Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-89579bpf: Harden bloom filter sizing and indexing on 32-bit kernels
- CVE-2026-89578dm-io: clone the source bio instead of copying its biovec
- CVE-2026-89577dm-io: report non-retryable errors separatedly
- CVE-2026-89576dm-era: fix shadowed superblock leak on take-snap failure
- CVE-2026-89575dm raid1: reserve space for NUL-terminator in build_constructor_string()
- CVE-2026-89574dm array: validate array block headers on read
- CVE-2026-89573dm array: reject an array block whose value size is not the caller's
- CVE-2026-89572cpufreq: apple-soc: Fix OPP table cleanup
- CVE-2026-89571cxl/features: bound fwctl command payload to the input buffer
- CVE-2026-89570cxl/mce: Make the MCE notifier per-region
- CVE-2026-89569Bluetooth: RFCOMM: serialize security confirmation handling
- CVE-2026-89568kho: fix size calculation in kho_preserved_memory_reserve()
- CVE-2026-89567jbd2: bound shrinker scans by examined checkpoint buffers
- CVE-2026-89566jbd2: check need_resched() when skipping busy checkpoint buffers
- CVE-2026-89565ipip: fix skb leak in collect_md mode when metadata_dst allocation fails
- CVE-2026-89564ip: orphan prefetched skbs before multicast forwarding
- CVE-2026-89563ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit()
- CVE-2026-89562ip6_gre: fix hardware header length for NBMA tunnels
- CVE-2026-89561ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv()
- CVE-2026-89560landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation
- CVE-2026-89559libnvdimm/labels: Prevent integer overflow in __nd_label_validate()
- CVE-2026-89558md/raid10: fix still_degraded being inverted in raid10_sync_request()
- CVE-2026-89557md: do overflow check for sb->bblog_shift in super_1_load()
- CVE-2026-89556module: validate string table section types
- CVE-2026-89555mpls: reload header after pskb_may_pull()
- CVE-2026-89554mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction
- CVE-2026-89553nouveau/gem: reserve the bo in the info ioctl around the vma lookup
- CVE-2026-89552params: fix charp corruption on allocation failure
- CVE-2026-89551SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow
- CVE-2026-89550SUNRPC: svcauth_gss: enforce krb5 token minimum length