Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-53595octeontx2-pf: mcs: Fix NULL pointer dereferences
- CVE-2023-53594driver core: fix resource leak in device_add()
- CVE-2023-53593cifs: Release folio lock on fscache read hit.
- CVE-2023-53592gpio: sifive: Fix refcount leak in sifive_gpio_probe
- CVE-2023-53591net/mlx5e: Fix deadlock in tc route query code
- CVE-2023-53590sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop
- CVE-2023-53589wifi: iwlwifi: mvm: don't trust firmware n_channels
- CVE-2023-53588wifi: mac80211: check for station first in client probe
- CVE-2023-53587ring-buffer: Sync IRQ works before buffer destruction
- CVE-2023-53586scsi: target: Fix multiple LUN_RESET handling
- CVE-2023-53585bpf: reject unhashed sockets in bpf_sk_assign
- CVE-2023-53584ubifs: ubifs_releasepage: Remove ubifs_assert(0) to valid this process
- CVE-2023-53583perf: RISC-V: Remove PERF_HES_STOPPED flag checking in riscv_pmu_start()
- CVE-2023-53582wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds
- CVE-2023-53581net/mlx5e: Check for NOT_READY flag state after locking
- CVE-2023-53580USB: Gadget: core: Help prevent panic during UVC unconfigure
- CVE-2022-50508wifi: mt76: mt76x0: fix oob access in mt76x0_phy_get_target_power
- CVE-2022-50507fs/ntfs3: Validate data run offset
- CVE-2022-50506drbd: only clone bio if we have a backing device
- CVE-2022-50505iommu/amd: Fix pci device refcount leak in ppr_notifier()
- CVE-2022-50504powerpc/rtas: avoid scheduling in rtas_os_term()
- CVE-2022-50503mtd: lpddr2_nvm: Fix possible null-ptr-deref
- CVE-2022-50501media: coda: Add check for dcoda_iram_alloc
- CVE-2022-50500netdevsim: fix memory leak in nsim_drv_probe() when nsim_dev_resources_register() failed
- CVE-2022-50499media: dvb-core: Fix double free in dvb_register_device()
- CVE-2022-50498eth: alx: take rtnl_lock on resume
- CVE-2022-50497binfmt_misc: fix shift-out-of-bounds in check_special_flags
- CVE-2022-50496dm cache: Fix UAF in destroy()
- CVE-2022-50494thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- CVE-2022-50493scsi: qla2xxx: Fix crash when I/O abort times out