Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-40260sched_ext: Fix scx_enable() crash on helper kthread creation failure
- CVE-2025-40259scsi: sg: Do not sleep in atomic context
- CVE-2025-40258mptcp: fix race condition in mptcp_schedule_work()
- CVE-2025-40257mptcp: fix a race in mptcp_pm_del_add_timer()
- CVE-2025-40256xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
- CVE-2025-40255net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()
- CVE-2025-40254net: openvswitch: remove never-working support for setting nsh fields
- CVE-2025-40253s390/ctcm: Fix double-kfree
- CVE-2025-40252net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()
- CVE-2025-40251devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
- CVE-2025-40250net/mlx5: Clean up only new IRQ glue on request_irq() failure
- CVE-2025-40249gpio: cdev: make sure the cdev fd is still active before emitting events
- CVE-2025-40248vsock: Ignore signal/timeout on connect() if already established
- CVE-2025-40247drm/msm: Fix pgtable prealloc error path
- CVE-2025-40246xfs: fix out of bounds memory read error in symlink repair
- CVE-2025-40245nios2: ensure that memblock.current_limit is set when setting pfn limits
- CVE-2025-40244hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
- CVE-2025-40243hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
- CVE-2025-40242gfs2: Fix unlikely race in gdlm_put_lock
- CVE-2025-40241erofs: fix crafted invalid cases for encoded extents
- CVE-2025-40240sctp: avoid NULL dereference when chunk data buffer is missing
- CVE-2025-40239net: phy: micrel: always set shared->phydev for LAN8814
- CVE-2025-40238net/mlx5: Fix IPsec cleanup over MPV device
- CVE-2025-40237fs/notify: call exportfs_encode_fid with s_umount
- CVE-2025-40236virtio-net: zero unused hash fields
- CVE-2025-40235btrfs: directly free partially initialized fs_info in btrfs_check_leaked_roots()
- CVE-2025-40234platform/x86: alienware-wmi-wmax: Fix NULL pointer dereference in sleep handlers
- CVE-2025-40233ocfs2: clear extent cache after moving/defragmenting extents
- CVE-2025-40232rv: Fully convert enabled_monitors to use list_head as iterator
- CVE-2025-40231vsock: fix lock inversion in vsock_assign_transport()