Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-89640cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0
- CVE-2026-89639cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC
- CVE-2026-89638smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions
- CVE-2026-89637smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2
- CVE-2026-89636smb: client: clear ce->tgthint in free_tgts()
- CVE-2026-89635ksmbd: only rebind the reopened file's own oplock on durable reconnect
- CVE-2026-89634smb: client: fix ALIGN() overflow in symlink_data() error context loop
- CVE-2026-89633smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()
- CVE-2026-89632smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr()
- CVE-2026-89631smb: client: reject a tree connect response whose byte count is too small
- CVE-2026-89630smb: client: restore the data_offset bound in is_valid_oplock_break()
- CVE-2026-89629HID: corsair-void: Check size of status and firmware events before reading them
- CVE-2026-89628HID: picolcd: clamp eeprom debugfs read to bytes actually received
- CVE-2026-89627HID: roccat: free buffered reports when destroying device
- CVE-2026-89626HID: sensor: custom: Fix field sysfs group cleanup on failure
- CVE-2026-89625HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind
- CVE-2026-89624HID: universal-pidff: stop the device when force-feedback init fails
- CVE-2026-89623HID: mcp2221: stop device IO before hid_hw_stop
- CVE-2026-89622HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes
- CVE-2026-89621HID: mcp2221: validate report size in mcp2221_raw_event()
- CVE-2026-89620HID: intel-thc-hid: intel-quickspi: validate report size before copy
- CVE-2026-89619HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer
- CVE-2026-89618eventfs: Initialize ei->children and ei->list in init_ei()
- CVE-2026-89617fs/ntfs3: validate dirty page table on log replay
- CVE-2026-89616fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame()
- CVE-2026-89615fs/ntfs3: bound page_lcns[] index by the log record
- CVE-2026-89614ntfs: bound the free-cluster bitmap scan to the volume
- CVE-2026-89613ntfs: reject invalid empty mapping pairs
- CVE-2026-89612ntfs: reject invalid MFT LCNs from boot sector
- CVE-2026-89611ntfs: validate non-resident attribute offsets