Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-90122clk: visconti: Make sure clk_init_data is fully initialized
- CVE-2026-90121irqchip/gic-v5: Clear per-CPU IRS data on teardown
- CVE-2026-90120irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing
- CVE-2026-90119ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup
- CVE-2026-90118ntfs: fix off-by-one page overflow in ntfs_decompress()
- CVE-2026-90117ntfs: validate usa_ofs before preserving the update sequence number
- CVE-2026-90116ALSA: mtpav: shut down output timer before card teardown
- CVE-2026-90115xsk: fix NULL pointer dereference in __xsk_rcv()
- CVE-2026-90114net: bridge: Reject descending VLAN tunnel ranges
- CVE-2026-90113netdevsim: update queue NAPI association on queue reset
- CVE-2026-90112net: qlcnic: validate unified ROM sections before loading
- CVE-2026-90111ip6mr: do not clone dst in ip6mr_cache_report()
- CVE-2026-90110inetpeer: randomize RB-tree node comparison using SipHash
- CVE-2026-90109net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue
- CVE-2026-90108net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition
- CVE-2026-90107net/smc: free pending qentry in smc_llc_flow_stop() before memset
- CVE-2026-90106net: bridge: arp/nd proxy: fix reading neigh ha
- CVE-2026-90105vxlan: fix reading neigh ha
- CVE-2026-90104NFSv4.1: zero referring call lists before decoding
- CVE-2026-90103NFSv4.2: fix LAYOUTSTATS send buffer exhaustion
- CVE-2026-90102NFSv4/pnfs: key the data server cache on the NFS version
- CVE-2026-90101bnxt_en: Fix call to hardware monitoring event handler
- CVE-2026-90100ptp: netc: fix period truncation and potential divide-by-zero in PEROUT
- CVE-2026-90099net/sched: account classifier filter allocations to memcg
- CVE-2026-90098net: sparx5: fix sleep in atomic context in MAC table access
- CVE-2026-90097Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition
- CVE-2026-90096fuse: invalidate the correct range after O_APPEND direct write
- CVE-2026-90095fuse: Fix the condition to enable over-io-uring
- CVE-2026-90094arm64: process: Fix context switching MTE store-only tag check
- CVE-2026-90093Bluetooth: L2CAP: access chan->conn safely in get/setsockopt