Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-93065wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs
- CVE-2026-93064wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser
- CVE-2026-93063wifi: iwlwifi: mei: check SAP message length before reading it
- CVE-2026-93062wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments
- CVE-2026-93061gpu: host1x: Avoid stack over-read in debug output helpers
- CVE-2026-93060drm/msm/adreno: fix use after free on error path in a6xx_gpu_init()
- CVE-2026-93059drm/msm: Fix task_struct reference leak in recover_worker
- CVE-2026-93058drm/msm: Only fini scheduler after successful init
- CVE-2026-93057scsi: ufs: core: Avoid possible memory reclaim deadlock in TX EQTR context
- CVE-2026-93056usb: gadget: f_uac1_legacy: remove broken string configfs attributes
- CVE-2026-93055UDF symlink pathComponent header OOB read
- CVE-2026-93054uio: Fix stale info pointer in failed registration path
- CVE-2026-93053speakup: keyhelp: guard letter_offsets possible out-of-range indexing
- CVE-2026-93052misc: bcm-vk: Use acquire/release for msgq_inited
- CVE-2026-93051misc: ad525x_dpot: use driver core groups for sysfs files
- CVE-2026-93050ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove
- CVE-2026-93049mtd: mtdswap: Avoid freeing registered blktrans device twice
- CVE-2026-93048mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition()
- CVE-2026-93047drm/v3d: Associate BOs with every job that accesses them
- CVE-2026-93046software node: Fix software_node_get_reference_args() with index -1
- CVE-2026-93045bpf: Reject arena frees below the arena base
- CVE-2026-93044bpf: Disallow interpreter fallback for arena-related insns
- CVE-2026-93043bpf: Disallow interpreter fallback for gotox insn
- CVE-2026-93042dmaengine: dw-edma: Terminate all descriptors without callbacks
- CVE-2026-93041dmaengine: dw-edma: Serialize abort state updates
- CVE-2026-93040dmaengine: dw-edma: Serialize channel state checks
- CVE-2026-93039ASoC: meson: Keep link pointers valid on realloc failure
- CVE-2026-93038iio: dac: ad5686: missing NULL check on match data
- CVE-2026-93037RDMA/hfi1: Propagate sdma_txinit_ahg() errors
- CVE-2026-92525RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[]