Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-90424iommu/tegra241-cmdqv: Fix VINTF0 leak on the init-failure path
- CVE-2026-90423RDMA/rxe: Fix UAF in ODP init error-handling path
- CVE-2026-90422clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path
- CVE-2026-90421PCI: Fix UAF when probe runs concurrent to dyn ID removal
- CVE-2026-90420nilfs2: fix infinite loop in nilfs_clean_segments()
- CVE-2026-90419nilfs2: prevent out-of-bounds read in super root block parsing
- CVE-2026-90418nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch
- CVE-2026-90417RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry()
- CVE-2026-90416RDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfs
- CVE-2026-90415RDMA/cxgb4: free STAG index when TPT entry write fails
- CVE-2026-90414IB/isert: reject PDUs declaring more data than was received
- CVE-2026-90413IB/isert: reject login PDUs declaring more data than was received
- CVE-2026-90412nvmet: fix return status of RMI log page on allocation failure
- CVE-2026-90411nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request
- CVE-2026-90410spi: davinci: switch to managed controller allocation
- CVE-2026-90409drm/panthor: Add vm_bind region with kbo range overlap check
- CVE-2026-90408wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event()
- CVE-2026-90407wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event()
- CVE-2026-90406media: qcom: iris: handle runtime PM resume failure in core deinit
- CVE-2026-90405media: stm32: dcmi: fix some error handling bugs in probe()
- CVE-2026-90404platform/chrome: cros_ec_debugfs: Unregister panic notifier
- CVE-2026-90403wifi: rtlwifi: pci: fix error path in rtl_pci_probe()
- CVE-2026-90402bus: mhi: host: Fix controller cleanup on EDL sysfs failure
- CVE-2026-90401md: remove REQ_NOWAIT support from raid1/10/456
- CVE-2026-90400md: recheck spare changes before starting sync
- CVE-2026-90399wifi: ath12k: fix stride mismatch in mac_phy_caps_parse()
- CVE-2026-90398wifi: ath11k: fix stride mismatch in mac_phy_caps_parse()
- CVE-2026-90397firmware: qcom: scm: Fix NULL dereference in IRQ handler before __scm is published
- CVE-2026-90396block: fix dio leak on metadata mapping error
- CVE-2026-90395power: supply: isp1704_charger: cancel work on remove