Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-71065f2fs: fix to avoid potential deadlock
- CVE-2025-71064net: hns3: using the num_tqps in the vf driver to apply for resources
- CVE-2025-68823ublk: fix deadlock when reading partition table
- CVE-2025-68822Input: alps - fix use-after-free bugs caused by dev3_register_work
- CVE-2025-68821fuse: fix readahead reclaim deadlock
- CVE-2025-68820ext4: xattr: fix null pointer deref in ext4_raw_inode()
- CVE-2025-68819media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
- CVE-2025-68818scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"
- CVE-2025-68817ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
- CVE-2025-68816net/mlx5: fw_tracer, Validate format string parameters
- CVE-2025-68815net/sched: ets: Remove drr class from the active list if it changes to strict
- CVE-2025-68814io_uring: fix filename leak in __io_openat_prep()
- CVE-2025-68813ipvs: fix ipv4 null-ptr-deref in route error path
- CVE-2025-68811svcrdma: use rc_pageoff for memcpy byte offset
- CVE-2025-68810KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot
- CVE-2025-68809ksmbd: vfs: fix race on m_flags in vfs_cache
- CVE-2025-68808media: vidtv: initialize local pointers upon transfer of memory ownership
- CVE-2025-68807block: fix race between wbt_enable_default and IO submission
- CVE-2025-68806ksmbd: fix buffer validation by including null terminator size in EA length
- CVE-2025-68805fuse: fix io-uring list corruption for terminated non-committed requests
- CVE-2025-68804platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver
- CVE-2025-68803NFSD: NFSv4 file creation neglects setting ACL
- CVE-2025-68802drm/xe: Limit num_syncs to prevent oversized allocations
- CVE-2025-68801mlxsw: spectrum_router: Fix neighbour use-after-free
- CVE-2025-68800mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
- CVE-2025-68799caif: fix integer underflow in cffrml_receive()
- CVE-2025-68798perf/x86/amd: Check event before enable to avoid GPF
- CVE-2025-68797char: applicom: fix NULL pointer dereference in ac_ioctl
- CVE-2025-68796f2fs: fix to avoid updating zero-sized extent in extent cache
- CVE-2025-68795ethtool: Avoid overflowing userspace buffer on stats query