Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-68292mm/memfd: fix information leak in hugetlb folios
- CVE-2025-68291mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose().
- CVE-2025-68290most: usb: fix double free on late probe failure
- CVE-2025-68289usb: gadget: f_eem: Fix memory leak in eem_unwrap
- CVE-2025-68288usb: storage: Fix memory leak in USB bulk transport
- CVE-2025-68287usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths
- CVE-2025-68286drm/amd/display: Check NULL before accessing
- CVE-2025-68285libceph: fix potential use-after-free in have_mon_and_osd_map()
- CVE-2025-68284libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
- CVE-2025-68283libceph: replace BUG_ON with bounds check for map->max_osd
- CVE-2025-68282usb: gadget: udc: fix use-after-free in usb_gadget_state_work
- CVE-2025-68281ASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-list
- CVE-2025-68266bfs: Reconstruct file type when loading from disk
- CVE-2025-68265nvme: fix admin request_queue lifetime
- CVE-2025-68264ext4: refresh inline data size before write operations
- CVE-2025-68263ksmbd: ipc: fix use-after-free in ipc_msg_send_request
- CVE-2025-68262crypto: zstd - fix double-free in per-CPU stream cleanup
- CVE-2025-68261ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()
- CVE-2025-68260rust_binder: fix race condition on death_list
- CVE-2025-68259KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced
- CVE-2025-68258comedi: multiq3: sanitize config options in multiq3_attach()
- CVE-2025-68257comedi: check device's attached status in compat ioctls
- CVE-2025-68256staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser
- CVE-2025-68255staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing
- CVE-2025-68254staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing
- CVE-2025-68253mm: don't spin in add_stack_record when gfp flags don't allow
- CVE-2025-68252misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup
- CVE-2025-68251erofs: avoid infinite loops due to corrupted subpage compact indexes
- CVE-2025-68250hung_task: fix warnings caused by unaligned lock pointers
- CVE-2025-68249most: usb: hdm_probe: Fix calling put_device() before device initialization