Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-40351hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
- CVE-2025-40350net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ
- CVE-2025-40349hfs: validate record offset in hfsplus_bmap_alloc
- CVE-2025-40348slab: Avoid race on slab->obj_exts in alloc_slab_obj_exts
- CVE-2025-40347net: enetc: fix the deadlock of enetc_mdio_lock
- CVE-2025-40346arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
- CVE-2025-40345usb: storage: sddr55: Reject out-of-bound new_pba
- CVE-2025-40344ASoC: Intel: avs: Disable periods-elapsed work when closing PCM
- CVE-2025-40343nvmet-fc: avoid scheduling association deletion twice
- CVE-2025-40342nvme-fc: use lock accessing port_state and rport state
- CVE-2025-40341futex: Don't leak robust_list pointer on exec race
- CVE-2025-40340drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test.
- CVE-2025-40339drm/amdgpu: fix nullptr err of vm_handle_moved
- CVE-2025-40338ASoC: Intel: avs: Do not share the name pointer between components
- CVE-2025-40337net: stmmac: Correctly handle Rx checksum offload errors
- CVE-2025-40336drm/gpusvm: fix hmm_pfn_to_map_order() usage
- CVE-2025-40335drm/amdgpu: validate userq input args
- CVE-2025-40334drm/amdgpu: validate userq buffer virtual address and size
- CVE-2025-40333f2fs: fix infinite loop in __insert_extent_tree()
- CVE-2025-40332drm/amdkfd: Fix mmap write lock not release
- CVE-2025-40331sctp: Prevent TOCTOU out-of-bounds write
- CVE-2025-40330bnxt_en: Shutdown FW DMA in bnxt_shutdown()
- CVE-2025-40329drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb
- CVE-2025-40328smb: client: fix potential UAF in smb2_close_cached_fid()
- CVE-2025-40327perf/core: Fix system hang caused by cpu-clock usage
- CVE-2023-53866ASoC: soc-compress: Reposition and add pcm_mutex
- CVE-2023-53865btrfs: fix warning when putting transaction with qgroups enabled after abort
- CVE-2023-53864drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable()
- CVE-2023-53863netlink: do not hard code device address lenth in fdb dumps
- CVE-2023-53862hfs: fix missing hfs_bnode_get() in __hfs_bnode_create