Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-89730fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write
- CVE-2026-89729HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature
- CVE-2026-89728i3c: renesas: Fix out-of-bounds access for newdevs mask
- CVE-2026-89727KVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTID
- CVE-2026-89726lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()
- CVE-2026-89725media: cec: stm32: prevent out-of-bounds write on RX overflow
- CVE-2026-89724media: vicodec: fix out-of-bounds write in FWHT encoder
- CVE-2026-89723nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation
- CVE-2026-89722PCI/sysfs: Fix out-of-bounds read in pci_write_legacy_io()
- CVE-2026-89721phy: rockchip-samsung-dcphy: fix out-of-range max_register
- CVE-2026-89720ubifs: fix out-of-bounds read in signature length check
- CVE-2026-89719zram: fix out-of-bounds access in read_block_state()
- CVE-2026-89718zram: fix out-of-bounds access in writeback_store()
- CVE-2026-89717zram: set default primary compressor in zram_destroy_comps()
- CVE-2026-89716zram: validate deflate params
- CVE-2026-89715NFS/localio: fix ref leak on nfs_uuid_add_file failure
- CVE-2026-89714NFS: fix delegation_hash_table leak when nfs4_server_common_setup() fails
- CVE-2026-89713NFSD: check truncate permission under inode lock
- CVE-2026-89712NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock
- CVE-2026-89711NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check
- CVE-2026-89710NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path
- CVE-2026-89709lockd, nfsd: RCU-protect nlmsvc_ops dispatch
- CVE-2026-89708nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown
- CVE-2026-89707nfsd: release path refs on follow_down() error
- CVE-2026-89706nfsd: Reset write verifier when async COPY writeback fails
- CVE-2026-89705nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths
- CVE-2026-89704nfsd: sample writeback error cursor before async COPY loop
- CVE-2026-89703nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations
- CVE-2026-89702nfsd: size fh_verify server sockaddr slot by xpt_locallen
- CVE-2026-89701nfsd: validate nseconds in TIME_DELEG decode paths