Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-68322parisc: Avoid crash due to unaligned access in unwinder
- CVE-2025-68321page_pool: always add GFP_NOWARN for ATOMIC allocations
- CVE-2025-68320lan966x: Fix sleeping in atomic context
- CVE-2025-68319netconsole: Acquire su_mutex before navigating configs hierarchy
- CVE-2025-68318clk: thead: th1520-ap: set all AXI clocks to CLK_IS_CRITICAL
- CVE-2025-68317io_uring/zctx: check chained notif contexts
- CVE-2025-68316scsi: ufs: core: Fix invalid probe error return value
- CVE-2025-68315f2fs: fix to detect potential corrupted nid in free_nid_list
- CVE-2025-68314drm/msm: make sure last_fence is always updated
- CVE-2025-68313x86/CPU/AMD: Add RDSEED fix for Zen5
- CVE-2025-68312usbnet: Prevents free active kevent
- CVE-2025-68311tty: serial: ip22zilog: Use platform device for probing
- CVE-2025-68310s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump
- CVE-2025-68309PCI/AER: Fix NULL pointer access by aer_info
- CVE-2025-68308can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
- CVE-2025-68307can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs
- CVE-2025-68306Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface
- CVE-2025-68305Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
- CVE-2025-68304Bluetooth: hci_core: lookup hci_conn on RX path on protocol side
- CVE-2025-68303platform/x86: intel: punit_ipc: fix memory corruption
- CVE-2025-68302net: sxgbe: fix potential NULL dereference in sxgbe_rx()
- CVE-2025-68301net: atlantic: fix fragment overflow handling in RX path
- CVE-2025-68300fs/namespace: fix reference leak in grab_requested_mnt_ns
- CVE-2025-68299afs: Fix delayed allocation of a cell's anonymous key
- CVE-2025-68298Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref
- CVE-2025-68297ceph: fix crash in process_v2_sparse_read() for encrypted directories
- CVE-2025-68296drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup
- CVE-2025-68295smb: client: fix memory leak in cifs_construct_tcon()
- CVE-2025-68294io_uring/net: ensure vectored buffer node import is tied to notification
- CVE-2025-68293mm/huge_memory: fix NULL pointer deference when splitting folio