Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-39852net/tcp: Fix socket memory leak in TCP-AO failure handling for IPv6
- CVE-2025-39851vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
- CVE-2025-39850vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
- CVE-2025-39849wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()
- CVE-2025-39848ax25: properly unshare skbs in ax25_kiss_rcv()
- CVE-2025-39847ppp: fix memory leak in pad_compress_skb
- CVE-2025-39846pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
- CVE-2025-39845x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()
- CVE-2025-39844mm: move page table sync declarations to linux/pgtable.h
- CVE-2025-39843mm: slub: avoid wake up kswapd in set_track_prepare
- CVE-2025-39842ocfs2: prevent release journal inode after journal shutdown
- CVE-2025-39841scsi: lpfc: Fix buffer free/clear order in deferred receive path
- CVE-2025-39840audit: fix out-of-bounds read in audit_compare_dname_path()
- CVE-2025-39839batman-adv: fix OOB read/write in network-coding decode
- CVE-2025-39838cifs: prevent NULL pointer dereference in UTF16 conversion
- CVE-2025-39837platform/x86: asus-wmi: Fix racy registrations
- CVE-2023-53447f2fs: don't reset unchangable mount option in f2fs_remount()
- CVE-2023-53446PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free
- CVE-2023-53445net: qrtr: Fix a refcount bug in qrtr_recvmsg()
- CVE-2023-53444drm/ttm: fix bulk_move corruption when adding a entry
- CVE-2023-53443mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak
- CVE-2023-53442ice: Block switchdev mode when ADQ is active and vice versa
- CVE-2023-53441bpf: cpumap: Fix memory leak in cpu_map_update_elem
- CVE-2023-53440nilfs2: fix sysfs interface lifetime
- CVE-2023-53439net: skb_partial_csum_set() fix against transport header magic value
- CVE-2023-53438x86/MCE: Always save CS register on AMD Zen IF Poison errors
- CVE-2023-53437media: uvcvideo: Handle cameras with invalid descriptors
- CVE-2023-53436scsi: snic: Fix possible memory leak if device_add() fails
- CVE-2023-53435cassini: Fix a memory leak in the error handling path of cas_init_one()
- CVE-2023-53434remoteproc: imx_dsp_rproc: Add custom memory copy implementation for i.MX DSP Cores