Linux kernel vulnerabilities and fixes

CVEs that mention Linux kernel, ranked by priority. 336 tracked.

Linux kernel has 336 tracked vulnerabilities, 12 critical and 5 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 132. Most recent: 2026-10-23. Highest priority: CVE-2025-39682 (score 99/100).

CVE-2025-39682 CRITICAL 9.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
CVE-2022-0995 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Out-of-Bounds Write Vulnerability
CVE-2025-39964 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Race Condition Vulnerability
CVE-2026-53266 HIGH 8.8 EXPLOITED UPGRADE Linux Kernel Out-of-Bounds Write Vulnerability
CVE-2026-53362 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Unspecified Vulnerability
CVE-2026-63808 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after-free in ex
CVE-2026-64439 CRITICAL 9.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead impl
CVE-2026-63830 CRITICAL 9.4 UPGRADE In the Linux kernel, the following vulnerability has been resolved: net: skmsg: preserve sg.copy across SG tr
CVE-2026-64312 HIGH 7.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non
CVE-2026-98490 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fix helper U
CVE-2026-98548 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: sctp: discard the rest of the packet on a
CVE-2026-98959 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix xattr replace when multiple xa
CVE-2026-99078 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer relea
CVE-2026-99079 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer relea
CVE-2026-98432 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an
CVE-2026-64313 HIGH 8.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli m
CVE-2026-98549 CRITICAL 9.1 In the Linux kernel, the following vulnerability has been resolved: tcp: prevent collapsing skbs across bound
CVE-2026-98532 HIGH 8.1 In the Linux kernel, the following vulnerability has been resolved: ipv6: do not let ipv6_find_hdr() return a
CVE-2026-98968 HIGH 8.1 In the Linux kernel, the following vulnerability has been resolved: amt: send the relay's General Query direc
CVE-2026-99064 HIGH 8.1 In the Linux kernel, the following vulnerability has been resolved: cipso: adjust cached option offsets when
CVE-2026-63831 HIGH 8.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skb_cow_data() befo
CVE-2026-98870 HIGH 8.8 In the Linux kernel, the following vulnerability has been resolved: ksmbd: remove stale channels from all ses
CVE-2026-99059 HIGH 7.7 In the Linux kernel, the following vulnerability has been resolved: wireguard: noise: reject response consump
CVE-2026-74534 HIGH 8.8 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix refcounting of iso_co
CVE-2026-98401 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: fix stale transport header
CVE-2026-98464 CRITICAL 9.3 In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Synchronize hrtimer callback
CVE-2026-98550 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: tipc: reject invalid and unexpected GRP_A
CVE-2026-98964 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: nvmet: use the local P2P device on metada
CVE-2026-98965 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: ice: Restore Ordered MMIO Writes for Tx D
CVE-2026-99030 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't leave stale bytes in s
CVE-2026-99046 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak on error descrip
CVE-2026-99077 HIGH 7.4 In the Linux kernel, the following vulnerability has been resolved: ipv4: udp: Create exceptions before socke
CVE-2026-99081 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: bnxt_en: fix DMA mapping length for padde
CVE-2026-98479 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi_tcp: Check the data direct
CVE-2026-98952 HIGH 7.3 In the Linux kernel, the following vulnerability has been resolved: pfcp: make sure the SEID is linear before
CVE-2026-98980 HIGH 8.8 In the Linux kernel, the following vulnerability has been resolved: namei: don't reveal overmounted entries i
CVE-2026-98981 HIGH 8.8 In the Linux kernel, the following vulnerability has been resolved: namespace: unhash a dentry before detachi
CVE-2026-98988 HIGH 8.8 In the Linux kernel, the following vulnerability has been resolved: namespace: keep covered mounts covered in
CVE-2026-99082 HIGH 8.8 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use active memslots for the per
CVE-2026-99083 HIGH 8.8 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix heap out-of-bounds write in kr
CVE-2023-7356 HIGH 8.8 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data
CVE-2026-98374 HIGH 8.8 In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmit_skb
CVE-2026-98451 HIGH 8.8 In the Linux kernel, the following vulnerability has been resolved: smb: client: use finish_no_open() for non
CVE-2026-98978 HIGH 8.4 In the Linux kernel, the following vulnerability has been resolved: namespace: never expire a locked mount L
CVE-2026-99042 HIGH 8.4 In the Linux kernel, the following vulnerability has been resolved: io_uring/net: populate CONNECT filter fie
CVE-2026-63829 HIGH 8.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: net: ip_gre: require CAP_NET_ADMIN in the
CVE-2026-64438 HIGH 8.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown rac
CVE-2026-98405 HIGH 8.1 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check
