Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-71095net: stmmac: fix the crash issue for zero copy XDP_TX action
- CVE-2025-71094net: usb: asix: validate PHY address before use
- CVE-2025-71093e1000: fix OOB in e1000_tbi_should_accept()
- CVE-2025-71092RDMA/bnxt_re: Fix OOB write in bnxt_re_copy_err_stats()
- CVE-2025-71091team: fix check for port enabled in team_queue_override_port_prio_changed()
- CVE-2025-71090nfsd: fix nfsd_file reference leak in nfsd4_add_rdaccess_to_wrdeleg()
- CVE-2025-71089iommu: disable SVA when CONFIG_X86 is set
- CVE-2025-71088mptcp: fallback earlier on simult connection
- CVE-2025-71087iavf: fix off-by-one issues in iavf_config_rss_reg()
- CVE-2025-71086net: rose: fix invalid array index in rose_kill_by_device()
- CVE-2025-71085ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
- CVE-2025-71084RDMA/cm: Fix leaking the multicast GID table reference
- CVE-2025-71083drm/ttm: Avoid NULL pointer deref for evicted BOs
- CVE-2025-71082Bluetooth: btusb: revert use of devm_kzalloc in btusb
- CVE-2025-71081ASoC: stm32: sai: fix OF node leak on probe
- CVE-2025-71080ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT
- CVE-2025-71079net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write
- CVE-2025-71078powerpc/64s/slb: Fix SLB multihit issue during SLB preload
- CVE-2025-71077tpm: Cap the number of PCR banks
- CVE-2025-71076drm/xe/oa: Limit num_syncs to prevent oversized allocations
- CVE-2025-71075scsi: aic94xx: fix use-after-free in device removal path
- CVE-2025-71074functionfs: fix the open/removal races
- CVE-2025-71073Input: lkkbd - disable pending work before freeing device
- CVE-2025-71072shmem: fix recovery on rename failures
- CVE-2025-71071iommu/mediatek: fix use-after-free on probe deferral
- CVE-2025-71070ublk: clean up user copy references on ublk server exit
- CVE-2025-71069f2fs: invalidate dentry cache on failed whiteout creation
- CVE-2025-71068svcrdma: bound check rq_pages index in inline path
- CVE-2025-71067ntfs: set dummy blocksize to read boot_block when mounting
- CVE-2025-71066net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change