Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-99041ip6_gre: remove obsolete ERSPAN PMTU update
- CVE-2026-99040KEYS: Fix add_key() race with keyring restriction
- CVE-2026-99039memstick: core: wait for request completion before freeing card
- CVE-2026-99038memstick: rtsx_usb_ms: complete requests after eject instead of dropping them
- CVE-2026-99037dm-crypt: reject the lmk IV mode with AEAD ciphers
- CVE-2026-99036dm: fix reading free memory in do_resume
- CVE-2026-99035mmc: mtk-sd: Cancel request timeout work on remove
- CVE-2026-99034mmc: sdhci-sprd: disable runtime PM on remove
- CVE-2026-99033net/packet: guard the ll header push in packet_rcv_spkt()
- CVE-2026-99032net/smc: protect clcsock lifetime in smc_getname
- CVE-2026-99031net: bridge: avoid recursive multicast port cleanup
- CVE-2026-99030net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits()
- CVE-2026-99029net: sparx5: free the matchall entry on destroy
- CVE-2026-99028net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop
- CVE-2026-99027net: team: stop reusing skb after queue override
- CVE-2026-99026net: team: free skb when broadcast has no txable port
- CVE-2026-99025openvswitch: fix soft lockup in the netlink flow dump
- CVE-2026-99024optee: register TEE devices only once fully initialized
- CVE-2026-99023power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all()
- CVE-2026-99022regulator: ltc3676: don't read the write-only HRST and CLIRQ registers
- CVE-2026-99021regulator: of: fill in supply names in of_regulator_bulk_get_all()
- CVE-2026-99020regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4
- CVE-2026-99019scsi: ch: Do not keep references to data transfer element devices
- CVE-2026-99018riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp
- CVE-2026-99017riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE
- CVE-2026-99016riscv: futex: untag the user pointer before the atomic access
- CVE-2026-99015Bluetooth: hci_sock: Serialize dead-device detachment
- CVE-2026-99014Bluetooth: hci_sync: Fix command skb lifetime during scan setup
- CVE-2026-99013Bluetooth: ISO: Reject concurrent BIS listener setup
- CVE-2026-99012Bluetooth: ISO: Serialize concurrent connect calls