Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-90213firewire: core: fix memory leak in error path of build_tree()
- CVE-2026-90212arm64/efi: Avoid voluntary preemption with efi_mm installed
- CVE-2026-90211bpf, s390: Clear fetch destination on faulting arena atomic
- CVE-2026-90210bpf: Fix UAF in bpf_trampoline_multi_attach_free on update failure
- CVE-2026-90209s390/debug: Fix deadlock during unregister
- CVE-2026-90208clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type
- CVE-2026-90207ALSA: seq: midi: Serialize input teardown with event_input
- CVE-2026-90206nvmet: fix max_qid race between configfs and controller allocation
- CVE-2026-90205ocfs2: validate orphan slot during inode read
- CVE-2026-90204ocfs2: validate DIO orphan slot during inode read
- CVE-2026-90203Squashfs: check block offset is not negative
- CVE-2026-90202scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers
- CVE-2026-90201net: page_pool: fix UAF in __page_pool_release_netmem_dma on xa_cmpxchg race
- CVE-2026-90200fs/ntfs3: fix integer overflow in MFT cluster validation
- CVE-2026-90199fs/ntfs3: reject out-of-range evcn in mi_enum_attr()
- CVE-2026-90198ALSA: core: Fix use-after-free in snd_card_do_free()
- CVE-2026-90197HID: haptic: don't write an uninitialized value to unhandled usages
- CVE-2026-90196ASoC: SOF: validate topology volume range before allocation
- CVE-2026-90195riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args
- CVE-2026-90194ACPI: scan: fix bus ID cleanup on device_add() failures
- CVE-2026-90193mailbox: qcom-cpucp: fix PREEMPT_RT self-deadlock in IRQ handler
- CVE-2026-90192mailbox: qcom-cpucp: handle NULL data in send_data callback
- CVE-2026-90191mailbox: riscv-sbi-mpxy: validate RPMI notification lengths
- CVE-2026-90190null_blk: use DEFINE_MUTEX for the file-scope mutex
- CVE-2026-90189null_blk: register configfs subsystem after creating default devices
- CVE-2026-90188null_blk: free global tag_set on init error path
- CVE-2026-90187null_blk: free zones array on device power-off
- CVE-2026-90186null_blk: reject per-device queue resize for shared tag set
- CVE-2026-90185null_blk: serialize configfs attribute stores with the lock
- CVE-2026-90184null_blk: serialize configfs attribute updates with device setup