Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-68763crypto: starfive - Correctly handle return of sg_nents_for_len
- CVE-2025-68762net: netpoll: initialize work queue before error checks
- CVE-2025-68761hfs: fix potential use after free in hfs_correct_next_unused_CNID()
- CVE-2025-68760iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show
- CVE-2025-68759wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
- CVE-2025-68758backlight: led-bl: Add devlink to supplier LEDs
- CVE-2025-68757drm/vgem-fence: Fix potential deadlock on release
- CVE-2025-68756block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock
- CVE-2025-68755staging: most: remove broken i2c driver
- CVE-2025-68754rtc: amlogic-a4: fix double free caused by devm
- CVE-2025-68753ALSA: firewire-motu: add bounds check in put_user loop for DSP events
- CVE-2025-68752iavf: Implement settime64 with -EOPNOTSUPP
- CVE-2025-68751s390/fpu: Fix false-positive kmsan report in fpu_vstl()
- CVE-2023-54326misc: pci_endpoint_test: Free IRQs before removing the device
- CVE-2023-54325crypto: qat - fix out-of-bounds read
- CVE-2023-54324dm: fix a race condition in retrieve_deps
- CVE-2023-54323cxl/pmem: Fix nvdimm registration races
- CVE-2022-50889dm integrity: Fix UAF in dm_integrity_dtr()
- CVE-2022-50888remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio()
- CVE-2022-50887regulator: core: fix unbalanced of node refcount in regulator_dev_lookup()
- CVE-2023-54322arm64: set __exception_irq_entry with __irq_entry as a default
- CVE-2023-54321driver core: fix potential null-ptr-deref in device_add()
- CVE-2023-54320platform/x86/amd: pmc: Fix memory leak in amd_pmc_stb_debugfs_open_v2()
- CVE-2023-54319pinctrl: at91-pio4: check return value of devm_kasprintf()
- CVE-2022-50886mmc: toshsd: fix return value check of mmc_add_host()
- CVE-2022-50885RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed
- CVE-2022-50884drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- CVE-2023-54318net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add
- CVE-2023-54317dm flakey: don't corrupt the zero page
- CVE-2023-54316refscale: Fix uninitalized use of wait_queue_head_t