Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-40139smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
- CVE-2025-40138f2fs: fix to avoid NULL pointer dereference in f2fs_check_quota_consistency()
- CVE-2025-40137f2fs: fix to truncate first page in error path of f2fs_truncate()
- CVE-2025-40136crypto: hisilicon/qm - request reserved interrupt for virtual function
- CVE-2025-40135ipv6: use RCU in ip6_xmit()
- CVE-2025-40134dm: fix NULL pointer dereference in __dm_suspend()
- CVE-2025-40133mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable().
- CVE-2025-40132ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback
- CVE-2025-40131wifi: ath12k: Fix peer lookup in ath12k_dp_mon_rx_deliver_msdu()
- CVE-2025-40130scsi: ufs: core: Fix data race in CPU latency PM QoS request handling
- CVE-2025-40129sunrpc: fix null pointer dereference on zero-length checksum
- CVE-2025-40127hwrng: ks-sa - fix division by zero in ks_sa_rng_init
- CVE-2025-40126sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
- CVE-2025-40125blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
- CVE-2025-40124sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III
- CVE-2025-40123bpf: Enforce expected_attach_type for tailcall compatibility
- CVE-2025-40122perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error
- CVE-2025-40121ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
- CVE-2025-40120net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
- CVE-2025-40119ext4: fix potential null deref in ext4_mb_init()
- CVE-2025-40118scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod
- CVE-2025-40117misc: pci_endpoint_test: Fix array underflow in pci_endpoint_test_ioctl()
- CVE-2025-40116usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup
- CVE-2025-40115scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
- CVE-2025-40113remoteproc: qcom: pas: Shutdown lite ADSP DTB on X1E
- CVE-2025-40112sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara
- CVE-2025-40111drm/vmwgfx: Fix Use-after-free in validation
- CVE-2025-40110drm/vmwgfx: Fix a null-ptr access in the cursor snooper
- CVE-2025-40109crypto: rng - Ensure set_ent is always present
- CVE-2025-40108serial: qcom-geni: Fix blocked task