Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-89519sched_ext: Replace SCX_RQ_BAL_KEEP with a dispatch verdict return
- CVE-2026-89518sched_ext: Fix this_rq() assumptions in dispatch kfuncs
- CVE-2026-89517sched_ext: Fix rq->core_pick corruption under core scheduling
- CVE-2026-89516sched_ext: Don't BUG_ON a destroyed DSQ in process_deferred_reenq_users
- CVE-2026-89515scsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables()
- CVE-2026-89514scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock
- CVE-2026-89513RISC-V: KVM: Fix PMU event info array size overflow
- CVE-2026-89512remoteproc: scp: Fix device reference leak on failed lookup
- CVE-2026-89511qede: Fix NULL pointer dereference in TPA fragment processing
- CVE-2026-89510RDMA/cxgb4: Cancel reg_work before freeing device on remove
- CVE-2026-89509RDMA/ionic: Embed counter driver data in rdma_counter allocation
- CVE-2026-89508RDMA/ucma: Lock the handler in ucma_set_ib_path()
- CVE-2026-89507RDMA/ucma: Lock the handler in ucma_write_cm_event()
- CVE-2026-89506RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR
- CVE-2026-89505RDMA/uverbs: Guard legacy bundles without method_elm
- CVE-2026-89504regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer
- CVE-2026-89503ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page()
- CVE-2026-89502ring-buffer: Free cpu_buffer::free_page with subbuf_order
- CVE-2026-89501ring-buffer: Hold cpu_buffer::lock when resizing a subbuf
- CVE-2026-89500ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page
- CVE-2026-89499ring-buffer: Stop remote reader update when page swap fails
- CVE-2026-89498orangefs: fix double-free of trailer_buf on readdir copy failure
- CVE-2026-89497orangefs: skip leading spaces before parsing client debug masks
- CVE-2026-89496ocfs2: always run deallocs on copy-on-write completion
- CVE-2026-89495ocfs2: bound namelen in dlm_migrate_request_handler
- CVE-2026-89494ocfs2: validate lengths in dlm_mig_lockres_handler
- CVE-2026-89493ocfs2: validate rl_used against rl_count in refcount block validator
- CVE-2026-89492ocfs2: validate directory-index entry counts when reading metadata
- CVE-2026-89491ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin()
- CVE-2026-89490ocfs2: fix readdir position truncation on 32-bit kernels