Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-99071ipv4: do not warn on route notification size race
- CVE-2026-99070ipv6: do not warn on route notification size race
- CVE-2026-99069Input: ati_remote2 - fix type confusion in device attribute handlers
- CVE-2026-99068ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers
- CVE-2026-99067btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()
- CVE-2026-99066can: dev: init_can_skb(): restore skb header initialization
- CVE-2026-99065cgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus()
- CVE-2026-99064cipso: adjust cached option offsets when removing CIPSO
- CVE-2026-99063dm ioctl: don't let data_start run past the buffer
- CVE-2026-99062vsock/virtio: account only unread bytes in read_skb()
- CVE-2026-99061wifi: brcmfmac: fix P2P device removal race in brcmf_detach()
- CVE-2026-99060wifi: mt76: mt7603: initialize global station WCID
- CVE-2026-99059wireguard: noise: reject response consumption after intermediate initiation
- CVE-2026-99058workqueue: Fix NULL current_pwq deref in chained work check
- CVE-2026-99057xen/netfront: don't leak the skb when xennet_fill_frags() fails
- CVE-2026-99056strparser: make sure __strp_recv isn't running before tearing down the parser
- CVE-2026-99055tcp: reject net_iov in zerocopy receive mapping hints
- CVE-2026-99054tipc: destroy topsrv workqueues before closing connections
- CVE-2026-99053tipc: hold a reference to nodes found by link name
- CVE-2026-99052selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts
- CVE-2026-99051fsverity: RCU-delay the freeing of struct fsverity_info
- CVE-2026-99050gpio: mpsse: fix race when arming the IRQ poll worker
- CVE-2026-99049gpio: xilinx: fix runtime PM leak on request error path
- CVE-2026-99048gve: fix napi_disable deadlock when attempting to disable XSK pools
- CVE-2026-99047gve: fix XSK buffer leak when rings are stopped
- CVE-2026-99046gve: fix XSK buffer leak on error descriptor
- CVE-2026-99045ibmveth: h_free logical LAN on open-fail after register
- CVE-2026-99044ice: fix use-after-free in dynamic port cleanup
- CVE-2026-99043ice: fix metadata_dst refcount handling on representor teardown
- CVE-2026-99042io_uring/net: populate CONNECT filter fields for 24-byte sockaddr_in6