Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-68248vmw_balloon: indicate success when effectively deflating during migration
- CVE-2025-68247posix-timers: Plug potential memory leak in do_timer_create()
- CVE-2025-68246ksmbd: close accepted socket when per-IP limit rejects connection
- CVE-2025-68245net: netpoll: fix incorrect refcount handling causing incorrect cleanup
- CVE-2025-68244drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD
- CVE-2025-68243NFS: Check the TLS certificate fields in nfs_match_client()
- CVE-2025-68242NFS: Fix LTP test failures when timestamps are delegated
- CVE-2025-68241ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe
- CVE-2025-68240nilfs2: avoid having an active sc_timer before freeing sci
- CVE-2025-68239binfmt_misc: restore write access before closing files opened by open_exec()
- CVE-2025-68238mtd: rawnand: cadence: fix DMA device NULL pointer dereference
- CVE-2025-68237mtdchar: fix integer overflow in read/write ioctls
- CVE-2025-68236scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3)
- CVE-2025-68235nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot
- CVE-2025-68234io_uring/cmd_net: fix wrong argument types for skb_queue_splice()
- CVE-2025-68233drm/tegra: Add call to put_pid()
- CVE-2025-68232veth: more robust handing of race to avoid txq getting stuck
- CVE-2025-68231mm/mempool: fix poisoning order>0 pages with HIGHMEM
- CVE-2025-68230drm/amdgpu: fix gpu page fault after hibernation on PF passthrough
- CVE-2025-68229scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
- CVE-2025-68228drm/plane: Fix create_in_format_blob() return value
- CVE-2025-68227mptcp: Fix proto fallback detection with BPF
- CVE-2025-68226smb: client: fix incomplete backport in cfids_invalidation_worker()
- CVE-2025-68225lib/test_kho: check if KHO is enabled
- CVE-2025-68223drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
- CVE-2025-68222pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc
- CVE-2025-68221mptcp: fix address removal logic in mptcp_pm_nl_rm_addr
- CVE-2025-68220net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error
- CVE-2025-68219cifs: fix memory leak in smb3_fs_context_parse_param error path
- CVE-2025-68218nvme-multipath: fix lockdep WARN due to partition scan work