Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-53750pinctrl: freescale: Fix a memory out of bounds when num_configs is 1
- CVE-2023-53748media: mediatek: vcodec: Fix potential array out-of-bounds in decoder queue_setup
- CVE-2023-53747vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF
- CVE-2023-53746s390/vfio-ap: fix memory leak in vfio_ap device driver
- CVE-2023-53745um: vector: Fix memory leak in vector_config
- CVE-2023-53744soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe
- CVE-2023-53743PCI: Free released resource after coalescing
- CVE-2023-53742kcsan: Avoid READ_ONCE() in read_instrumented_memory()
- CVE-2022-50630mm: hugetlb: fix UAF in hugetlb_handle_userfault
- CVE-2022-50629wifi: rsi: Fix memory leak in rsi_coex_attach()
- CVE-2022-50628drm/gud: Fix UBSAN warning
- CVE-2022-50627wifi: ath11k: fix monitor mode bringup crash
- CVE-2022-50626media: dvb-usb: fix memory leak in dvb_usb_adapter_init()
- CVE-2022-50625serial: amba-pl011: avoid SBSA UART accessing DMACR register
- CVE-2022-50624net: netsec: fix error handling in netsec_register_mdio()
- CVE-2022-50623fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- CVE-2022-50622ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- CVE-2022-50621dm: verity-loadpin: Only trust verity targets with enforcement
- CVE-2022-50620f2fs: fix to invalidate dcc->f2fs_issue_discard in error path
- CVE-2022-50619drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr()
- CVE-2022-50618mmc: meson-gx: fix return value check of mmc_add_host()
- CVE-2022-50617drm/amdgpu/powerplay/psm: Fix memory leak in power state init
- CVE-2022-50616regulator: core: Use different devices for resource allocation and DT lookup
- CVE-2022-50615perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map()
- CVE-2022-50614misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- CVE-2022-50583md/raid0, raid10: Don't set discard sectors for request queue
- CVE-2025-40326NFSD: Define actions for the new time_deleg FATTR4 attributes
- CVE-2025-40324NFSD: Fix crash in nfsd4_read_release()
- CVE-2025-40323fbcon: Set fb_display[i]->mode to NULL when the mode is released
- CVE-2025-40322fbdev: bitblit: bound-check glyph index in bit_putcs*