Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-90334tty: clear cdev pointer after cdev_add() failure
- CVE-2026-90333dm-integrity: replace forgeable discard filler with a keyed sector marker
- CVE-2026-90332PCI: dwc: ep: Flush cached MSI write before unmapping the iATU
- CVE-2026-90331HID: asus: refactor the two workqueues and init sequence
- CVE-2026-90330HID: logitech-hidpp: Fix FF device cleanup on init failure
- CVE-2026-90329HID: synchronize input before cleaning up a failed probe
- CVE-2026-90328HID: steam: Reject short reads
- CVE-2026-90327phonet: pep: do not write beyond optlen in getsockopt
- CVE-2026-90326blk-cgroup: fix race between policy activation and blkg destruction
- CVE-2026-90325blk-cgroup: skip dying blkg in blkcg_activate_policy()
- CVE-2026-90324ublk: check import_ubuf() return value
- CVE-2026-90323ublk: validate auto buf reg before taking uring_cmd
- CVE-2026-90322ocfs2/cluster: keep heartbeat local node stable
- CVE-2026-90321ocfs2: validate inline xattrs during inode block validation
- CVE-2026-90320ocfs2: validate external xattr entries when reading metadata
- CVE-2026-90319rapidio: clear mport->net when rio_add_net() fails
- CVE-2026-90318fat: release buffer head after rebuilding parent
- CVE-2026-90317bpf: Invalidate RCU pointers after final spin unlock
- CVE-2026-90316drm/omap: dsi: Do not copy isr table
- CVE-2026-90315PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers
- CVE-2026-90314remoteproc: fix OOB read via signed offset in rsc_table_for_each_entry()
- CVE-2026-90313bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed
- CVE-2026-90312bpf: Check load-acquire src ptr type before the load
- CVE-2026-90311thermal: hwmon: Remove hwmon class device along with its parent
- CVE-2026-90309RDMA/erdma: Hold CQ references when processing EQ events
- CVE-2026-90308RDMA/erdma: Hold QP references for AE and CM processing
- CVE-2026-90307RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ
- CVE-2026-90306ARM: 9481/2: breakpoint: CFI breakpoints only on demand
- CVE-2026-90305ARM: 9483/1: select HAVE_POSIX_CPU_TIMERS_TASK_WORK
- CVE-2026-90304ARM: 9484/1: enable interrupts when unhandled user faults are triggered