Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-40170net: use dst_dev_rcu() in sk_setup_caps()
- CVE-2025-40169bpf: Reject negative offsets for ALU ops
- CVE-2025-40168smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
- CVE-2025-40167ext4: detect invalid INLINE_DATA + EXTENTS flag combination
- CVE-2025-40166drm/xe/guc: Check GuC running state before deregistering exec queue
- CVE-2025-40165media: nxp: imx8-isi: m2m: Fix streaming cleanup on release
- CVE-2025-40164usbnet: Fix using smp_processor_id() in preemptible code warnings
- CVE-2025-40163sched/deadline: Stop dl_server before CPU goes offline
- CVE-2025-40162ASoC: amd/sdw_utils: avoid NULL deref when devm_kasprintf() fails
- CVE-2025-40161mailbox: zynqmp-ipi: Fix SGI cleanup on unbind
- CVE-2025-40160xen/events: Return -EEXIST for bound VIRQs
- CVE-2025-40159xsk: Harden userspace-supplied xdp_desc validation
- CVE-2025-40158ipv6: use RCU in ip6_output()
- CVE-2025-40157EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
- CVE-2025-40156PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe()
- CVE-2025-40155iommu/vt-d: debugfs: Fix legacy mode page table dump logic
- CVE-2025-40154ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
- CVE-2025-40153mm: hugetlb: avoid soft lockup when mprotect to large memory area
- CVE-2025-40152drm/msm: Fix bootup splat with separate_gpu_drm modparam
- CVE-2025-40151LoongArch: BPF: No support of struct argument in trampoline programs
- CVE-2025-40150f2fs: fix to avoid migrating empty section
- CVE-2025-40149tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
- CVE-2025-40148drm/amd/display: Add NULL pointer checks in dc_stream cursor attribute functions
- CVE-2025-40147blk-throttle: fix access race during throttle policy activation
- CVE-2025-40146blk-mq: fix potential deadlock while nr_requests grown
- CVE-2025-40145PCI/pwrctrl: Fix double cleanup on devm_add_action_or_reset() failure
- CVE-2025-40143bpf: dont report verifier bug for missing bpf_scc_visit on speculative path
- CVE-2025-40142ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT
- CVE-2025-40141Bluetooth: ISO: Fix possible UAF on iso_conn_free
- CVE-2025-40140net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast