Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-89790ipv6: avoid divide by zero in rt6_multipath_rebalance
- CVE-2026-89789gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free
- CVE-2026-89788ksmbd: fix tree connection use-after-free in smb2_tree_connect()
- CVE-2026-89787ext4: check dir entry fits before reading the hash trailer in ext4_search_dir()
- CVE-2026-89786ext4: fix out-of-bounds read in ext4_read_inline_dir()
- CVE-2026-89785fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init
- CVE-2026-89784SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6
- CVE-2026-89783xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full
- CVE-2026-89782fs/ntfs3: reject restart table growth beyond U16_MAX entries
- CVE-2026-89781fs/ntfs3: fix out-of-bounds read in read_log_rec_buf()
- CVE-2026-89780net: qualcomm: rmnet: restore skb->dev on deaggregated frames
- CVE-2026-89779fs/ntfs3: validate ef->size covers the record's name and value
- CVE-2026-89778isofs: fix out-of-bounds page array access on empty zisofs block
- CVE-2026-89777vfio/pci: clear vdev->msi_perm after freeing it on init failure
- CVE-2026-89776vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes
- CVE-2026-89775KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation
- CVE-2026-89774Bluetooth: SCO: hold sk properly in sco_conn_ready
- CVE-2026-89773drm/amd/display: Skip Update HDCP Config In Transition State
- CVE-2026-89772btrfs: write-protect folios during data writeback
- CVE-2026-89771ring-buffer: Fix subbuf resize race with ring buffer readers
- CVE-2026-89770iomap: don't free integrity payload that doesn't exist
- CVE-2026-89769clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path
- CVE-2026-89768fs: fix user path of nested backing files
- CVE-2026-89767ovl: fix double end_creating() on the casefold-mismatch path
- CVE-2026-89766pidfd: hold exec_update_lock around namespace ioctl
- CVE-2026-89765timers/itimer: Zero-init old itimerval before copy to userspace
- CVE-2026-89764rust: devres: fix race between concurrent revokers
- CVE-2026-89763KEYS: trusted: Fix TPM teardown ordering
- CVE-2026-89762apparmor: fix cred UAF caused by begin_current_label_crit_section()
- CVE-2026-89761apparmor: fix out-of-bounds write when null terminating a label vec