Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-92494ext4: fix buffer_head leak in ext4_init_orphan_info
- CVE-2026-92493cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active
- CVE-2026-92492cpufreq/amd-pstate: handle missing policy in dynamic EPP callbacks
- CVE-2026-92491firmware: arm_scmi: Roll back partial protocol table registration
- CVE-2026-92490firmware: arm_scmi: Unrequest devices if driver registration fails
- CVE-2026-92489xfrm: Fix skb double-free in xfrm_dev_direct_output()
- CVE-2026-92488RDMA/erdma: complete object teardown when the destroy command fails
- CVE-2026-92487exfat: fix valid_size extension over a shared writable mapping
- CVE-2026-92486bpf: Fix CFI mismatch in task work callback
- CVE-2026-92485bpf: Fix WARNING in bpf_tracing_link_release
- CVE-2026-92484cxl/region: Fix use-after-free in find_pos_and_ways() error path
- CVE-2026-92483liveupdate: Remember FLB retrieve() status
- CVE-2026-92482pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip
- CVE-2026-92481pinctrl: mediatek: free EINT resources on unbind
- CVE-2026-92480scsi: ufs: core: Validate string descriptors
- CVE-2026-92479scsi: ufs: Avoid NULL CQE dereference when reporting invalid tags
- CVE-2026-92478scsi: ufs: core: Validate connected lane counts
- CVE-2026-92477scsi: ufs: debugfs: Reserve space for a string terminator
- CVE-2026-92476crypto: keembay - Initialize completion before requesting IRQ
- CVE-2026-90435RDMA/mlx5: Fix integer overflow of user QP buffer size
- CVE-2026-90434isofs: release zisofs block pointer buffer head
- CVE-2026-90433spi: oc-tiny: switch to managed controller allocation
- CVE-2026-90432sched_ext: Abort directly from the hardlockup handler
- CVE-2026-90431remoteproc: Prevent crash handling to race with rproc_del()
- CVE-2026-90430iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized
- CVE-2026-90429iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)init
- CVE-2026-90428iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs
- CVE-2026-90427iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc()
- CVE-2026-90426iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs
- CVE-2026-90425iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID