Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-68185nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
- CVE-2025-68184drm/mediatek: Disable AFBC support on Mediatek DRM driver
- CVE-2025-68183ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
- CVE-2025-68182wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link()
- CVE-2025-68181drm/radeon: Remove calls to drm_put_dev()
- CVE-2025-68180drm/amd/display: Fix NULL deref in debugfs odm_combine_segments
- CVE-2025-68179s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP
- CVE-2025-68178blk-cgroup: fix possible deadlock while configuring policy
- CVE-2025-68177cpufreq/longhaul: handle NULL policy in longhaul_exit
- CVE-2025-68176PCI: cadence: Check for the existence of cdns_pcie::ops before using it
- CVE-2025-68175media: nxp: imx8-isi: Fix streaming cleanup on release
- CVE-2025-68174amd/amdkfd: enhance kfd process check in switch partition
- CVE-2025-68173ftrace: Fix softlockup in ftrace_module_enable
- CVE-2025-68172crypto: aspeed - fix double free caused by devm
- CVE-2025-68171x86/fpu: Ensure XFD state on signal delivery
- CVE-2025-68170drm/radeon: Do not kfree() devres managed rdev
- CVE-2025-68169netpoll: Fix deadlock in memory allocation under spinlock
- CVE-2025-68168jfs: fix uninitialized waitqueue in transaction manager
- CVE-2025-68167gpiolib: fix invalid pointer access in debugfs
- CVE-2025-40363net: ipv6: fix field-spanning memcpy warning in AH output
- CVE-2025-40362ceph: fix multifs mds auth caps issue
- CVE-2025-40360drm/sysfb: Do not dereference NULL pointer in plane reset
- CVE-2025-40359perf/x86/intel: Fix KASAN global-out-of-bounds warning
- CVE-2025-40358riscv: stacktrace: Disable KASAN checks for non-current tasks
- CVE-2025-40357net/smc: fix general protection fault in __smc_diag_dump
- CVE-2025-40356spi: rockchip-sfc: Fix DMA-API usage
- CVE-2025-40355sysfs: check visibility before changing group attribute ownership
- CVE-2025-40354drm/amd/display: increase max link count and fix link->enc NULL pointer access
- CVE-2025-40353arm64: mte: Do not warn if the page is already tagged in copy_highpage()
- CVE-2025-40352platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init