Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-50434blk-mq: fix possible memleak when register 'hctx' failed
- CVE-2022-50433efi: ssdt: Don't free memory if ACPI table was loaded successfully
- CVE-2022-50432kernfs: fix use-after-free in __kernfs_remove
- CVE-2022-50431ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev()
- CVE-2022-50430mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING
- CVE-2022-50429memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- CVE-2022-50428ext4: fix off-by-one errors in fast-commit block filling
- CVE-2022-50427ALSA: ac97: fix possible memory leak in snd_ac97_dev_register()
- CVE-2022-50426remoteproc: imx_dsp_rproc: Add mutex protection for workqueue
- CVE-2022-50425x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly
- CVE-2022-50424wifi: mt76: mt7921: resource leaks at mt7921_check_offload_capability()
- CVE-2022-50423ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
- CVE-2022-50422scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- CVE-2022-50421rpmsg: char: Avoid double destroy of default endpoint
- CVE-2022-50420crypto: hisilicon/hpre - fix resource leak in remove process
- CVE-2025-39928i2c: rtl9300: ensure data length is within supported range
- CVE-2025-39927ceph: fix race condition validating r_parent before applying state
- CVE-2025-39926genetlink: fix genl_bind() invoking bind() after -EPERM
- CVE-2025-39925can: j1939: implement NETDEV_UNREGISTER notification handler
- CVE-2025-39924erofs: fix invalid algorithm for encoded extents
- CVE-2025-39923dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
- CVE-2025-39922ixgbe: fix incorrect map used in eee linkmode
- CVE-2025-39921spi: microchip-core-qspi: stop checking viability of op->max_freq in supports_op callback
- CVE-2025-39920pcmcia: Add error handling for add_interval() in do_validate_mem()
- CVE-2025-39919wifi: mt76: mt7996: add missing check for rx wcid entries
- CVE-2025-39918wifi: mt76: fix linked list corruption
- CVE-2025-39917bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt
- CVE-2025-39916mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()
- CVE-2025-39915net: phy: transfer phy_config_inband() locking responsibility to phylink
- CVE-2025-39914tracing: Silence warning when chunk allocation fails in trace_pid_write