Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-90273coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable
- CVE-2026-90272perf: arm_pmuv3: Zero initialize hw_id branch stack field
- CVE-2026-90271arm_mpam: Fix a NULL pointer dereference on unbinding after an error interrupt
- CVE-2026-90270arm_mpam: Disable driver unbind to avoid UAF
- CVE-2026-90269bpf: Reject load-acquire from pointers requiring fault protection
- CVE-2026-90268scsi: sd: Fix error handling in sd_probe() after large pool creation failure
- CVE-2026-90267scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails
- CVE-2026-90266btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge
- CVE-2026-90265btrfs: defrag: fix deadlock between defrag and delalloc space reservation
- CVE-2026-90264btrfs: always wait for ordered extents to avoid OE races
- CVE-2026-90263btrfs: check if root is readonly when setting posix acl
- CVE-2026-90262btrfs: retry verity reads for not-uptodate Merkle folios
- CVE-2026-90261btrfs: zoned: flush active metadata block group at btree_writepages() start
- CVE-2026-90260btrfs: zoned: don't clobber the extent buffer when zeroing it out
- CVE-2026-90259btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data()
- CVE-2026-90258pinctrl: airoha: add missed IRQ resource helpers
- CVE-2026-90257Bluetooth: virtio_bt: avoid OOB read of build info string
- CVE-2026-90256Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind
- CVE-2026-90255Bluetooth: hci_conn: fix the SCO setup context lifetime
- CVE-2026-90254Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths
- CVE-2026-90253Bluetooth: MGMT: free the mesh send cancel command when it is cancelled
- CVE-2026-90252Bluetooth: MGMT: free the HCI command when it is cancelled
- CVE-2026-90251Bluetooth: MSFT: validate evt_prefix_len against the response length
- CVE-2026-90250bpf, cgroup: Fix storage null-ptr-deref after replacing prog
- CVE-2026-90249iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes
- CVE-2026-90248net/sched: cls_api: fix teardown of an adopted proto on insert-race loss
- CVE-2026-90247bpf: Fix mmap_lock leak in irq_work path
- CVE-2026-90246apparmor: fix integer overflow in verify_tags() bounds check
- CVE-2026-90245fbdev: kyro: Validate overlay viewport coordinates
- CVE-2026-90244iommu/dma: Restore locking around msi_page_list