Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-71154net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
- CVE-2025-71153ksmbd: Fix memory leak in get_file_all_info()
- CVE-2025-71152net: dsa: properly keep track of conduit reference
- CVE-2025-71151cifs: Fix memory and information leak in smb3_reconfigure()
- CVE-2025-71150ksmbd: Fix refcount leak when invalid session is found on session lookup
- CVE-2025-71148net/handshake: restore destructor on submit failure
- CVE-2025-71147KEYS: trusted: Fix a memory leak in tpm2_load_cmd
- CVE-2025-71146netfilter: nf_conncount: fix leaked ct in error paths
- CVE-2025-71145usb: phy: isp1301: fix non-OF device reference imbalance
- CVE-2026-22977net: sock: fix hardened usercopy panic in sock_recv_errqueue
- CVE-2026-22976net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset
- CVE-2025-71144mptcp: ensure context reset on disconnect()
- CVE-2025-71143clk: samsung: exynos-clkout: Assign .num before accessing .hws
- CVE-2025-71142cpuset: fix warning when disabling remote partition
- CVE-2025-71141drm/tilcdc: Fix removal actions in case of failed probe
- CVE-2025-71140media: mediatek: vcodec: Use spinlock for context list protection lock
- CVE-2025-71139kernel/kexec: fix IMA when allocation happens in CMA area
- CVE-2025-71138drm/msm/dpu: Add missing NULL pointer check for pingpong interface
- CVE-2025-71137octeontx2-pf: fix "UBSAN: shift-out-of-bounds error"
- CVE-2025-71136media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status()
- CVE-2025-71135md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt()
- CVE-2025-71134mm/page_alloc: change all pageblocks migrate type on coalescing
- CVE-2025-71133RDMA/irdma: avoid invalid read in irdma_net_event
- CVE-2025-71132smc91x: fix broken irq-context in PREEMPT_RT
- CVE-2025-71131crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
- CVE-2025-71130drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer
- CVE-2025-71129LoongArch: BPF: Sign extend kfunc call arguments
- CVE-2025-71128erspan: Initialize options_len before referencing options.
- CVE-2025-71127wifi: mac80211: Discard Beacon frames to non-broadcast address
- CVE-2025-71126mptcp: avoid deadlock on fallback while reinjecting