Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-54284media: av7110: prevent underflow in write_ts_to_decoder()
- CVE-2023-54283bpf: Address KCSAN report on bpf_lru_list
- CVE-2023-54282media: tuners: qt1010: replace BUG_ON with a regular error
- CVE-2023-54281btrfs: release path before inode lookup during the ino lookup ioctl
- CVE-2023-54280cifs: fix potential race when tree connecting ipc
- CVE-2022-50883bpf: Prevent decl_tag from being referenced in func_proto arg
- CVE-2022-50882media: uvcvideo: Fix memory leak in uvc_gpio_parse
- CVE-2022-50881wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect()
- CVE-2022-50880wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- CVE-2022-50879objtool: Fix SEGFAULT
- CVE-2022-50878gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- CVE-2022-50877net: broadcom: bcm4908_enet: update TX stats after actual transmission
- CVE-2022-50876usb: musb: Fix musb_gadget.c rxstate overflow bug
- CVE-2022-50875of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
- CVE-2022-50874RDMA/erdma: Fix refcount leak in erdma_mmap
- CVE-2023-54279MIPS: fw: Allow firmware to pass a empty env
- CVE-2023-54278s390/vmem: split pages when debug pagealloc is enabled
- CVE-2023-54277fbdev: udlfb: Fix endpoint check
- CVE-2023-54276nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net
- CVE-2023-54275wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup
- CVE-2023-54274RDMA/srpt: Add a check for valid 'mad_agent' pointer
- CVE-2023-54273xfrm: Fix leak of dev tracker
- CVE-2023-54272fs/ntfs3: Fix a possible null-pointer dereference in ni_clear()
- CVE-2023-54271blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init
- CVE-2023-54270media: usb: siano: Fix use after free bugs caused by do_submit_urb
- CVE-2023-54269SUNRPC: double free xprt_ctxt while still in use
- CVE-2023-54268debugobjects: Don't wake up kswapd from fill_pool()
- CVE-2023-54267powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT
- CVE-2023-54266media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()
- CVE-2023-54265ipv6: Fix an uninit variable access bug in __ip6_make_skb()