Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-90000HID: rmi: fix OOB access with undersized RMI reports
- CVE-2026-89999HID: wacom: validate report length in wacom_intuos_pro2_bt_irq
- CVE-2026-89998dm: fix race when loading and unloading a table
- CVE-2026-89997dm: fix resume-vs-remove race
- CVE-2026-89996dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds
- CVE-2026-89995dma-direct: return struct page from dma_direct_alloc_from_pool()
- CVE-2026-89994dmaengine: fsl-edma: tracing: no ptr dereference during log output
- CVE-2026-89993dmaengine: dw-edma: Initialize IRQ data before requesting IRQs
- CVE-2026-89992cpuidle: dt_idle_genpd: kfree() the original name allocation
- CVE-2026-89991bpf: Fix infinite loop in pcpu_freelist push with one possible CPU
- CVE-2026-89990ceph: lock mutex in ceph_mds_check_access()
- CVE-2026-89989ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()
- CVE-2026-89988kprobes: Protect kprobe_blacklist with RCU
- CVE-2026-89987mm/huge_memory: transfer the pmd dirty bit to the folio on zap
- CVE-2026-89986mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()
- CVE-2026-89985memcg: keep folio's objcg same as its node
- CVE-2026-89984perf/x86/intel: Fix kernel address leakages in LBR stack
- CVE-2026-89983i2c: core: fix debugfs UAF on adapter removal
- CVE-2026-89982i2c: mux: Fix channel node leak on adapter add failure
- CVE-2026-89981arm64: Don't read GMID_EL1 when MTE is disabled
- CVE-2026-89980ALSA: harmony: initialize locks before requesting IRQ
- CVE-2026-89979ALSA: pcm: Fix race between non-atomic ops and trigger-start
- CVE-2026-89978accel/amdxdna: return early from a zero-length flush
- CVE-2026-89977accel/ethosu: check MMIO mapping errors in probe
- CVE-2026-89976accel/ethosu: fix job completion fence cleanup
- CVE-2026-89975nvme-fabrics: fix DHCHAP secret leak on parse failure
- CVE-2026-89974nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails
- CVE-2026-89973nvme-tcp: check the data direction of a C2HData PDU
- CVE-2026-89972nvme: add missing SRCU grace period in error path
- CVE-2026-89971nvme: skip the zoned limits update if the zone info query failed