Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-68217Input: pegasus-notetaker - fix potential out-of-bounds access
- CVE-2025-68216LoongArch: BPF: Disable trampoline for kernel module function trace
- CVE-2025-68215ice: fix PTP cleanup on driver removal in error path
- CVE-2025-68214timers: Fix NULL function pointer race in timer_shutdown_sync()
- CVE-2025-68213idpf: fix possible vport_config NULL pointer deref in remove
- CVE-2025-68212fs: Fix uninitialized 'offp' in statmount_string()
- CVE-2025-68211ksm: use range-walk function to jump over holes in scan_get_next_rmap_item
- CVE-2025-68210erofs: avoid infinite loop due to incomplete zstd-compressed data
- CVE-2025-68209mlx5: Fix default values in create CQ
- CVE-2025-68208bpf: account for current allocated stack depth in widen_imprecise_scalars()
- CVE-2025-68207drm/xe/guc: Synchronize Dead CT worker with unbind
- CVE-2025-68206netfilter: nft_ct: add seqadj extension for natted connections
- CVE-2025-68205ALSA: hda/hdmi: Fix breakage at probing nvhdmi-mcp driver
- CVE-2025-68204pmdomain: arm: scmi: Fix genpd leak on provider registration failure
- CVE-2025-68202sched_ext: Fix unsafe locking in the scx_dump_state()
- CVE-2025-68201drm/amdgpu: remove two invalid BUG_ON()s
- CVE-2025-68200bpf: Add bpf_prog_run_data_pointers()
- CVE-2025-68199codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for slabobj_ext
- CVE-2025-68198crash: fix crashkernel resource shrink
- CVE-2025-68197bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap()
- CVE-2025-68196drm/amd/display: Cache streams targeting link when performing LT automation
- CVE-2025-68194media: imon: make send_packet() more robust
- CVE-2025-68193drm/xe/guc: Add devm release action to safely tear down CT
- CVE-2025-68192net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
- CVE-2025-68191udp_tunnel: use netdev_warn() instead of netdev_WARN()
- CVE-2025-68190drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()
- CVE-2025-68189drm/msm: Fix GEM free for imported dma-bufs
- CVE-2025-68188tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()
- CVE-2025-68187net: mdio: Check regmap pointer returned by device_node_to_regmap()
- CVE-2025-68186ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up