
- CVE-2026-93177drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup
- CVE-2026-93176drm/amd/display: Fix dangling pointer in plane reset function
- CVE-2026-93175drm/amd/display: Fix dangling pointer in CRTC reset function
- CVE-2026-93174bpf: Copy per-CPU map value padding in copy_map_value_long()
- CVE-2026-93173bpf,lsm: Drop bpf_prog_free from sleepable_lsm_hooks
- CVE-2026-93172mm/mm_init: handle alloc_percpu failure in free_area_init_core_hotplug
- CVE-2026-93171leds: lp5860: Fix a potential double-unlock
- CVE-2026-93170dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers
- CVE-2026-93169dmaengine: zynqmp_dma: fix race between runtime PM and device removal
- CVE-2026-93168dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout
- CVE-2026-93167csky: Fix a4/a5 restoration in syscall trace path
- CVE-2026-93166wifi: rtw89: debug: fix off by on in rtw89_ppdu_str()
- CVE-2026-93165platform/chrome: sensorhub: Fix memory overread in ring handler
- CVE-2026-93164uprobes/x86: Move optimized uprobe from nop5 to nop10
- CVE-2026-93163hwrng: core - fix rng list on registration error
- CVE-2026-93162crypto: qat - cancel work on re-enable SR-IOV timeout
- CVE-2026-93161crypto: qat - clear AES key schedule from stack
- CVE-2026-93160crypto: atmel-ecc - reject hardware ECDH without a public key
- CVE-2026-93159crypto: atmel-sha204a - fix heap info leak on I2C transfer failure
- CVE-2026-93158crypto: sa2ul - stop probe if context pool creation fails