Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-81012platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer()
- CVE-2026-81011platform/x86: hp-bioscfg: pass validated element count to package parsers
- CVE-2026-81008interconnect: Fix use after free in icc_get() and of_icc_get_by_index()
- CVE-2026-81007ipmi: ipmb: validate write message length
- CVE-2026-81006ipmi: Remove all sysfs files on registration failure
- CVE-2026-81005ipmi: si: Fix NULL pointer dereference after failed registration
- CVE-2026-81004ipmi:msghandler: Cancel work cleanly on an error
- CVE-2026-81003net/iucv: filter frames in afiucv_hs_rcv() by ingress device
- CVE-2026-81002xdp: fix zero-copy frame layout
- CVE-2026-81001slip: fix use-after-free in sl_sync()
- CVE-2026-81000net: tun: bound receive headroom
- CVE-2026-80999net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO
- CVE-2026-80998net: bnxt: ring the doorbell when SW USO exits early
- CVE-2026-80997net: ipa: fix stalled modem TX queue after runtime resume
- CVE-2026-80996net: l2tp: do not propagate multicast notification errors
- CVE-2026-80995net: mctp: hold a reference to the route device in mctp_route_lookup()
- CVE-2026-80994net: openvswitch: fix flow mask use-after-free on flow deletion
- CVE-2026-80993net: phylink: correctly validate returned PCS in phylink_inband_caps
- CVE-2026-80992net: ravb: avoid dereferencing an invalid PTP clock
- CVE-2026-80991net: ravb: serialize PTP clock teardown
- CVE-2026-80990net: thunderbolt: Release the Rx HopID that was handed out on mismatch
- CVE-2026-80989net: thunderbolt: Mark the connection down when bringing it up fails
- CVE-2026-80988NTB: ntb_transport: Fail TX enqueue when the QP link is down
- CVE-2026-80987NTB: ntb_transport: Reject oversized TX buffers
- CVE-2026-80986net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages
- CVE-2026-80985net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry
- CVE-2026-80984net/smc: do not dereference an unset send buffer on the SMC-D teardown path
- CVE-2026-80983net/smc: fix socket refcount leak in smc_switch_conns()
- CVE-2026-80982net/smc: fix use-after-free in smc_rx_pipe_buf_release()
- CVE-2026-80981net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link()