Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-53302wifi: iwl4965: Add missing check for create_singlethread_workqueue()
- CVE-2023-53301f2fs: fix kernel crash due to null io->bio
- CVE-2023-53300media: hi846: Fix memleak in hi846_init_controls()
- CVE-2023-53299md/raid10: fix leak of 'r10bio->remaining' for recovery
- CVE-2023-53298nfc: fix memory leak of se_io context in nfc_genl_se_io
- CVE-2023-53297Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
- CVE-2023-53296sctp: check send stream number after wait_for_sndbuf
- CVE-2023-53295udf: Do not update file length for failed writes to inline files
- CVE-2023-53294fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup()
- CVE-2023-53292blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none
- CVE-2023-53291rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale
- CVE-2023-53290samples/bpf: Fix fout leak in hbm's run_bpf_prog
- CVE-2023-53289media: bdisp: Add missing check for create_workqueue
- CVE-2023-53288drm/client: Fix memory leak in drm_client_modeset_probe
- CVE-2023-53287usb: cdns3: Put the cdns set active part outside the spin lock
- CVE-2023-53286RDMA/mlx5: Return the firmware result upon destroying QP/RQ
- CVE-2023-53285ext4: add bounds checking in get_max_inline_xattr_value_size()
- CVE-2023-53284drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init()
- CVE-2023-53282scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- CVE-2023-53281drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler()
- CVE-2023-53280scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue
- CVE-2023-53279misc: vmw_balloon: fix memory leak with using debugfs_lookup()
- CVE-2023-53278ubifs: Fix memory leak in ubifs_sysfs_init()
- CVE-2023-53277wifi: iwl3945: Add missing check for create_singlethread_workqueue
- CVE-2023-53276ubifs: Free memory for tmpfile name
- CVE-2023-53275ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- CVE-2023-53274clk: mediatek: mt8183: Add back SSPM related clocks
- CVE-2023-53273Drivers: vmbus: Check for channel allocation before looking up relids
- CVE-2023-53272net: ena: fix shift-out-of-bounds in exponential backoff
- CVE-2023-53271ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume()