Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-39833mISDN: hfcpci: Fix warning when deleting uninitialized timer
- CVE-2025-39832net/mlx5: Fix lockdep assertion on sync reset unload event
- CVE-2025-39831fbnic: Move phylink resume out of service_task and into open/close
- CVE-2025-39830net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path
- CVE-2025-39829trace/fgraph: Fix the warning caused by missing unregister notifier
- CVE-2025-39828atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
- CVE-2025-39827net: rose: include node references in rose_neigh refcount
- CVE-2025-39826net: rose: convert 'use' field to refcount_t
- CVE-2025-39825smb: client: fix race with concurrent opens in rename(2)
- CVE-2025-39824HID: asus: fix UAF via HID_CLAIMED_INPUT validation
- CVE-2025-39823KVM: x86: use array_index_nospec with indices that come from guest
- CVE-2025-39822io_uring/kbuf: fix signedness in this_len calculation
- CVE-2025-39821perf: Avoid undefined behavior from stopping/starting inactive events
- CVE-2025-39820drm/msm/dpu: Add a null ptr check for dpu_encoder_needs_modeset
- CVE-2025-39819fs/smb: Fix inconsistent refcnt update
- CVE-2025-39818HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save
- CVE-2025-39817efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
- CVE-2025-39816io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths
- CVE-2025-39815RISC-V: KVM: fix stack overrun when loading vlenb
- CVE-2025-39814ice: fix NULL pointer dereference in ice_unplug_aux_dev() on reset
- CVE-2025-39813ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- CVE-2025-39812sctp: initialize more fields in sctp_v6_from_sk()
- CVE-2025-39811drm/xe/vm: Clear the scratch_pt pointer on error
- CVE-2025-39810bnxt_en: Fix memory corruption when FW resources change during ifdown
- CVE-2025-39809HID: intel-thc-hid: intel-quicki2c: Fix ACPI dsd ICRS/ISUB length
- CVE-2025-39808HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()
- CVE-2025-39807drm/mediatek: Add error handling for old state CRTC in atomic_disable
- CVE-2025-39806HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()
- CVE-2025-39805net: macb: fix unregister_netdev call order in macb_remove()
- CVE-2023-53303net: microchip: vcap api: Fix possible memory leak for vcap_dup_rule()