Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-90364ACPI: processor: Unregister cpufreq notifier on init failure
- CVE-2026-90363drm/msm: don't tear down KMS twice when KMS init fails
- CVE-2026-90362drm/msm/dsi: Drop dev_pm_opp_set_rate(0)
- CVE-2026-90361wifi: ath11k: fix leak in ath11k_service_ready_ext_event()
- CVE-2026-90360regulator: core: use system_freezable_wq for init complete work
- CVE-2026-90359bpf: Reject >8 byte return values on return-reading trampoline paths
- CVE-2026-90358bpf, x86: Fix trampoline stack size for 128-bit arguments
- CVE-2026-90357wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement
- CVE-2026-90356wifi: mt76: mt7996: free vif links after clearing wcid entries on full reset
- CVE-2026-90355wifi: mt76: mt7996: clear stale link state on full reset
- CVE-2026-90354wifi: mt76: mt7915: fix double hif2 init on the non-WED path
- CVE-2026-90353wifi: mt76: mt7915: fix ext PHY use-after-free on register error path
- CVE-2026-90352wifi: mt76: mt7915: release hif2 reference on probe IRQ failure
- CVE-2026-90351wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed
- CVE-2026-90350wifi: mt76: reject out-of-range link ids in mt76_vif_link()
- CVE-2026-90349wifi: mt76: mt7996: fix out-of-bounds link array access in mt7996_tx()
- CVE-2026-90348wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump
- CVE-2026-90347arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry
- CVE-2026-90346wifi: nl80211: clean up color-change beacon data on errors
- CVE-2026-90345wifi: brcmfmac: fix P2P action frame handling without device vif
- CVE-2026-90344wifi: mac80211: disconnect on CSA to channel 0
- CVE-2026-90343wifi: cfg80211: stop PMSR before P2P and NAN teardown
- CVE-2026-90342bpf: Fix mmap_lock deadlock on arena lock failure
- CVE-2026-90341firmware: coreboot: Validate table bounds
- CVE-2026-90340pinctrl: generic: free maps on pinctrl_generic_to_map() failure
- CVE-2026-90339powerpc/syscall: Fix syscall skip handling for seccomp and ptrace
- CVE-2026-90338serial: amba-pl011: keep console clock enabled for atomic writes
- CVE-2026-90337serial: core: do fallible allocations before the console can be registered
- CVE-2026-90336serial: core: clear freed pointers on uart_register_driver() failure
- CVE-2026-90335tty: skip cdev_del() when no cdev is registered