Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-54073tpm: Add !tpm_amd_is_rng_defective() to the hwrng_unregister() call site
- CVE-2023-54072ALSA: pcm: Fix potential data race at PCM memory allocation helpers
- CVE-2023-54071wifi: rtw88: use work to update rate to avoid RCU warning
- CVE-2023-54070igb: clean up in all error paths when enabling SR-IOV
- CVE-2023-54069ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- CVE-2023-54068f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages()
- CVE-2023-54067btrfs: fix race when deleting free space root from the dirty cow roots list
- CVE-2023-54066media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer
- CVE-2023-54065net: dsa: realtek: fix out-of-bounds access
- CVE-2023-54064ipmi:ssif: Fix a memory leak when scanning for an adapter
- CVE-2023-54063fs/ntfs3: Fix OOB read in indx_insert_into_buffer
- CVE-2023-54062ext4: fix invalid free tracking in ext4_xattr_move_to_block()
- CVE-2023-54060iommufd: Set end correctly when doing batch carry
- CVE-2023-54059soc: mediatek: mtk-svs: Enable the IRQ later
- CVE-2023-54058firmware: arm_ffa: Check if ffa_driver remove is present before executing
- CVE-2023-54057iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
- CVE-2023-54056kheaders: Use array declaration instead of char
- CVE-2023-54055RDMA/irdma: Fix memory leak of PBLE objects
- CVE-2023-54053wifi: iwlwifi: pcie: fix possible NULL pointer dereference
- CVE-2023-54052wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU
- CVE-2023-54051net: do not allow gso_size to be set to GSO_BY_FRAGS
- CVE-2023-54050ubifs: Fix memleak when insert_old_idx() failed
- CVE-2023-54049rpmsg: glink: Add check for kstrdup
- CVE-2023-54048RDMA/bnxt_re: Prevent handling any completions after qp destroy
- CVE-2023-54047drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
- CVE-2023-54046crypto: essiv - Handle EBUSY correctly
- CVE-2023-54045audit: fix possible soft lockup in __audit_inode_child()
- CVE-2023-54044spmi: Add a check for remove callback when removing a SPMI driver
- CVE-2023-54043iommufd: Do not add the same hwpt to the ioas->hwpt_list twice
- CVE-2022-50736RDMA/siw: Fix immediate work request flush to completion queue