Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-68352spi: ch341: fix out-of-bounds memory access in ch341_transfer_one
- CVE-2025-68351exfat: fix refcount leak in exfat_find
- CVE-2025-68350exfat: fix divide-by-zero in exfat_allocate_bitmap
- CVE-2025-68349NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
- CVE-2025-68348block: fix memory leak in __blkdev_issue_zero_pages
- CVE-2025-68347ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
- CVE-2025-68346ALSA: dice: fix buffer overflow in detect_stream_formats()
- CVE-2025-68345ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
- CVE-2025-68344ALSA: wavefront: Fix integer overflow in sample size validation
- CVE-2025-68343can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header
- CVE-2025-68342can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data
- CVE-2025-68341veth: reduce XDP no_direct return section to fix race
- CVE-2025-68340team: Move team device type change at the end of team_port_add
- CVE-2025-68339atm/fore200e: Fix possible data race in fore200e_open()
- CVE-2025-68338net: dsa: microchip: Don't free uninitialized ksz_irq
- CVE-2025-68337jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted
- CVE-2025-68336locking/spinlock/debug: Fix data-race in do_raw_write_lock
- CVE-2025-68335comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel()
- CVE-2025-68334platform/x86/amd/pmc: Add support for Van Gogh SoC
- CVE-2025-68333sched_ext: Fix possible deadlock in the deferred_irq_workfn()
- CVE-2025-68332comedi: c6xdigio: Fix invalid PNP driver unregistration
- CVE-2025-68331usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer
- CVE-2025-68330iio: accel: bmc150: Fix irq assumption regression
- CVE-2025-68329tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs
- CVE-2025-68328firmware: stratix10-svc: fix bug in saving controller data
- CVE-2025-68327usb: renesas_usbhs: Fix synchronous external abort on unbind
- CVE-2025-68326drm/xe/guc: Fix stack_depot usage
- CVE-2025-68325net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
- CVE-2025-68324scsi: imm: Fix use-after-free bug caused by unfinished delayed work
- CVE-2025-68323usb: typec: ucsi: fix use-after-free caused by uec->work