Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-89610ntfs: verify run length exceeding volume boundary
- CVE-2026-89609ecryptfs: hold msg ctx list lock when cleaning daemon queue
- CVE-2026-89608ecryptfs: pass packet set buffer size to parser
- CVE-2026-89607ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet
- CVE-2026-89606ecryptfs: reject too-small tag 70 packets
- CVE-2026-89605ecryptfs: release message context on send failure
- CVE-2026-89604efivarfs: Rate limit statfs() handler
- CVE-2026-89602erofs: skip sufficiently large global buffers when resizing
- CVE-2026-89601ext2: Fix lost inode updates for IS_SYNC inodes
- CVE-2026-89600fanotify: fix use-after-free of file range info
- CVE-2026-89599fbdev: omapfb: panel-dsi-cm: initialize lock before registering display
- CVE-2026-89598fbdev: ssd1307fb: defer I2C transfers from damage callbacks
- CVE-2026-89597fbdev: uvesafb: unregister connector callback on init failure
- CVE-2026-89596forcedeth: fix off-by-one when saving/restoring non-PCI config space
- CVE-2026-89595fsnotify: Fix stale object mask after concurrent mark updates
- CVE-2026-89594hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device
- CVE-2026-89593hugetlb: only adjust reservation during unmapping if mapcount is 0
- CVE-2026-89592accel/rocket: fix NULL dereference and integer overflow in rocket_job_push()
- CVE-2026-89591accel/rocket: initialize job domain before cleanup paths
- CVE-2026-89590accel/rocket: Fix error path handling in rocket_job_run()
- CVE-2026-89589acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks
- CVE-2026-89588ACPI: APEI: GHES: fix ARM section length accounting after header
- CVE-2026-89587ACPI: pfr_update: fix stack buffer overflow in query_capability()
- CVE-2026-89586ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes
- CVE-2026-89585auxdisplay: charlcd: cancel backlight work on registration failure
- CVE-2026-89584block: validate user space vectors during extraction
- CVE-2026-89583Bluetooth: eir: Fix OOB read in eir_get_service_data()
- CVE-2026-89582bnx2x: fix double free in bnx2x_init_firmware() error path
- CVE-2026-89581bpf, x86: Fix per-CPU address resolution into an extended register
- CVE-2026-89580bpf: Disable preemption in __bpf_get_stack