linux kernel vulnerabilities and fixes

Recent CVEs affecting linux kernel, with upgrade or downgrade steps. 36 tracked.

linux kernel has 36 tracked vulnerabilities, 3 critical and 5 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 36. Most recent: 2026-09-25. Highest priority: CVE-2025-39682 (score 99/100).

• CVE-2026-98090 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: btrfs: restore active device pointers aft
• CVE-2026-98094 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: make dirty_lock IRQ-safe
• CVE-2026-98091 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: btrfs: detach failed sprout device from t
• CVE-2026-98092 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: yc: fix memory leak in acp6x_p
• CVE-2026-63860 HIGH 8.4 UPGRADE In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prefer NLA_NUL_STRING These a
• CVE-2026-98093 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_micfil: balance mclk enable/dis
• CVE-2026-98095 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't cast tpacket_hdr.tp_len
• CVE-2026-31694 HIGH 7.8 UPGRADE MITIGATE In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page ca
• CVE-2026-31514 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: erofs: set fileio bio failed in short rea
• CVE-2026-63831 HIGH 8.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skb_cow_data() befo
• CVE-2026-63808 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after-free in ex
• CVE-2026-63846 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JP
• CVE-2026-63848 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JP
• CVE-2026-63849 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN
• CVE-2026-63847 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JP
• CVE-2026-63850 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN
• CVE-2026-63845 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JP
• CVE-2026-63844 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JP
• CVE-2026-63843 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JP
• CVE-2026-63842 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JP
• CVE-2026-63841 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JP
• CVE-2026-63809 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: bpf: use kvfree() for replaced sysctl wri
• CVE-2026-63823 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: keys: Pin request_key_auth payload in ins
• CVE-2026-63824 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: KEYS: fix overflow in keyctl_pkey_params_
• CVE-2026-63829 HIGH 8.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: net: ip_gre: require CAP_NET_ADMIN in the
• CVE-2026-63830 CRITICAL 9.4 UPGRADE In the Linux kernel, the following vulnerability has been resolved: net: skmsg: preserve sg.copy across SG tr
• CVE-2026-98121 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Fix NULL pointer deref
• CVE-2026-98122 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free in vxlan_m
• CVE-2026-98123 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: sctp: fix soft lockup from unpadded ASCON
• CVE-2026-98124 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: smb/client: invalidate fscache for falloc
• CVE-2026-98125 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page cache in inser
• CVE-2025-39682 CRITICAL 9.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
• CVE-2025-39964 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Race Condition Vulnerability
• CVE-2026-53362 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Unspecified Vulnerability
• CVE-2026-53266 HIGH 8.8 EXPLOITED UPGRADE Linux Kernel Out-of-Bounds Write Vulnerability
• CVE-2022-0995 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Out-of-Bounds Write Vulnerability

FAQ

How do I fix linux kernel vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is linux kernel being exploited right now?

Yes: 5 linux kernel CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which linux kernel CVE should I patch first?

CVE-2025-39682 currently ranks highest (99/100): Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability.

← Back to latest CVEs