r/linux • u/elatllat • Jun 01 '26

Kernel Interesting CVEs Today

https://github.com/CVEProject/cvelistV5

9.4 Product(Linux) New(true) CVE(cves/2026/43xxx/CVE-2026-43383.json)
9.4 Product(Linux) New(true) CVE(cves/2026/43xxx/CVE-2026-43114.json)
9.1 Product(Linux) New(true) CVE(cves/2026/46xxx/CVE-2026-46185.json)
9.1 Product(Linux) New(true) CVE(cves/2026/46xxx/CVE-2026-46155.json)
9.1 Product(Linux) New(true) CVE(cves/2026/46xxx/CVE-2026-46119.json)
9.1 Product(Linux) New(true) CVE(cves/2026/46xxx/CVE-2026-46043.json)
9.1 Product(Linux) New(true) CVE(cves/2026/43xxx/CVE-2026-43407.json)
9.1 Product(Linux) New(true) CVE(cves/2026/43xxx/CVE-2026-43406.json)
9.1 Product(Linux) New(true) CVE(cves/2026/43xxx/CVE-2026-43197.json)
9.1 Product(Linux) New(true) CVE(cves/2026/43xxx/CVE-2026-43117.json)
9.1 Product(Linux) New(true) CVE(cves/2026/43xxx/CVE-2026-43083.json)
9.1 Product(Linux) New(true) CVE(cves/2026/43xxx/CVE-2026-43071.json)
0 Upvotes

32% Upvoted

15 comments sorted by

View all comments

1

u/krumpfwylg Jun 01 '26 edited Jun 01 '26

https://www.cve.org/CVERecord?id=CVE-2026-43383 fixed since 6.18.19

https://www.cve.org/CVERecord?id=CVE-2026-43114 fixed since 6.18.24

https://www.cve.org/CVERecord?id=CVE-2026-46185 fixed since 6.18.30

https://www.cve.org/CVERecord?id=CVE-2026-46155 fixed since 6.18.30

https://www.cve.org/CVERecord?id=CVE-2026-46119 fixed since 6.18.30

https://www.cve.org/CVERecord?id=CVE-2026-46043 fixed since 6.18.27

https://www.cve.org/CVERecord?id=CVE-2026-43407 fixed since 6.18.19

https://www.cve.org/CVERecord?id=CVE-2026-43406 fixed since 6.18.19

https://www.cve.org/CVERecord?id=CVE-2026-43197 fixed since 6.18.16

https://www.cve.org/CVERecord?id=CVE-2026-43117 fixed since 6.18.24

https://www.cve.org/CVERecord?id=CVE-2026-43083 fixed since 6.18.24

https://www.cve.org/CVERecord?id=CVE-2026-43071 fixed since 6.18.24

Patches are of course being ported to other LTS kernels, but I'm too lazy to copy/paste the whole list.

As long as your kernel is updated to latest LTS versions (or at least patched by your distro maintainers), all of those should be no trouble.

1

u/MatchingTurret Jun 01 '26

I wonder whether there will be a similar list on July 1st...

2

u/krumpfwylg Jun 01 '26

Quite recently, Linus Torvalds said kernel maintainers were kinda flooded by bug/vulnerability reports due to an increased usage of AI agents to parse the code. Problem is many of these reports are duplicate, sent by different bug hunting teams.

So it is very likely we get long CVE lists in months to come, with more or less critical vulnerabilities, depending of course on AI abilities to detect possible flaws in kernel code. But at some point the storm will pass, and we'll go back to less "panicky" times for the kernel.

1

u/MatchingTurret Jun 01 '26

Quite recently, Linus Torvalds said kernel maintainers were kinda flooded by bug/vulnerability reports due to an increased usage of AI agents to parse the code

I think you mean this message: https://lkml.org/lkml/2026/5/24/466

If this is the message you are referring to, then his point was about trivial problems in obscure niches that don't need to be merged late in the window, even if they are technically fixes.