Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-89760mm, swap: don't free a hibernation slot that is in the swap cache
- CVE-2026-89759mm/kmemleak: avoid soft lockup when scanning task stacks
- CVE-2026-89758mm/mempolicy: skip non-present PMDs when queueing folios
- CVE-2026-89757mm/mglru: fix and remove redundant unevictable folio handling
- CVE-2026-89756mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch()
- CVE-2026-89755mm/migrate_device: clear stale mapping after freeing swapcache
- CVE-2026-89754mm/pagewalk: fix stale walk->action escaping walk_pmd_range()
- CVE-2026-89753mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec()
- CVE-2026-89752mm: memcg: stop reclaim when a limit update is superseded
- CVE-2026-89751x86/tdx: Fix off-by-one in port I/O handling
- CVE-2026-89750tracing/user_events: Clear copied tracing state before fork duplication
- CVE-2026-89749tracing: Fix crash passing ERR_PTR to kthread_stop()
- CVE-2026-89748tracing: Fix retry exhaustion in simple ring buffer reader swap
- CVE-2026-89747tracing: Fix use-after-free in trace_pipe read on sub-buffer order change
- CVE-2026-89746tracing: Fix use-after-free with same-name named triggers
- CVE-2026-89745debugfs: Fix lockdown check for mmap_prepare
- CVE-2026-89744device property: fix infinite loop in fwnode_for_each_child_node()
- CVE-2026-89743misc: nsm: bound the device-reported response length
- CVE-2026-89742rapidio: mport_cdev: fix use-after-free in dma_req_free()
- CVE-2026-89741Revert "media: v4l2-dev: fix error handling in __video_register_device()"
- CVE-2026-89740serial: imx: serialize imx_uart_ports[] lifetime
- CVE-2026-89739usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition
- CVE-2026-89738usb: gadget: at91_udc: drain polled-VBUS timer/work before udc is freed
- CVE-2026-89737usb: typec: thunderbolt: Disable work before freeing tbt on remove
- CVE-2026-89736usb: gadget: u_audio: Fix use-after-free on sound card disconnect
- CVE-2026-89735usb: gadget: midi2: remove default configfs groups on teardown
- CVE-2026-89734usb: gadget: uvc: Fix null pointer dereference in uvcg_video_init()
- CVE-2026-89733usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind()
- CVE-2026-89732usb: gadget: f_fs: Prevent deadlock during ep0 read loop
- CVE-2026-89731cxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds AER register read