Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-89880media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure
- CVE-2026-89879media: s2255: bound JPEG frame size before copying into the buffer
- CVE-2026-89878media: s2255: check firmware size before reading trailing marker
- CVE-2026-89877media: saa7164: fix cleanup on resource allocation failure
- CVE-2026-89876media: tda18250: fix possible integer overflow
- CVE-2026-89875media: ti: vpe: quiesce overflow recovery before freeing streams
- CVE-2026-89874media: v4l2-async: avoid deleting unlinked ASC entry on link error
- CVE-2026-89873media: v4l2-ctrls: validate HEVC EXT SPS RPS counts
- CVE-2026-89872media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link
- CVE-2026-89871media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure
- CVE-2026-89870media: zoran: Avoid freeing a registered video_device twice
- CVE-2026-89869media: qcom: iris: use disable_irq() during power-off
- CVE-2026-89868media: chips-media: wave5: Add timeout while stop_streaming
- CVE-2026-89867media: chips-media: wave5: Defer job_finish() only when a DEC_PIC was queued
- CVE-2026-89866media: chips-media: wave5: Resume device before setting EOS flag
- CVE-2026-89865scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers
- CVE-2026-89864scsi: qla2xxx: Bound i2c->length in I2C bsg handlers
- CVE-2026-89863scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check
- CVE-2026-89862scsi: qla2xxx: Fix BSG job leak on validate flash image error path
- CVE-2026-89861scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()
- CVE-2026-89860scsi: qla2xxx: Initialize NVMe abort_work once at submission
- CVE-2026-89859scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak
- CVE-2026-89858scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()
- CVE-2026-89857scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject
- CVE-2026-89856scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation
- CVE-2026-89855scsi: qla2xxx: Serialize flash version read in reset handler
- CVE-2026-89854scsi: qla2xxx: Fix cs84xx use-after-free on host teardown
- CVE-2026-89853scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump
- CVE-2026-89852scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()
- CVE-2026-89851scsi: qla2xxx: Fix FCE trace enable parsing in debugfs