Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-53861ext4: correct grp validation in ext4_mb_good_group
- CVE-2023-53860dm: don't attempt to queue IO under RCU protection
- CVE-2023-53859s390/idle: mark arch_cpu_idle() noinstr
- CVE-2023-53858tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error
- CVE-2023-53857bpf: bpf_sk_storage: Fix invalid wait context lockdep report
- CVE-2023-53856of: overlay: Call of_changeset_init() early
- CVE-2023-53855net: dsa: ocelot: call dsa_tag_8021q_unregister() under rtnl_lock() on driver remove
- CVE-2023-53854ASoC: mediatek: mt8186: Fix use-after-free in driver remove path
- CVE-2023-53853netlink: annotate accesses to nlk->cb_running
- CVE-2023-53852nvme-core: fix memory leak in dhchap_secret_store
- CVE-2023-53851drm/msm/dp: Drop aux devices together with DP controller
- CVE-2023-53850iavf: use internal state to free traffic IRQs
- CVE-2023-53849drm/msm: fix workqueue leak on bind errors
- CVE-2023-53848md/raid5-cache: fix a deadlock in r5l_exit_log()
- CVE-2023-53847usb-storage: alauda: Fix uninit-value in alauda_check_media()
- CVE-2023-53846f2fs: fix to do sanity check on direct node in truncate_dnode()
- CVE-2023-53845nilfs2: fix infinite loop in nilfs_mdt_get_block()
- CVE-2023-53844drm/ttm: Don't leak a resource on swapout move error
- CVE-2023-53843net: openvswitch: reject negative ifindex
- CVE-2023-53842ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove
- CVE-2023-53841devlink: report devlink_port_type_warn source device
- CVE-2023-53840usb: early: xhci-dbc: Fix a potential out-of-bound memory access
- CVE-2023-53839dccp: fix data-race around dp->dccps_mss_cache
- CVE-2023-53838f2fs: synchronize atomic write aborts
- CVE-2023-53837drm/msm: fix NULL-deref on snapshot tear down
- CVE-2023-53836bpf, sockmap: Fix skb refcnt race after locking changes
- CVE-2023-53834iio: adc: ina2xx: avoid NULL pointer dereference on OF device match
- CVE-2023-53833drm/i915: Fix NULL ptr deref by checking new_crtc_state
- CVE-2023-53832md/raid10: fix null-ptr-deref in raid10_sync_request
- CVE-2023-53831net: read sk->sk_family once in sk_mc_loop()