Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-53991drm/msm/dpu: Disallow unallocated resources to be returned
- CVE-2023-53990SMB3: Add missing locks to protect deferred close file list
- CVE-2023-53989arm64: mm: fix VA-range sanity check
- CVE-2023-53988fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de()
- CVE-2023-53987ping: Fix potentail NULL deref for /proc/net/icmp.
- CVE-2023-53986mips: bmips: BCM6358: disable RAC flush for TP1
- CVE-2023-53867ceph: fix potential use-after-free bug when trimming caps
- CVE-2022-50711net: ethernet: mtk_eth_soc: fix possible memory leak in mtk_probe()
- CVE-2022-50710ice: set tx_tstamps when creating new Tx rings via ethtool
- CVE-2022-50709wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- CVE-2022-50708HSI: ssi_protocol: fix potential resource leak in ssip_pn_open()
- CVE-2022-50707virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()
- CVE-2022-50706net/ieee802154: don't warn zero-sized raw_sendmsg()
- CVE-2022-50705io_uring/rw: defer fsnotify calls to task context
- CVE-2022-50704USB: gadget: Fix use-after-free during usb config switch
- CVE-2022-50703soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- CVE-2022-50702vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()
- CVE-2022-50701wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host
- CVE-2022-50700wifi: ath10k: Delay the unmapping of the buffer
- CVE-2022-50699selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()
- CVE-2022-50698ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- CVE-2022-50697mrp: introduce active flags to prevent UAF when applicant uninit
- CVE-2025-68733smack: fix bug: unprivileged task can create labels
- CVE-2025-68732gpu: host1x: Fix race in syncpt alloc/free
- CVE-2025-68731accel/amdxdna: Fix an integer overflow in aie2_query_ctx_status_array()
- CVE-2025-68730accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context()
- CVE-2025-68729wifi: ath12k: Fix MSDU buffer types handling in RX error path
- CVE-2025-68728ntfs3: fix uninit memory after failed mi_read in mi_format_new
- CVE-2025-68727ntfs3: Fix uninit buffer allocated by __getname()
- CVE-2025-68726crypto: aead - Fix reqsize handling