Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-39932smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)
- CVE-2025-39931crypto: af_alg - Set merge to zero early in af_alg_sendmsg
- CVE-2025-39929smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
- CVE-2023-53532wifi: ath11k: fix deinitialization of firmware resources
- CVE-2023-53531null_blk: fix poll request timeout handling
- CVE-2023-53530scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id()
- CVE-2023-53529wifi: rtw88: Fix memory leak in rtw88_usb
- CVE-2023-53528RDMA/rxe: Fix unsafe drain work queue code
- CVE-2023-53527thunderbolt: Fix memory leak in tb_handle_dp_bandwidth_request()
- CVE-2023-53526jbd2: check 'jh->b_transaction' before removing it from checkpoint
- CVE-2023-53525RDMA/cma: Allow UD qp_type to join multicast only
- CVE-2023-53524wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf
- CVE-2023-53523can: gs_usb: fix time stamp counter initialization
- CVE-2023-53522cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex
- CVE-2023-53521scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
- CVE-2023-53520Bluetooth: Fix hci_suspend_sync crash
- CVE-2023-53519media: v4l2-mem2mem: add lock to protect parameter num_rdy
- CVE-2023-53518PM / devfreq: Fix leak in devfreq_dev_release()
- CVE-2023-53517tipc: do not update mtu if msg_max is too small in mtu negotiation
- CVE-2023-53516macvlan: add forgotten nla_policy for IFLA_MACVLAN_BC_CUTOFF
- CVE-2023-53515virtio-mmio: don't break lifecycle of vm_dev
- CVE-2023-53514gpu: host1x: Fix memory leak of device names
- CVE-2023-53513nbd: fix incomplete validation of ioctl arg
- CVE-2023-53512scsi: mpt3sas: Fix a memory leak
- CVE-2023-53511io_uring: fix fget leak when fs don't support nowait buffered read
- CVE-2023-53510scsi: ufs: core: Fix handling of lrbp->cmd
- CVE-2023-53509qed: allow sleep in qed_mcp_trace_dump()
- CVE-2023-53508ublk: fail to start device if queue setup is interrupted
- CVE-2023-53507net/mlx5: Unregister devlink params in case interface is down
- CVE-2023-53506udf: Do not bother merging very long extents