Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-68794iomap: adjust read range correctly for non-block-aligned positions
- CVE-2025-68793drm/amdgpu: fix a job->pasid access race in gpu recovery
- CVE-2025-68792tpm2-sessions: Fix out of range indexing in name_size
- CVE-2025-68791fuse: missing copy_finish in fuse-over-io-uring argument copies
- CVE-2025-68790net/mlx5: Fix double unregister of HCA_PORTS component
- CVE-2025-68788fsnotify: do not generate ACCESS/MODIFY events on child for special files
- CVE-2025-68787netrom: Fix memory leak in nr_sendmsg()
- CVE-2025-68786ksmbd: skip lock-range check on equal size to avoid size==0 underflow
- CVE-2025-68785net: openvswitch: fix middle attribute validation in push_nsh() action
- CVE-2025-68784xfs: fix a UAF problem in xattr repair
- CVE-2025-68783ALSA: usb-mixer: us16x08: validate meter packet indices
- CVE-2025-68782scsi: target: Reset t_task_cdb pointer in error case
- CVE-2025-68781usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal
- CVE-2025-68780sched/deadline: only set free_cpus for online runqueues
- CVE-2025-68779net/mlx5e: Avoid unregistering PSP twice
- CVE-2025-68778btrfs: don't log conflicting inode if it's a dir moved in the current transaction
- CVE-2025-68777Input: ti_am335x_tsc - fix off-by-one error in wire_order validation
- CVE-2025-68776net/hsr: fix NULL pointer dereference in prp_get_untagged_frame()
- CVE-2025-68775net/handshake: duplicate handshake cancellations leak socket
- CVE-2025-68774hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create
- CVE-2025-68773spi: fsl-cpm: Check length parity before switching to 16 bit mode
- CVE-2025-68772f2fs: fix to avoid updating compression context during writeback
- CVE-2025-68771ocfs2: fix kernel BUG in ocfs2_find_victim_chain
- CVE-2025-68770bnxt_en: Fix XDP_TX path
- CVE-2025-68769f2fs: fix return value of f2fs_recover_fsync_data()
- CVE-2025-68768inet: frags: flush pending skbs in fqdir_pre_exit()
- CVE-2025-68767hfsplus: Verify inode mode when loading from disk
- CVE-2025-68766irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
- CVE-2025-68765mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
- CVE-2025-68764NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags