Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-90062netfilter: nf_tables: move hardware offload step after building the chain blob
- CVE-2026-90061netfilter: nf_tables: skip double clone set expressions on element insert
- CVE-2026-90060ALSA: control: Don't add invalid kcontrols to LED layer
- CVE-2026-90059net: stmmac: restore NET_IP_ALIGN in the RX DMA offset
- CVE-2026-90058net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup
- CVE-2026-90057slip: remove slip_hangup() to fix use-after-free in slip_receive_buf()
- CVE-2026-90056net: fec: only stop PTP if it was initialized
- CVE-2026-90055usb: atm: usbatm: fix invalid ci_range initialization
- CVE-2026-90054tcp: fix corruption of urgent data on multi-segment retransmit
- CVE-2026-90053net/sched: sch_htb: limit htb_classify inner-class filter hops
- CVE-2026-90051tcp: reject non zerocopy devmem tx
- CVE-2026-90049net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()
- CVE-2026-90048fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()
- CVE-2026-90047drm/xe: Don't hand out the flat CCS storage as usable VRAM
- CVE-2026-90046mm/page_alloc: don't spin_trylock() in NMI on UP
- CVE-2026-90045USB: gadget: ffs: fix mm lifetime handling
- CVE-2026-90044usb: gadget: f_fs: Fix Use-After-Free in AIO error path
- CVE-2026-90043zram: fix slot lock bit position on big-endian 64-bit
- CVE-2026-90042ceph: properly decrypt filenames in vmalloc() buffers
- CVE-2026-90041HID: sony: clean up device list on probe failure
- CVE-2026-90040KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped
- CVE-2026-90039NFSD: Guard admin state-revocation walks with NFSD_NET_UP
- CVE-2026-90038NFSD: Prevent client use-after-free during export state revocation
- CVE-2026-90037NFSD: Prevent client use-after-free during close_lru reaping
- CVE-2026-90036NFSD: Prevent client use-after-free during blocked-lock reaping
- CVE-2026-90035drm/amd/display: fix division by zero in get_estimated_bw()
- CVE-2026-90034usb: image: mdc800: change kmalloc() to kzalloc()
- CVE-2026-90033ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()
- CVE-2026-90032media: usbtv: keep device alive while ALSA card exists
- CVE-2026-90031usb-storage: ene_ub6250: fix race between scan work and probe