Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-40078bpf: Explicitly check accesses to bpf_sock_addr
- CVE-2025-40077f2fs: fix to avoid overflow while left shift operation
- CVE-2025-40076PCI: rcar-host: Pass proper IRQ domain to generic_handle_domain_irq()
- CVE-2025-40075tcp_metrics: use dst_dev_net_rcu()
- CVE-2025-40074ipv4: start using dst_dev_rcu()
- CVE-2025-40073drm/msm: Do not validate SSPP when it is not ready
- CVE-2025-40072fanotify: Validate the return value of mnt_ns_from_dentry() before dereferencing
- CVE-2025-40071tty: n_gsm: Don't block input queue by waiting MSC
- CVE-2025-40070pps: fix warning in pps_register_cdev when register device fail
- CVE-2025-40069drm/msm: Fix obj leak in VM_BIND error path
- CVE-2025-40068fs: ntfs3: Fix integer overflow in run_unpack()
- CVE-2025-40067fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist
- CVE-2025-40066wifi: mt76: mt7996: Check phy before init msta_link in mt7996_mac_sta_add_links()
- CVE-2025-40065RISC-V: KVM: Write hgatp register with valid mode bits
- CVE-2025-40064smc: Fix use-after-free in __pnet_find_base_ndev().
- CVE-2025-40063crypto: comp - Use same definition of context alloc and free ops
- CVE-2025-40062crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs
- CVE-2025-40061RDMA/rxe: Fix race in do_task() when draining
- CVE-2025-40060coresight: trbe: Return NULL pointer for allocation failures
- CVE-2025-40059coresight: Fix incorrect handling for return value of devm_kzalloc
- CVE-2025-40058iommu/vt-d: Disallow dirty tracking if incoherent page walk
- CVE-2025-40057ptp: Add a upper bound on max_vclocks
- CVE-2025-40056vhost: vringh: Fix copy_to_iter return value check
- CVE-2025-40055ocfs2: fix double free in user_cluster_connect()
- CVE-2025-40054f2fs: fix UAF issue in f2fs_merge_page_bio()
- CVE-2025-40053net: dlink: handle copy_thresh allocation failure
- CVE-2025-40052smb: client: fix crypto buffers in non-linear memory
- CVE-2025-40051vhost: vringh: Modify the return value check
- CVE-2025-40050bpf: Skip scalar adjustment for BPF_NEG if dst is a pointer
- CVE-2025-40049Squashfs: fix uninit-value in squashfs_get_parent