Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-90183blk-iolatency: clear delay state when freeing policy data
- CVE-2026-90182blk-iocost: clear delay state when freeing policy data
- CVE-2026-90181ublk: avoid teardown retry loop on xarray allocation failure
- CVE-2026-90180block: mtip32xx: synchronize ioctls with device removal
- CVE-2026-90179apparmor: fix deadlock in complain-mode change_hat
- CVE-2026-90178hwmon: (coretemp) Fix core_data leak on CPUs without PTS
- CVE-2026-90177bpf: Check pointer type for all atomic RMW paths
- CVE-2026-90176ksmbd: Do not skip lock checks for single-byte ranges
- CVE-2026-90175smb: server: fix leak of ksmbd_ipc_login_request_ext() returned buffer
- CVE-2026-90174ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user()
- CVE-2026-90173smb: smbdirect: free completion queues with ib_free_cq()
- CVE-2026-90172smb: smbdirect: destroy QP before mem pools on accept failure
- CVE-2026-90171smb: smbdirect: release pending child sockets outside the handler lock
- CVE-2026-90170ksmbd: validate ipc response length before dereferencing its fields
- CVE-2026-90169ksmbd: free preauth sessions on connection teardown
- CVE-2026-90167ksmbd: serialize oplock close with pending break ownership
- CVE-2026-90166smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()
- CVE-2026-90165smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()
- CVE-2026-90164smb/server: abort initialization when proc setup fails
- CVE-2026-90163smb/server: call ksmbd_proc_cleanup() on module init failure
- CVE-2026-90162ksmbd: defer publishing granted locks to prevent UAF/double-free race
- CVE-2026-90161erofs: fix interlaced ztailpacking pclusters
- CVE-2026-90160lwt_bpf: Restore reserved headroom after xmit program
- CVE-2026-90159bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks
- CVE-2026-90158m68k: nfcon: Do not call console_is_registered() in nfcon_device()
- CVE-2026-90157bpf: Reject negative optlen in cgroup getsockopt hook
- CVE-2026-90156ksmbd: safely discard unregistered deferred locks
- CVE-2026-90155ksmbd: detach blocked lock requests before freeing
- CVE-2026-90154ksmbd: scope session state changes to bound connections
- CVE-2026-90153ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size