Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-90030usb: dwc3: clear forceRM when issuing EndTransfer
- CVE-2026-90029usb: storage: realtek_cr: fix use-after-free on disconnect
- CVE-2026-90028usb: typec: hd3ss3220: track VBUS enable state per consumer
- CVE-2026-90027usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop
- CVE-2026-90026usb: typec: qcom-pmic: cancel reset_work on stop
- CVE-2026-90025usb: typec: ucsi: displayport: Fix OOB altmode array index
- CVE-2026-90024usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs
- CVE-2026-90023usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()
- CVE-2026-90022usb: gadget: f_midi2: fix use-after-free in string attribute show path
- CVE-2026-90021usb: gadget: f_midi: initialize work in f_midi_alloc()
- CVE-2026-90020USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()
- CVE-2026-90019usb: gadget: fix null pointer dereference in usb_put_function_instance()
- CVE-2026-90018staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()
- CVE-2026-90017staging: rtl8723bs: fix OOB read in rtw_action_frame_parse()
- CVE-2026-90016staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie()
- CVE-2026-90015xhci: fix lost bounce buffers on TDs spanning several ring segments
- CVE-2026-90014tracing: Have show_event_filters/triggers files take trace array ref
- CVE-2026-90013tracing: Take trace_array reference when opening options file
- CVE-2026-90012spi: Fix DMA mapping ownership on partial map failure
- CVE-2026-90011scsi: target: iscsi: Reserve a terminator byte for the login payload
- CVE-2026-90010scsi: bsg: Cap io_uring sense copy to max_response_len
- CVE-2026-90009scsi: bsg: Fix TOCTOU in io_uring passthrough command setup
- CVE-2026-90008scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame
- CVE-2026-90007scsi: pm8001: Use rollback index when freeing MSI-X vectors
- CVE-2026-90006samples/damon/mtier: handle damon_stop() failure
- CVE-2026-90005samples/damon/wsse: handle damon_start() failure
- CVE-2026-90004mm/damon/core: handle region split failure in apply_min_nr_regions()
- CVE-2026-90003futex: Prevent rcuwait use-after-free during requeue PI
- CVE-2026-90002ftrace: Take trace_array reference before accessing its ftrace_ops
- CVE-2026-90001HID: bpf: serialize device reference release in struct_ops destroy path