Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-90243iommu/vt-d: Clear Present bit before tearing down copied context entry
- CVE-2026-90242iommu/vt-d: Fix iopf_refcount leak on RID domain replacement
- CVE-2026-90241iommu/vt-d: Tear down scalable-mode context on probe failure
- CVE-2026-90240iommu/vt-d: Flush context cache with correct SID when tearing down aliases
- CVE-2026-90239media: amd: isp4: release partial allocations in isp4if_alloc_fw_gpumem()
- CVE-2026-90238media: amd: isp4: fix self-deadlock in isp4sd_pwron_and_init() error path
- CVE-2026-90237netfilter: nft_ct: move custom expectation support to helper
- CVE-2026-90236NFSD: Release the export reference when reaping open stateids
- CVE-2026-90235sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE
- CVE-2026-90234NFS: Return a delegation the client fails to record
- CVE-2026-90233nvme-pci: release descriptor pools on probe failure
- CVE-2026-90232amt: Don't support cross-netns setup.
- CVE-2026-90231apparmor: fix unconfined user namespace restriction forced stack
- CVE-2026-90230nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate()
- CVE-2026-90229nvme-apple: Destroy the admin queue on removal
- CVE-2026-90228nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns()
- CVE-2026-90227nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()
- CVE-2026-90226nfc: llcp: avoid userspace overflow on invalid optlen
- CVE-2026-90225nfc: llcp: read llcp_sock->local under the socket lock in getsockopt
- CVE-2026-90224nfc: nci: fix double completion race in nci_data_exchange_complete
- CVE-2026-90223nfc: llcp: bound SNL TLV parsing to the skb and add length checks
- CVE-2026-90222nfc: pn533: hold a reference to the request skb during send_frame
- CVE-2026-90221nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing
- CVE-2026-90220ALSA: seq: Don't leak the extension cell pointer in the bounce payload
- CVE-2026-90219RDMA/cxgb4: Free debugfs on registration failure
- CVE-2026-90218RDMA/cma: Fix WARNING in res_to_rt
- CVE-2026-90217bpf: Compare iterator types during state pruning
- CVE-2026-90216ubi: Fix rollback for explicit UBI device numbers
- CVE-2026-90215mtd: ubi: Release device reference on busy detach
- CVE-2026-90214ASoC: xilinx: formatter_pcm: fix stream_data leak on open error