Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-40290xsk: avoid data corruption on cq descriptor number
- CVE-2025-40289drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM
- CVE-2025-40288drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices
- CVE-2025-40287exfat: fix improper check of dentry.stream.valid_size
- CVE-2025-40286smb/server: fix possible memory leak in smb2_read()
- CVE-2025-40285smb/server: fix possible refcount leak in smb2_sess_setup()
- CVE-2025-40284Bluetooth: MGMT: cancel mesh send timer when hdev removed
- CVE-2025-40283Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
- CVE-2025-40282Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
- CVE-2025-40281sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
- CVE-2025-40280tipc: Fix use-after-free in tipc_mon_reinit_self().
- CVE-2025-40279net: sched: act_connmark: initialize struct tc_ife to fix kernel leak
- CVE-2025-40278net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
- CVE-2025-40277drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
- CVE-2025-40276drm/panthor: Flush shmem writes before mapping buffers CPU-uncached
- CVE-2025-40275ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd
- CVE-2025-40274KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying
- CVE-2025-40273NFSD: free copynotify stateid in nfs4_free_ol_stateid()
- CVE-2025-40272mm/secretmem: fix use-after-free race in fault handler
- CVE-2025-40271fs/proc: fix uaf in proc_readdir_de()
- CVE-2025-40270mm, swap: fix potential UAF issue for VMA readahead
- CVE-2025-40269ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
- CVE-2025-40268cifs: client: fix memory leak in smb3_fs_context_parse_param
- CVE-2025-40267io_uring/rw: ensure allocated iovec gets cleared for early failure
- CVE-2025-40266KVM: arm64: Check the untrusted offset in FF-A memory share
- CVE-2025-40265vfat: fix missing sb_min_blocksize() return value checks
- CVE-2025-40264be2net: pass wrb_params in case of OS2BMC
- CVE-2025-40263Input: cros_ec_keyb - fix an invalid memory access
- CVE-2025-40262Input: imx_sc_key - fix memory corruption on unload
- CVE-2025-40261nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()