Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-89970nvmet-auth: Synchronize timeout work during SQ teardown
- CVE-2026-89969nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU
- CVE-2026-89968nvmet-tcp: reject unsolicited H2CData PDUs
- CVE-2026-89967mm/migrate_device: avoid out-of-bounds writes for compound folios
- CVE-2026-89966mm/hugetlb_cma: fix null nodemask dereference in hugetlb_cma_alloc_frozen_folio
- CVE-2026-89965nvdimm/btt: reject an arena whose nfree is below the lane count
- CVE-2026-89964parisc: eisa: Fix infinite loop when parsing invalid IRQ value
- CVE-2026-89963powerpc/kexec_file: Fix null-ptr-def in extra size calculation
- CVE-2026-89962powerpc/kexec_file: Prevent kexec range truncation
- CVE-2026-89961powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population
- CVE-2026-89960s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()
- CVE-2026-89959s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove
- CVE-2026-89958s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL
- CVE-2026-89957s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed
- CVE-2026-89956s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects
- CVE-2026-89955s390/vfio-ap: Fix NULL deref in status_show() during queue probe
- CVE-2026-89954mtd: afs: validate v2 image info bounds
- CVE-2026-89953mtd: mtdoops: free page bitmap when the backing MTD is removed
- CVE-2026-89952mtd: rawnand: validate ONFI extended parameter page sections
- CVE-2026-89951batman-adv: fix stale receive device on merged fragments
- CVE-2026-89950batman-adv: mcast: linearize skbuff for packet generation
- CVE-2026-89949batman-adv: dat: avoid unaligned fault in IP extraction
- CVE-2026-89948batman-adv: bla: fix freeing of claims on meshif deletion
- CVE-2026-89947clk: meson: align gxbb_32k_clk_sel number of parents with actual count
- CVE-2026-89946ASoC: cs35l33: drain threaded IRQ before runtime suspend
- CVE-2026-89945ASoC: cs35l34: drain threaded IRQ before runtime suspend
- CVE-2026-89944ASoC: hdac_hda: Fix hlink refcount leak on component registration failure
- CVE-2026-89943ASoC: loongson: Fix error handling in ACPI property parsing
- CVE-2026-89942iio: buffer: Fix potential use-after-free in anonymous buffer release
- CVE-2026-89941iio: buffer: Make IIO DMA fence release RCU-safe