Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-90092Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN
- CVE-2026-90091Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan
- CVE-2026-90090Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path
- CVE-2026-90089Bluetooth: btnxpuart: Validate the FW dump header length
- CVE-2026-90088Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop
- CVE-2026-90087Bluetooth: do not leak an hci_conn when a second LE connect is rejected
- CVE-2026-90086xsk: honor XDP_TX_METADATA in zero-copy path
- CVE-2026-90085octeontx2-af: fix NULL deref in NIX TM tree debugfs read path
- CVE-2026-90084octeontx2-vf: fix workqueue and netdev race in probe/remove
- CVE-2026-90083net/sched: act_ife: Only operate on Ethernet frames
- CVE-2026-90082net: mana: Cap MSI-X vectors to the device MSI-X table size
- CVE-2026-90081net/rds: use wq_has_sleeper() in rds_cong_map_updated()
- CVE-2026-90080octeontx2-pf: fix NULL deref of af_xdp_zc_qidx on rep setup
- CVE-2026-90079octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init()
- CVE-2026-90078net/sched: act_skbmod: fix length calculations and avoid invalid header warnings
- CVE-2026-90077net: fix a resource leak in copy_net_ns() error handling path
- CVE-2026-90076net/sched: fq: add overflow bounds to quantum and initial quantum
- CVE-2026-90075net/sched: fq_codel: clamp default quantum and mtu
- CVE-2026-90074net/sched: fq_pie: clamp default quantum to avoid signed overflow
- CVE-2026-90073net/sched: hhf: clamp quantum before hhf_change() to avoid overflow
- CVE-2026-90072net/sched: sfq: clamp quantum to avoid signed overflow soft lockup
- CVE-2026-90071net/sched: sch_teql: restore skb->dev on the slave failure path
- CVE-2026-90070tpm: st33zp24: Return zero on status read failure
- CVE-2026-90069crypto: acomp - allocate async request context when cloning
- CVE-2026-90068ASoC: dapm: Fix off-by-one check on the second enum channel
- CVE-2026-90067libceph: validate banner payload length
- CVE-2026-90066samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify
- CVE-2026-90065net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure
- CVE-2026-90064drm/xe: Reject page faults from non-fault-mode scratch VMs
- CVE-2026-90063virtio-net: Ensure that TCP packets don't overflow gso_segs