CVE-2026-98466 HIGH 8.2 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Transfer the hyp stack pages
CVE-2026-98499 HIGH 8.1 In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix OOB read in wacom_wac_pen
CVE-2026-63860 HIGH 8.4 UPGRADE In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prefer NLA_NUL_STRING These a
CVE-2026-98454 HIGH 8.1 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context out-of-bo
CVE-2026-98487 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: net: bridge: mdb: restart port group walk
CVE-2026-98491 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: avoid modify
CVE-2026-98507 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix missing barrier between anon
CVE-2026-98510 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: nuke PTs only after unlinking
CVE-2026-98515 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix double-free in nvif_vmm_
CVE-2026-98517 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/uvmm: fix UAF in nouveau_uvmm
CVE-2026-98520 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix use-after-free and multi-
CVE-2026-98524 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: rds: ib: Clear the sg list when mapping a
CVE-2026-98889 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix sched scan IE siz
CVE-2026-98899 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: mark the rcu locked are
CVE-2026-98944 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: HID: steam: Refactor registration This r
CVE-2026-98945 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: HID: steam: Rearrange teardown sequence
CVE-2026-98974 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range-to-eof file size
CVE-2026-98975 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: xfs: stop exchanging reflink flags when e
CVE-2026-98976 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: namespace: keep the lock on a mount that
CVE-2026-98982 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: namespace: don't let a pseudo dentry beco
CVE-2026-98991 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: namespace: queue a mount only once for mo
CVE-2026-98993 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: namespace: don't inherit MNT_UMOUNT in cl
CVE-2026-98995 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: namespace: reset the old parent's ->overm
CVE-2026-98999 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix stale pinned_link entry when
CVE-2026-99002 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from us
CVE-2026-99006 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Prevent overstepping exec a
CVE-2026-99012 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Serialize concurrent conn
CVE-2026-99013 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Reject concurrent BIS lis
CVE-2026-99014 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix command skb life
CVE-2026-99016 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: riscv: futex: untag the user pointer befo
CVE-2026-99018 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: riscv: entry: gate shadow call stack relo
CVE-2026-99032 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: net/smc: protect clcsock lifetime in smc_
CVE-2026-99050 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: fix race when arming the IRQ
CVE-2026-99051 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: fsverity: RCU-delay the freeing of struct
CVE-2026-99053 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: tipc: hold a reference to nodes found by
CVE-2026-99054 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: tipc: destroy topsrv workqueues before cl
CVE-2026-99056 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: strparser: make sure __strp_recv isn't ru
CVE-2026-31694 HIGH 7.8 UPGRADE MITIGATE In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page ca
CVE-2026-63841 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JP
CVE-2026-63842 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JP
CVE-2026-63843 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JP
CVE-2026-63844 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JP
CVE-2026-63845 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JP
CVE-2026-63846 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JP
CVE-2026-63847 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JP
CVE-2026-63848 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JP
CVE-2026-63849 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN
CVE-2026-63850 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN
CVE-2026-64270 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized devic
CVE-2026-64271 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index
CVE-2026-64272 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MM
CVE-2026-64273 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported
CVE-2026-64274 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported
CVE-2026-64276 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F30 key
CVE-2026-64277 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F3A key
CVE-2026-64304 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component
CVE-2026-64311 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: loongson - Remove broken and unus
CVE-2026-64529 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character dev
