Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-93097cxl/mbox: Break poison list loop on an empty payload
- CVE-2026-93096cxl/features: Serialize multi-part Get/Set Feature transfers
- CVE-2026-93095hfsplus: validate thread record before delete key rebuild
- CVE-2026-93094wifi: ath12k: fix dp_link_peer dangling references on AP vdev rollback
- CVE-2026-93093firmware: arm_scmi: Publish channel state before callbacks
- CVE-2026-93092firmware: arm_scmi: Unregister device notifier before IDR teardown
- CVE-2026-93091firmware: arm_scmi: Quiesce notifications before teardown
- CVE-2026-93090firmware: arm_scmi: Clean up channels on setup failure
- CVE-2026-93089firmware: arm_scmi: Free transport channel on IDR failure
- CVE-2026-93086firmware: arm_scmi: Avoid IDR updates while cleaning channels
- CVE-2026-93085firmware: arm_scmi: Reject out of range DT protocol IDs
- CVE-2026-93084firmware: arm_scmi: Drop handle on protocol bind failures
- CVE-2026-93083firmware: arm_scmi: Unwind TX receiver mailbox setup failure
- CVE-2026-93082firmware: arm_scmi: Unwind P2A receiver mailbox setup failure
- CVE-2026-93081firmware: arm_scmi: Fix SCMI device destroy lifetimes
- CVE-2026-93080firmware: arm_scmi: Fix transport device teardown lookup
- CVE-2026-93079cxl/features: Reject Get Feature count larger than the output buffer
- CVE-2026-93078cxl/features: Reject Set Features output buffer smaller than the header
- CVE-2026-93077cxl/features: Clamp Get Feature output size to the remaining buffer
- CVE-2026-93076dax/fsdev: clear vmemmap_shift when binding static pgmap
- CVE-2026-93075dax/fsdev: clear pgmap ops and owner on unbind
- CVE-2026-93074dax/fsdev: use __va(phys) for kaddr in direct_access
- CVE-2026-93073dax: read holder_ops once in dax_holder_notify_failure()
- CVE-2026-93072irqchip/renesas-irqc: Fix generic interrupt chip leak on remove
- CVE-2026-93071media: bcm2835-unicam: Fix asc leaked in error/remove path
- CVE-2026-93070media: ipu6: Do not free aux device pdata after init
- CVE-2026-93069OPP: Fix cleanup ordering
- CVE-2026-93068drm/amd/display: Fix DM I2C teardown race
- CVE-2026-93067drm/bridge: tc358767: clamp the reported AUX read size to the request
- CVE-2026-93066x86/mm/pat: Take cpa_lock around large-page collapse