Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-53467wifi: rtw89: fix potential leak in rtw89_append_probe_req_ie()
- CVE-2023-53466wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit
- CVE-2023-53465soundwire: qcom: fix storing port config out-of-bounds
- CVE-2023-53464scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- CVE-2023-53463ibmvnic: Do not reset dql stats on NON_FATAL err
- CVE-2023-53462hsr: Fix uninit-value access in fill_frame_info()
- CVE-2023-53461io_uring: wait interruptibly for request completions on exit
- CVE-2023-53460wifi: rtw88: fix memory leak in rtw_usb_probe()
- CVE-2023-53459HID: mcp-2221: prevent UAF in delayed work
- CVE-2023-53458media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish()
- CVE-2023-53457FS: JFS: Fix null-ptr-deref Read in txBegin
- CVE-2023-53456scsi: qla4xxx: Add length check when parsing nlattrs
- CVE-2023-53455drm/vc4: drop all currently held locks if deadlock happens
- CVE-2023-53454HID: multitouch: Correct devm device reference for hidinput input_dev name
- CVE-2023-53453drm/radeon: free iio for atombios when driver shutdown
- CVE-2023-53452wifi: rtw89: fix potential race condition between napi_init and napi_enable
- CVE-2023-53451scsi: qla2xxx: Fix potential NULL pointer dereference
- CVE-2023-53450ext4: remove a BUG_ON in ext4_mb_release_group_pa()
- CVE-2023-53449s390/dasd: Fix potential memleak in dasd_eckd_init()
- CVE-2023-53448fbdev: imxfb: Removed unneeded release_mem_region
- CVE-2022-50444clk: tegra20: Fix refcount leak in tegra20_clock_init
- CVE-2022-50443drm/rockchip: lvds: fix PM usage counter unbalance in poweron
- CVE-2022-50442fs/ntfs3: Validate buffer length while parsing index
- CVE-2022-50441net/mlx5: Lag, fix failure to cancel delayed bond work
- CVE-2022-50440drm/vmwgfx: Validate the box size for the snooped cursor
- CVE-2022-50439ASoC: mediatek: mt8173: Enable IRQ when pdata is ready
- CVE-2022-50438net: hinic: fix memory leak when reading function table
- CVE-2022-50437drm/msm/hdmi: fix memory corruption with too many bridges
- CVE-2022-50436ext4: don't set up encryption key during jbd2 transaction
- CVE-2022-50435ext4: avoid crash when inline data creation follows DIO write