Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-89549sunrpc: route to a populated pool in svc_pool_for_cpu()
- CVE-2026-89548SUNRPC: always drain cache_cleaner before destroying a cache_detail
- CVE-2026-89547SUNRPC: Check svc pool percpu counter allocation
- CVE-2026-89546SUNRPC: close backchannel before destroying callback service
- CVE-2026-89545sunrpc: defer rq_argp and rq_resp free until after RCU grace period
- CVE-2026-89544SUNRPC: fix gssx_dec_option_array error path bugs
- CVE-2026-89543sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir
- CVE-2026-89542SUNRPC: harden gss_krb5_unwrap_v2 against short tokens
- CVE-2026-89541SUNRPC: harden gss_unwrap_resp_priv length checks
- CVE-2026-89540sunrpc: init gssp_lock before publishing proc entry
- CVE-2026-89539SUNRPC: reject duplicate CREDS_VALUE options
- CVE-2026-89538SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field
- CVE-2026-89537SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2
- CVE-2026-89536SUNRPC: wait for in-flight client TLS handshake callback
- CVE-2026-89535svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id
- CVE-2026-89534svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails
- CVE-2026-89533svcrdma: Fix offset arithmetic in read_chunk_range
- CVE-2026-89532svcrdma: Fix pcl_for_each_segment for empty chunks
- CVE-2026-89531svcrdma: Reject connection when transport allocation fails
- CVE-2026-89530svcrdma: Reject inline replies that overflow the pull-up buffer
- CVE-2026-89529svcrdma: Reject oversized Read segments at decode time
- CVE-2026-89528svcrdma: Reject Read lists that exceed the page budget
- CVE-2026-89527svcrdma: Use svc_xprt_put to free listener on create failure
- CVE-2026-89526svcrdma: Validate Read chunk positions before reconstruction
- CVE-2026-89525udf: reject VAT indexes equal to the entry count
- CVE-2026-89524wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets
- CVE-2026-89523wifi: mt76: mt7925: cancel pending mlo_pm_work
- CVE-2026-89522media: staging/ipu7: fix async notifier UAF on probe error path
- CVE-2026-89521sched/core: Handle pick_task() releasing the rq lock
- CVE-2026-89520sched/core: Make core-sched flips wait for in-flight selections