Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-50478nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()
- CVE-2022-50477rtc: class: Fix potential memleak in devm_rtc_allocate_device()
- CVE-2022-50476ntb_netdev: Use dev_kfree_skb_any() in interrupt context
- CVE-2022-50475RDMA/core: Make sure "ib_port" is valid when access sysfs node
- CVE-2022-50474macintosh: fix possible memory leak in macio_add_one_device()
- CVE-2022-50473cpufreq: Init completion before kobject_init_and_add()
- CVE-2022-50472IB/mad: Don't call to function that might sleep while in atomic context
- CVE-2022-50471xen/gntdev: Accommodate VMA splitting
- CVE-2022-50470xhci: Remove device endpoints from bandwidth list when freeing the device
- CVE-2025-39953cgroup: split cgroup_destroy_wq into 3 workqueues
- CVE-2025-39952wifi: wilc1000: avoid buffer overflow in WID string configuration
- CVE-2025-39951um: virtio_uml: Fix use-after-free after put_device in probe
- CVE-2025-39950net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR
- CVE-2025-39949qed: Don't collect too many protection override GRC elements
- CVE-2025-39948ice: fix Rx page leak on multi-buffer frames
- CVE-2025-39947net/mlx5e: Harden uplink netdev access against device unbind
- CVE-2025-39946tls: make sure to abort the stream if headers are bogus
- CVE-2025-39945cnic: Fix use-after-free bugs in cnic_delete_task
- CVE-2025-39944octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()
- CVE-2025-39943ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
- CVE-2025-39942ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size
- CVE-2025-39941zram: fix slot write race condition
- CVE-2025-39940dm-stripe: fix a possible integer overflow
- CVE-2025-39939iommu/s390: Fix memory corruption when using identity domain
- CVE-2025-39938ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed
- CVE-2025-39937net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
- CVE-2025-39936crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked()
- CVE-2025-39935ASoC: codec: sma1307: Fix memory corruption in sma1307_setting_loaded()
- CVE-2025-39934drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
- CVE-2025-39933smb: client: let recv_done verify data_offset, data_length and remaining_data_length