Linux kernel

This hub aggregates every CVE we track for Linux kernel, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Linux kernel.

• CVE-2026-97521gfs2: fix quota init duplicate scanSep 24, 2026
• CVE-2026-97520gfs2: move quota_init qc iterator incrementSep 24, 2026
• CVE-2026-97519drm/xe: Fix null pointer dereference in devcoredump cleanupSep 24, 2026
• CVE-2026-97518wifi: cfg80211: reject duplicate wiphy cipher suite entriesSep 24, 2026
• CVE-2026-97517wifi: nl80211: reject beacons with bad HE operationSep 24, 2026
• CVE-2026-97516wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result()Sep 24, 2026
• CVE-2026-97515i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845Sep 24, 2026
• CVE-2026-97514media: chips-media: wave5: Fix Reports from Kernel Lock ValidatorSep 24, 2026
• CVE-2026-97513media: chips-media: wave5: Release m2m_ctx after Instance Removed from ListSep 24, 2026
• CVE-2026-97512spi: spi-qcom-qspi: Fix incomplete error handling in runtime PMSep 24, 2026
• CVE-2026-97511wifi: mac80211: avoid out-of-bounds access in monitorSep 24, 2026
• CVE-2026-97510thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response()Sep 24, 2026
• CVE-2026-97509thunderbolt: Keep XDomain reference during the lifetime of a serviceSep 24, 2026
• CVE-2026-97508thunderbolt: Set tb->root_switch to NULL when domain is stoppedSep 24, 2026
• CVE-2026-97507media: dm1105: fix missing error check for dma_alloc_coherentSep 24, 2026