Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-50236iommu/mediatek: Fix crash on isr after kexec()
- CVE-2022-50235NFSD: Protect against send buffer overflow in NFSv2 READDIR
- CVE-2022-50234io_uring/af_unix: defer registered files gc to io_uring release
- CVE-2025-39804lib/crypto: arm64/poly1305: Fix register corruption in no-SIMD contexts
- CVE-2025-39803scsi: ufs: core: Remove WARN_ON_ONCE() call from ufshcd_uic_cmd_compl()
- CVE-2025-39802lib/crypto: arm/poly1305: Fix register corruption in no-SIMD contexts
- CVE-2025-39801usb: dwc3: Remove WARN_ON for device endpoint command timeouts
- CVE-2025-39800btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()
- CVE-2025-39798NFS: Fix the setting of capabilities when automounting a new filesystem
- CVE-2025-39797xfrm: Duplicate SPI Handling
- CVE-2025-39796net: lapbether: ignore ops-locked netdevs
- CVE-2025-39795block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
- CVE-2025-39794ARM: tegra: Use I/O memcpy to write to IRAM
- CVE-2025-39793io_uring/memmap: cast nr_pages to size_t before shifting
- CVE-2025-39792dm: Always split write BIOs to zoned device limits
- CVE-2025-39791dm: dm-crypt: Do not partially accept write BIOs with zoned targets
- CVE-2025-39790bus: mhi: host: Detect events pointing to unexpected TREs
- CVE-2025-39789crypto: x86/aegis - Add missing error checks
- CVE-2025-39788scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
- CVE-2025-39787soc: qcom: mdt_loader: Ensure we don't read past the ELF header
- CVE-2025-39786iio: adc: ad7173: fix channels index for syscalib_mode
- CVE-2025-39785drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
- CVE-2025-39784PCI: Fix link speed calculation on retrain failure
- CVE-2025-39783PCI: endpoint: Fix configfs group list head handling
- CVE-2025-39782jbd2: prevent softlockup in jbd2_log_do_checkpoint()
- CVE-2025-39781parisc: Drop WARN_ON_ONCE() from flush_cache_vmap
- CVE-2025-39780sched/ext: Fix invalid task state transitions on class switch
- CVE-2025-39779btrfs: subpage: keep TOWRITE tag until folio is cleaned
- CVE-2025-39777crypto: acomp - Fix CFI failure due to type punning
- CVE-2025-39776mm/debug_vm_pgtable: clear page table entries at destroy_args()