Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-90394power: supply: sc2731_charger: cancel work on remove
- CVE-2026-90393bpf: Fix potential UAF in bpf_netns_link_update_prog
- CVE-2026-90392bpf: Fix potential UAF when reading bpf link info
- CVE-2026-90391lib/test_hmm: fail dmirror_fault() when the mirrored mm is gone
- CVE-2026-90390md/bitmap: resume array on backlog_store() error path
- CVE-2026-90389md: scope memalloc_noio to allocation critical sections
- CVE-2026-90388iommu/dma: Check atomic pool allocation result directly
- CVE-2026-90387swiotlb: Preserve allocation virtual address for dynamic pools
- CVE-2026-90386i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices
- CVE-2026-90385md/raid1: create serial pool adding rdev to array with serialize_policy=1
- CVE-2026-90384iomap: release the folio batch on iomap callback failures
- CVE-2026-90383misc: sgi-gru: remove interrupt-context page-table walks
- CVE-2026-90382wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length
- CVE-2026-90381wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx()
- CVE-2026-90380wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete
- CVE-2026-90379wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash
- CVE-2026-90378wifi: mt76: mt792x: Fix memory leak in SDIO TX path
- CVE-2026-90377wifi: mt76: fix RX data queuing of RRO 3.0
- CVE-2026-90376wifi: mt76: mt7996: fix MLD ID in MAC TXD and HIF TXP
- CVE-2026-90375wifi: mt76: fix non-AQL packet accounting for MLO stations
- CVE-2026-90374wifi: mt76: mt7996: validate RX band_idx before dereferencing phys[]
- CVE-2026-90373wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear
- CVE-2026-90372wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss
- CVE-2026-90371wifi: mt76: fix RXDMAD_C buffer recycling race
- CVE-2026-90370wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config
- CVE-2026-90369wifi: mt76: fix out-of-bounds access in mmio copy helpers
- CVE-2026-90368wifi: mt76: mt7915: unwind state on add_interface failure
- CVE-2026-90367wifi: mt76: mt7996: hold dev->mt76.mutex while disabling tx worker in SER
- CVE-2026-90366wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV
- CVE-2026-90365wifi: mt76: cancel reset and rc work on device unregister