Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-40321wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
- CVE-2025-40320smb: client: fix potential cfid UAF in smb2_query_info_compound
- CVE-2025-40319bpf: Sync pending IRQ work before freeing ring buffer
- CVE-2025-40318Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once
- CVE-2025-40317regmap: slimbus: fix bus_context pointer in regmap init calls
- CVE-2025-40316drm/mediatek: Fix device use-after-free on unbind
- CVE-2025-40315usb: gadget: f_fs: Fix epfile null pointer access after ep enable.
- CVE-2025-40314usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget
- CVE-2025-40313ntfs3: pretend $Extend records as regular files
- CVE-2025-40312jfs: Verify inode mode when loading from disk
- CVE-2025-40311accel/habanalabs: support mapping cb with vmalloc-backed coherent memory
- CVE-2025-40310amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw
- CVE-2025-40309Bluetooth: SCO: Fix UAF on sco_conn_free
- CVE-2025-40308Bluetooth: bcsp: receive data only if registered
- CVE-2025-40307exfat: validate cluster allocation bits of the allocation bitmap
- CVE-2025-40306orangefs: fix xattr related buffer overflow...
- CVE-2025-403059p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
- CVE-2025-40304fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
- CVE-2025-40303btrfs: ensure no dirty metadata is written back for an fs with errors
- CVE-2025-40302media: videobuf2: forbid remove_bufs when legacy fileio is active
- CVE-2025-40301Bluetooth: hci_event: validate skb length for unknown CC opcode
- CVE-2025-40299gve: Implement gettimex64 with -EOPNOTSUPP
- CVE-2025-40298gve: Implement settime64 with -EOPNOTSUPP
- CVE-2025-40297net: bridge: fix use-after-free due to MST port state bypass
- CVE-2025-40296platform/x86: int3472: Fix double free of GPIO device during unregister
- CVE-2025-40295fscrypt: fix left shift underflow when inode->i_blkbits > PAGE_SHIFT
- CVE-2025-40294Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()
- CVE-2025-40293iommufd: Don't overflow during division for dirty tracking
- CVE-2025-40292virtio-net: fix received length check in big packets
- CVE-2025-40291io_uring: fix regbuf vector size truncation