Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-53355staging: pi433: fix memory leak with using debugfs_lookup()
- CVE-2023-53354skbuff: skb_segment, Call zero copy functions before using skbuff frags
- CVE-2023-53353accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release()
- CVE-2023-53352drm/ttm: check null pointer before accessing when swapping
- CVE-2023-53351drm/sched: Check scheduler work queue before calling timeout handling
- CVE-2023-53350accel/qaic: Fix slicing memory leak
- CVE-2023-53349media: ov2740: Fix memleak in ov2740_init_controls()
- CVE-2023-53348btrfs: fix deadlock when aborting transaction during relocation with scrub
- CVE-2023-53347net/mlx5: Handle pairing of E-switch via uplink un/load APIs
- CVE-2023-53346kernel/fail_function: fix memory leak with using debugfs_lookup()
- CVE-2023-53345rxrpc: Fix potential data race in rxrpc_wait_to_be_connected()
- CVE-2023-53344can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
- CVE-2023-53343icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().
- CVE-2023-53342net: marvell: prestera: fix handling IPv4 routes with nhid
- CVE-2023-53341of/fdt: run soc memory setup when early_init_dt_scan_memory fails
- CVE-2023-53340net/mlx5: Collect command failures data only for known commands
- CVE-2023-53339btrfs: fix BUG_ON condition in btrfs_cancel_balance
- CVE-2023-53338lwt: Fix return values of BPF xmit ops
- CVE-2023-53337nilfs2: do not write dirty data after degenerating to read-only
- CVE-2023-53336media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings
- CVE-2023-53335RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()
- CVE-2022-50374Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- CVE-2022-50373fs: dlm: fix race in lowcomms
- CVE-2022-50372cifs: Fix memory leak when build ntlmssp negotiate blob failed
- CVE-2022-50371led: qcom-lpg: Fix sleeping in atomic
- CVE-2022-50370i2c: designware: Fix handling of real but unexpected device interrupts
- CVE-2022-50369drm/vkms: Fix null-ptr-deref in vkms_release()
- CVE-2022-50368drm/msm/dsi: fix memory corruption with too many bridges
- CVE-2022-50367fs: fix UAF/GPF bug in nilfs_mdt_destroy
- CVE-2022-50366powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue