Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-92524irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()
- CVE-2026-92523RDMA/nldev: validate dynamic counter attribute length
- CVE-2026-92522ACPI: processor: validate MADT IOAPIC entry bounds
- CVE-2026-92521ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root
- CVE-2026-92520bpf: Zero queue and stack outputs on lock failure
- CVE-2026-92519riscv, bpf: Fix memory leak in bpf_jit_free
- CVE-2026-92518riscv, bpf: Fix kernel stack corruption in tailcall with CFI
- CVE-2026-92517bpf, riscv: Fix extable handling for arena load_acquire
- CVE-2026-92516bpf: Fix offset warn check for bpf_res_spin_lock
- CVE-2026-92515bpf: Preserve unique-field state across nested structs
- CVE-2026-92514RDMA/erdma: Fix CEQ tasklet use-after-free on removal
- CVE-2026-92513RDMA/mana_ib: drain QP references after partial table insertion
- CVE-2026-92512RDMA/core: Fix use after free in ib_query_qp()
- CVE-2026-92511RDMA/core: Fix potential use after free in ib_destroy_cq_user()
- CVE-2026-92510RDMA/core: Fix potential use after free in ib_destroy_srq_user()
- CVE-2026-92509RDMA/core: Fix potential use after free in counter_release()
- CVE-2026-92508RDMA/core: Fix potential use after free in ib_free_cq()
- CVE-2026-92507RDMA/core: Fix potential use after free in ib_dealloc_pd_user()
- CVE-2026-92506firmware: arm_scmi: Fix requested device removal race
- CVE-2026-92505iommu/amd: Fix undefined behavior in devid_write debugfs function
- CVE-2026-92504thermal: intel: int3400: clean up ODVP on probe failures
- CVE-2026-92503ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find()
- CVE-2026-92502ext4: clear stale xarray tags on folios skipped during writeback
- CVE-2026-92501ext4: drain in-flight DIO before buffered write fallback
- CVE-2026-92500ext4: use fsdata to track inline data write state and fix race
- CVE-2026-92499ext4: validate readdir offset before accessing dirent
- CVE-2026-92498wifi: ath6kl: avoid buffer overreads in WMI event handlers
- CVE-2026-92497wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx()
- CVE-2026-92496wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx()
- CVE-2026-92495RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap