Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-40230mm: prevent poison consumption when splitting THP
- CVE-2025-40229mm/damon/core: fix potential memory leak by cleaning ops_filter in damon_destroy_scheme
- CVE-2025-40228mm/damon/sysfs: catch commit test ctx alloc failure
- CVE-2025-40227mm/damon/sysfs: dealloc commit test ctx always
- CVE-2025-40226firmware: arm_scmi: Account for failed debug initialization
- CVE-2025-40225drm/panthor: Fix kernel panic on partial unmap of a GPU VA region
- CVE-2025-40224hwmon: (cgbc-hwmon) Add missing NULL check after devm_kzalloc()
- CVE-2025-40223most: usb: Fix use-after-free in hdm_disconnect
- CVE-2025-40222tty: serial: sh-sci: fix RSCI FIFO overrun handling
- CVE-2025-40221media: pci: mg4b: fix uninitialized iio scan data
- CVE-2025-40220fuse: fix livelock in synchronous file put from fuseblk workers
- CVE-2025-40219PCI/IOV: Fix race between SR-IOV enable/disable and hotplug
- CVE-2025-40218mm/damon/vaddr: do not repeat pte_offset_map_lock() until success
- CVE-2025-40217pidfs: validate extensible ioctls
- CVE-2025-40216io_uring/rsrc: don't rely on user vaddr alignment
- CVE-2025-40215xfrm: delete x->tunnel as we delete x
- CVE-2025-40214af_unix: Initialise scc_index in unix_add_edge().
- CVE-2025-40213Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete
- CVE-2025-40212nfsd: fix refcount leak in nfsd_set_fh_dentry()
- CVE-2025-40211ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- CVE-2025-40210Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND"
- CVE-2025-40209btrfs: fix memory leak of qgroup_list in btrfs_add_qgroup_relation
- CVE-2025-40208media: iris: fix module removal if firmware download failed
- CVE-2025-40207media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
- CVE-2025-40206netfilter: nft_objref: validate objref and objrefmap expressions
- CVE-2025-40205btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
- CVE-2025-40204sctp: Fix MAC comparison to be constant-time
- CVE-2025-40203listmount: don't call path_put() under namespace semaphore
- CVE-2025-40202ipmi: Rework user message limit handling
- CVE-2025-40201kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths