Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-89940iio: buffer: Tie IIO dma fence lock lifetime to the fence
- CVE-2026-89939iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable
- CVE-2026-89938iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF
- CVE-2026-89937iio: chemical: sgp30: Handle IAQ thread creation failure
- CVE-2026-89936iio: dac: m62332: Fix regulator reference count imbalance
- CVE-2026-89935iio: light: apds9306: fix PM reference leak in apds9306_read_data()
- CVE-2026-89934iio: light: ltrf216a: fix runtime PM reference leak in error path
- CVE-2026-89933iio: pressure: dps310: fix NULL pointer dereference on ACPI probe
- CVE-2026-89932KVM: nVMX: Always flush vpid02 on first use
- CVE-2026-89931KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit
- CVE-2026-89930KVM: nVMX: Service local TLB flushes on failed nested VM-Enter
- CVE-2026-89929KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU
- CVE-2026-89928KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk
- CVE-2026-89927KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
- CVE-2026-89926KVM: s390: Fix length check __import_wp_info()
- CVE-2026-89925KVM: s390: Fix memory leak in guest debug handling
- CVE-2026-89924KVM: s390: Fix old_data leak in guest debug error path
- CVE-2026-89923KVM: s390: Free guest debug data on vcpu destroy
- CVE-2026-89922KVM: s390: Take srcu when importing watchpoint data
- CVE-2026-89921KVM: s390: Zero initialize data structures for inject_pfault_token
- CVE-2026-89920KVM: s390: Fix memory corruption by not reinjecting CK machine checks
- CVE-2026-89919KVM: s390: keyop: use mmu_lock to read gmap->asce
- CVE-2026-89918KVM: arm64: Correctly handle end of VA space TLBI invalidation
- CVE-2026-89917KVM: arm64: Handle VNCR TLB invalidation race with vcpu_put() VNCR unmapping
- CVE-2026-89916KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry
- CVE-2026-89915KVM: arm64: Remove VM-wide VNCR mapping counter
- CVE-2026-89914KVM: arm64: Sign-extend VA for range-based TLBI invalidation
- CVE-2026-89913KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables
- CVE-2026-89912KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save
- CVE-2026-89911KVM: arm64: Correctly cap TLBI Range to the architural limit