Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-40107can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled
- CVE-2025-40106comedi: fix divide-by-zero in comedi_buf_munge()
- CVE-2025-40105vfs: Don't leak disconnected dentries on umount
- CVE-2025-40104ixgbevf: fix mailbox API compatibility by negotiating supported features
- CVE-2025-40103smb: client: Fix refcount leak for cifs_sb_tlink
- CVE-2025-40102KVM: arm64: Prevent access to vCPU events before init
- CVE-2025-40101btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST
- CVE-2025-40100btrfs: do not assert we found block group item when creating free space tree
- CVE-2025-40099cifs: parse_dfs_referrals: prevent oob on malformed input
- CVE-2025-40098ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state()
- CVE-2025-40097ALSA: hda: Fix missing pointer check in hda_component_manager_init function
- CVE-2025-40096drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
- CVE-2025-40095usb: gadget: f_rndis: Refactor bind path to use __free()
- CVE-2025-40094usb: gadget: f_acm: Refactor bind path to use __free()
- CVE-2025-40093usb: gadget: f_ecm: Refactor bind path to use __free()
- CVE-2025-40092usb: gadget: f_ncm: Refactor bind path to use __free()
- CVE-2025-40091ixgbe: fix too early devlink_free() in ixgbe_remove()
- CVE-2025-40090ksmbd: fix recursive locking in RPC handle list access
- CVE-2025-40089cxl/features: Add check for no entries in cxl_feature_info
- CVE-2025-40088hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
- CVE-2025-40087NFSD: Define a proc_layoutcommit for the FlexFiles layout type
- CVE-2025-40086drm/xe: Don't allow evicting of BOs in same VM in array of VM binds
- CVE-2023-7324scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
- CVE-2025-40085ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card
- CVE-2025-40084ksmbd: transport_ipc: validate payload size before reading handle
- CVE-2025-40083net/sched: sch_qfq: Fix null-deref in agg_dequeue
- CVE-2025-40082hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
- CVE-2025-40081perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- CVE-2025-40080nbd: restrict sockets to TCP and UDP
- CVE-2025-40079riscv, bpf: Sign extend struct ops return values properly