Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-89670nfsd: hold rcu across localio cmpxchg retry
- CVE-2026-89669nfsd: initialize copy-notify stateid before publishing it
- CVE-2026-89668nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd()
- CVE-2026-89667nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache
- CVE-2026-89666nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops
- CVE-2026-89665nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE
- CVE-2026-89664nfsd: release OPEN-decoded posix ACLs via op_release
- CVE-2026-89663nfsd: revoke copy-notify stateids before dropping their reference
- CVE-2026-89662NFSD: Prevent lock owner use-after-free during client teardown
- CVE-2026-89661NFSD: Prevent post-shutdown use-after-free in unlock_filesystem
- CVE-2026-89660NFSD: Prevent client use-after-free during admin state revocation
- CVE-2026-89659NFSD: Prevent client use-after-free during delegation revoke
- CVE-2026-89658NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup
- CVE-2026-89657libceph: validate OSD extent maps before cursor advance
- CVE-2026-89656libceph: reject buckets with mismatched CRUSH ids
- CVE-2026-89655ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock
- CVE-2026-89654ceph: fix UAF in check_new_map() on session freed during unlock
- CVE-2026-89653ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode
- CVE-2026-89652ceph: bound copied dentry name length in NFS export get_name
- CVE-2026-89651ceph: bound MDSCapAuth path and fs_name decode in handle_session()
- CVE-2026-89650ceph: bound num_export_targets array for mds info v2/v3
- CVE-2026-89649ceph: bound xattr value length in __build_xattrs()
- CVE-2026-89648ceph: cap delegated inode count in ceph_parse_deleg_inos()
- CVE-2026-89647ceph: do not repeat ceph_trim_dentries() if no progress possible
- CVE-2026-89646ceph: fix leaked inode reference on writeback abort at umount
- CVE-2026-89645btrfs: drop recovered reloc root refs on recovery failure
- CVE-2026-89644btrfs: fix extent map leak in NOCOW direct I/O write
- CVE-2026-89643audit: avoid dropping live tree ref on fsnotify rule autoremove
- CVE-2026-89642cifs: call pagecache_isize_extended() in cifs_setsize() when extending
- CVE-2026-89641cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size()