Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-90303ARM: 9485/1: mm: acquire mmap write lock around show_pte() for user faults
- CVE-2026-90302ocfs2: synchronize heartbeat callbacks with o2net teardown
- CVE-2026-90301ocfs2: o2hb: quiesce negotiate handlers and timeout work
- CVE-2026-90300bpf: Clear buf on error in __bpf_get_task_stack
- CVE-2026-90299bpf: Fix sleepable check for tracing/lsm prog
- CVE-2026-90298drm/sun4i: tcon: Drop TCON TOP device reference
- CVE-2026-90297drm/sun4i: crtc: Propagate layer initialization error
- CVE-2026-90296cpufreq: imx6q: fix devres accumulation across driver rebind
- CVE-2026-90295cpufreq: imx6q: fix out-of-bounds write when probed more than once
- CVE-2026-90294IB/isert: delay the final Login Response until the session is registered
- CVE-2026-90293IB/isert: post the full-feature receive buffers after session registration
- CVE-2026-90292RDMA/siw: Fix use-after-free in siw_accept()
- CVE-2026-90291module/dups: Fix use-after-free in kmod_dup_req lifetime handling
- CVE-2026-90290arm64: hibernate: Restore DAIF state on error
- CVE-2026-90289drm/amd/display: Resize MST HDCP per-connector arrays to 32
- CVE-2026-90288phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failure
- CVE-2026-90287phy: sunplus: fix error handling in sp_uphy_init()
- CVE-2026-90286drm/amdgpu/gfx6: Use PFP on the compute queues too
- CVE-2026-90285scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path
- CVE-2026-90284firmware_loader: do not queue completed sysfs fallback requests
- CVE-2026-90283hugetlbfs: release subpool on fill_super failure
- CVE-2026-90282phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend
- CVE-2026-90281phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend
- CVE-2026-90280phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend
- CVE-2026-90279md/raid5: round bitmap stripes with sector division
- CVE-2026-90278md: wait for behind writes before destroying bitmap
- CVE-2026-90277md/md-llbitmap: prevent create failure bitmap UAF
- CVE-2026-90276md/md-llbitmap: stop daemon timer rearm on destroy
- CVE-2026-90275md/raid1: don't set array_frozen in raid1_takeover()
- CVE-2026-90274coresight: etm4x: fix underflow for usage of (nrseqstate - 1)