Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-99101ntfs: move attribute payload before shrinking its record
- CVE-2026-99100wifi: p54: validate firmware record lengths
- CVE-2026-99099x86/CPU/AMD: Fix AMD TLBI Erratum #1718
- CVE-2026-99098dm-integrity: fix buffer overflow in inline mode with large tag size
- CVE-2026-99097tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper()
- CVE-2026-99096io_uring/register: don't exempt disabled rings from task restrictions
- CVE-2026-99095drm/vc4: drain the hangcheck timer and works on V3D unbind
- CVE-2026-99094Bluetooth: btintel_pcie: fix TX descriptor bounds check
- CVE-2026-99093mm: don't schedule deferred kernel page table freeing while booting
- CVE-2026-99092riscv: patch: fix handling of bpf-jit execmem addresses
- CVE-2026-99091Bluetooth: MGMT: Fix status of pending commands flushed on power off
- CVE-2026-99090drm/amdgpu: serialize vblank counter reads against GPU reset
- CVE-2026-99089ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM
- CVE-2026-99088net: openvswitch: validate transport header presence in set_ipv6_addr
- CVE-2026-99087dm-integrity: fix NULL pointer dereference when the 'R' flag is used
- CVE-2026-99086dm-integrity: validate the superblock on resume
- CVE-2026-99085sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler
- CVE-2026-99084readdir: take no inode lock on an immutable directory
- CVE-2026-99083ksmbd: fix heap out-of-bounds write in krb5_authenticate()
- CVE-2026-99082KVM: x86: Use active memslots for the per-vCPU MMIO cache
- CVE-2026-99081bnxt_en: fix DMA mapping length for padded small packets
- CVE-2026-99080fs: Free any excess xarray nodes in clear_inode()
- CVE-2026-99079net/mlx5e: Prevent stale XSK buffer release on refill retry
- CVE-2026-99078net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry
- CVE-2026-99077ipv4: udp: Create exceptions before socket matching
- CVE-2026-99076ipv6: udp: Create exceptions before socket matching
- CVE-2026-99075rust_binder: reschedule node refcount update on thread exit
- CVE-2026-99074ipv4: stop PMTU walk when nexthop group shrinks
- CVE-2026-99073ipv4: stop exception dump when nexthop group shrinks
- CVE-2026-99072ipv4: stop route notification sizing when nexthop group shrinks