Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-89910LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc
- CVE-2026-89909LoongArch: KVM: Free init resources if kvm_init() fails
- CVE-2026-89908LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY
- CVE-2026-89907LoongArch: KVM: Validate MSI data before routing it to EIOINTC
- CVE-2026-89906LoongArch: BPF: Refactor jump offset calculation in tail call
- CVE-2026-89905LoongArch: BPF: Move arena register slot below TCC context
- CVE-2026-89904LoongArch: Fix acpi_package_ids[] array overflow
- CVE-2026-89903LoongArch: Do not save/restore percpu base register in rethook trampoline
- CVE-2026-89902LoongArch: Avoid preempt count underflow without probe
- CVE-2026-89901media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref
- CVE-2026-89900media: cec: core: Fix kmemleak due to missed rc_free_device() call
- CVE-2026-89899media: cec: disable delayed work before freeing an interrupted transmit
- CVE-2026-89898media: cec: extron-da-hd-4k-plus: add sanity check
- CVE-2026-89897media: cec: Serialize exclusive follower delivery
- CVE-2026-89896media: cedrus: fix memory leak in cedrus_init_ctrls()
- CVE-2026-89895media: cobalt: Avoid freeing ALSA private data twice
- CVE-2026-89894media: cx231xx: reject geometry changes while the VBI queue is busy
- CVE-2026-89893media: cx23885: cancel NetUP CI work before teardown
- CVE-2026-89892media: em28xx: defer audio-only extension registration
- CVE-2026-89891media: em28xx: fix use-after-free of dev_next->devlist on disconnect
- CVE-2026-89890media: go7007: defer the ALSA v4l2 put until card release
- CVE-2026-89889media: i2c: imx415: Release runtime PM reference on VBLANK error
- CVE-2026-89888media: i2c: ov02a10: fix endpoint parsing use-after-free
- CVE-2026-89887media: i2c: ov7740: fix use-after-destroy in remove
- CVE-2026-89886media: intel/ipu6: fix async notifier cleanup leak on parse error
- CVE-2026-89885media: platform: mtk-mdp3: Fix SCP device refcounting
- CVE-2026-89884media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup
- CVE-2026-89883media: rc: sunxi-cir: Unregister rc device on probe failure
- CVE-2026-89882media: rkvdec: hevc: guard INTER_REF_PIC_SET_PRED index underflow
- CVE-2026-89881media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak