Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-40200Squashfs: reject negative file sizes in squashfs_read_inode()
- CVE-2025-40199page_pool: Fix PP_MAGIC_MASK to avoid crashing on some 32-bit arches
- CVE-2025-40198ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()
- CVE-2025-40197media: mc: Clear minor number before put device
- CVE-2025-40196fs: quota: create dedicated workqueue for quota_release_work
- CVE-2025-40195mount: handle NULL values in mnt_ns_release()
- CVE-2025-40194cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- CVE-2025-40193xtensa: simdisk: add input size check in proc_write_simdisk
- CVE-2025-40192Revert "ipmi: fix msg stack when IPMI is disconnected"
- CVE-2025-40191drm/amdkfd: Fix kfd process ref leaking when userptr unmapping
- CVE-2025-40190ext4: guard against EA inode refcount underflow in xattr update
- CVE-2025-40189net: usb: lan78xx: Fix lost EEPROM read timeout error(-ETIMEDOUT) in lan78xx_read_raw_eeprom
- CVE-2025-40188pwm: berlin: Fix wrong register in suspend/resume
- CVE-2025-40187net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
- CVE-2025-40186tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().
- CVE-2025-40185ice: ice_adapter: release xa entry on adapter allocation failure
- CVE-2025-40184KVM: arm64: Fix debug checking for np-guests using huge mappings
- CVE-2025-40183bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- CVE-2025-40182crypto: skcipher - Fix reqsize handling
- CVE-2025-40181x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP
- CVE-2025-40180mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop
- CVE-2025-40179ext4: verify orphan file size is not too big
- CVE-2025-40178pid: Add a judgment for ns null in pid_nr_ns
- CVE-2025-40177accel/qaic: Fix bootlog initialization ordering
- CVE-2025-40176tls: wait for pending async decryptions if tls_strp_msg_hold fails
- CVE-2025-40175idpf: cleanup remaining SKBs in PTP flows
- CVE-2025-40174x86/mm: Fix SMP ordering in switch_mm_irqs_off()
- CVE-2025-40173net/ip6_tunnel: Prevent perpetual tunnel growth
- CVE-2025-40172accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
- CVE-2025-40171nvmet-fc: move lsop put work to nvmet_fc_ls_req_op