Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-89459s390/percpu: Fix MVIY_PERCPU() with older binutils
- CVE-2026-89458s390/dasd: Do not complete a failed ESE read as successful
- CVE-2026-89457s390/dasd: Guard sysfs discipline callbacks against unallocated private data
- CVE-2026-89456s390/dasd: Propagate partial completion length across ERP recovery
- CVE-2026-89455PCI: plda: Fix use-after-free of event IRQs during teardown
- CVE-2026-89454PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts()
- CVE-2026-89453iommu/amd: Put PCI device after handling PPR faults
- CVE-2026-89452iommu/msm: Unwind probe state on registration failure
- CVE-2026-89451iommu/sva: Set handle->dev before the SVA handle is visible
- CVE-2026-89450iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field
- CVE-2026-89449iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_device_add
- CVE-2026-89448iommu/vt-d: Force requesting ACS when tboot is enabled
- CVE-2026-89447iommufd: Avoid locking internal accesses during unmap
- CVE-2026-89446iommufd: Release current IOAS on xa_store() failure
- CVE-2026-89445iommufd: Fix UAF in selftest IOPF reporting
- CVE-2026-89444platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer
- CVE-2026-89443platform/x86: ISST: Validate level in perf mask ioctls
- CVE-2026-89442platform/x86: ISST: Validate socket ID in clos_assoc ioctl
- CVE-2026-89441mmc: via-sdmmc: cancel card-detect work on remove
- CVE-2026-89440mmc: via-sdmmc: stop card-detect handling on probe failure
- CVE-2026-89439platform/x86: ISST: Add a NULL check for sst_inst[]
- CVE-2026-89438platform/x86: ISST: Validate logical CPU id and clos id
- CVE-2026-89437platform/x86: int1092: Fix potential memory leak in sar_probe()
- CVE-2026-89436platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf[]
- CVE-2026-81018platform/x86: think-lmi: Free system certificate signatures
- CVE-2026-81017platform/chrome: sensorhub: Bound the EC-reported sensor number
- CVE-2026-81016platform/x86/amd/pmc: Propagate SMU errors and validate S2D address
- CVE-2026-81015platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails
- CVE-2026-81014platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store()
- CVE-2026-81013platform/x86: hp-bioscfg: fix heap OOB read on empty password write