CVE-2026-98378 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled links in link iterato
CVE-2026-98381 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: veth: manage XDP program pointers during
CVE-2026-98383 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_skb_pull_data() for LWT
CVE-2026-98441 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: avoid modifying shared
CVE-2026-98442 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix helper UAF due to
CVE-2026-98443 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: xfs: fix cursor and pointer handling when
CVE-2026-98497 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix swapped IPv6 IPsec policy
CVE-2026-98555 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: llc: fix skb UAF and leaks on llc_mac_hdr
CVE-2026-98911 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix the error path in dpaa2
CVE-2026-63809 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: bpf: use kvfree() for replaced sysctl wri
CVE-2026-63823 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: keys: Pin request_key_auth payload in ins
CVE-2026-63824 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: KEYS: fix overflow in keyctl_pkey_params_
CVE-2026-64305 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: qat - protect service table itera
CVE-2026-64599 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in
CVE-2026-74632 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix huge_zero_pfn race P
CVE-2026-98093 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_micfil: balance mclk enable/dis
CVE-2026-98122 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free in vxlan_m
CVE-2026-98376 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: bpf: Use array_map_meta_equal for percpu
CVE-2026-98382 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on ot
CVE-2026-98385 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple sched_cache_group f
CVE-2026-98436 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer expo
CVE-2026-98485 HIGH 7.1 In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_rt: fix zero-address non-
CVE-2026-98501 HIGH 7.1 In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix use-after-free on input2 r
CVE-2026-98543 HIGH 7.3 In the Linux kernel, the following vulnerability has been resolved: bpf: fs/xattr: don't assume the inode is
CVE-2026-98869 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zext_dst based on static regis
CVE-2026-98932 HIGH 7.4 In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Fix use-after-free in error
CVE-2023-6915 MEDIUM 6.2 MITIGATE DOWNGRADE A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel
CVE-2026-98419 HIGH 7.0 In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix out-of-bounds write in
CVE-2026-98465 HIGH 7.0 In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Serialize IMSIC attributes w
CVE-2026-98469 HIGH 7.1 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix AArch32 DBGBXVR<n> handli
CVE-2026-98471 HIGH 7.1 In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do cache maintenance on the sou
CVE-2026-98512 HIGH 7.1 In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: RCU-free the scheduler-conta
CVE-2026-98518 HIGH 7.0 In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: pin VRAM for the whole
CVE-2026-98895 HIGH 7.0 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Handle destroying table th
CVE-2026-98927 HIGH 7.0 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix life cycle of the nes
CVE-2026-98941 HIGH 7.0 In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable large folios on encryp
CVE-2026-99011 HIGH 7.1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: serialise sco_conn lifeti
CVE-2026-99017 HIGH 7.0 In the Linux kernel, the following vulnerability has been resolved: riscv: errata: select RISCV_ALTERNATIVE_E
CVE-2026-98440 HIGH 7.0 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Delay freeing of shadow S
CVE-2026-98456 HIGH 7.0 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix race in read_unconf_
CVE-2026-64237 HIGH 7.1 UPGRADE In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - validate firmware size
CVE-2026-64315 HIGH 7.0 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel t
CVE-2026-31514 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: erofs: set fileio bio failed in short rea
CVE-2026-64307 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for i

FAQ

How do I fix Linux kernel vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Linux kernel being exploited right now?

Yes: 5 Linux kernel CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which Linux kernel CVE should I patch first?

CVE-2025-39682 currently ranks highest (99/100): Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability.

Newest Linux kernel CVEs

CVE-2026-99087 HIGH n/a 2026-10-23: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NUL
CVE-2026-99086 HIGH n/a 2026-10-23: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: validat
CVE-2026-99085 HIGH n/a 2026-10-23: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix CPU ho
CVE-2026-99084 HIGH n/a 2026-10-23: In the Linux kernel, the following vulnerability has been resolved: readdir: take no inod
CVE-2026-99083 HIGH 8.8 2026-10-23: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix heap out-o

Live from the NVD (last 120 days)

Loading…

← Back to latest CVEs