Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-39913tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
- CVE-2025-39912nfs/localio: restore creds before releasing pageio data
- CVE-2025-39911i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
- CVE-2025-39910mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()
- CVE-2025-39909mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()
- CVE-2025-39908net: dev_ioctl: take ops lock in hwtstamp lower paths
- CVE-2025-39907mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer
- CVE-2025-39906drm/amd/display: remove oem i2c adapter on finish
- CVE-2025-39905net: phylink: add lock for serializing concurrent pl->phydev writes with resolver
- CVE-2025-39904arm64: kexec: initialize kexec_buf struct in load_other_segments()
- CVE-2025-39903of_numa: fix uninitialized memory nodes causing kernel panic
- CVE-2025-39902mm/slub: avoid accessing metadata when pointer is invalid in object_err()
- CVE-2025-39901i40e: remove read access to debugfs files
- CVE-2025-39900net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y
- CVE-2025-39899mm/userfaultfd: fix kmap_local LIFO ordering for CONFIG_HIGHPTE
- CVE-2025-39897net: xilinx: axienet: Add error handling for RX metadata pointer retrieval
- CVE-2025-39896accel/ivpu: Prevent recovery work from being queued during device removal
- CVE-2025-39895sched: Fix sched_numa_find_nth_cpu() if mask offline
- CVE-2025-39894netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
- CVE-2025-39893spi: spi-qpic-snand: unregister ECC engine on probe error and device remove
- CVE-2025-39892ASoC: soc-core: care NULL dirver name on snd_soc_lookup_component_nolocked()
- CVE-2025-39891wifi: mwifiex: Initialize the chan_stats array to zero
- CVE-2025-39890wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event
- CVE-2025-39889Bluetooth: l2cap: Check encryption key size on incoming connection
- CVE-2024-58241Bluetooth: hci_core: Disable works on hci_unregister_dev
- CVE-2025-39888fuse: Block access to folio overlimit
- CVE-2025-39887tracing/osnoise: Fix null-ptr-deref in bitmap_parselist()
- CVE-2025-39886bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()
- CVE-2025-39885ocfs2: fix recursive semaphore deadlock in fiemap call
- CVE-2025-39884btrfs: fix subvolume deletion lockup caused by inodes xarray race