Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-39995media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe
- CVE-2025-39994media: tuner: xc5000: Fix use-after-free in xc5000_release
- CVE-2025-39993media: rc: fix races with imon_disconnect()
- CVE-2025-39992mm: swap: check for stable address space before operating on the VMA
- CVE-2025-39991wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()
- CVE-2025-39990bpf: Check the helper function is valid in get_helper_proto
- CVE-2025-39988can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
- CVE-2025-39987can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
- CVE-2025-39986can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
- CVE-2025-39985can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
- CVE-2025-39984net: tun: Update napi->skb after XDP process
- CVE-2025-39983Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue
- CVE-2025-39982Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
- CVE-2025-39981Bluetooth: MGMT: Fix possible UAFs
- CVE-2025-39980nexthop: Forbid FDB status change while nexthop is in a group
- CVE-2025-39979net/mlx5: fs, fix UAF in flow counter release
- CVE-2025-39978octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()
- CVE-2025-39977futex: Prevent use-after-free during requeue-PI
- CVE-2025-39976futex: Use correct exit on failure from futex_hash_allocate_default()
- CVE-2025-39975smb: client: fix wrong index reference in smb2_compound_op()
- CVE-2025-39974tracing/osnoise: Fix slab-out-of-bounds in _parse_integer_limit()
- CVE-2025-39973i40e: add validation for ring_len param
- CVE-2025-39972i40e: fix idx validation in i40e_validate_queue_map
- CVE-2025-39971i40e: fix idx validation in config queues msg
- CVE-2025-39970i40e: fix input validation logic for action_meta
- CVE-2025-39969i40e: fix validation of VF state in get resources
- CVE-2025-39968i40e: add max boundary check for VF filters
- CVE-2025-39967fbcon: fix integer overflow in fbcon_do_set_font
- CVE-2025-39966iommufd: Fix race during abort for file descriptors
- CVE-2025-39965xfrm: xfrm_alloc_spi shouldn't use 0 as SPI