Linux vulnerabilities
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-53362ipv6: account for fraggap on the paged allocation path
- CVE-2026-53266netfilter: bridge: make ebt_snat ARP rewrite writable
- CVE-2026-46300net: skbuff: preserve shared-frag marker during coalescing
- CVE-2026-31431crypto: algif_aead - Revert to operating out-of-place
- CVE-2025-39964crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
- CVE-2025-39682tls: fix handling of zero-length records on the rx_list
- CVE-2025-38352posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- CVE-2024-53197ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- CVE-2024-53150ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- CVE-2024-53104media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- CVE-2024-50302HID: core: zero-initialize the report buffer
- CVE-2024-36971net: fix __dst_negative_advice() race
- CVE-2024-1086Use-after-free in Linux kernel's netfilter: nf_tables component
- CVE-2023-0266Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel