Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-39775mm/mremap: fix WARN with uffd that has remap events disabled
- CVE-2025-39774iio: adc: rzg2l_adc: Set driver data before enabling runtime PM
- CVE-2025-39773net: bridge: fix soft lockup in br_multicast_query_expired()
- CVE-2025-39772drm/hisilicon/hibmc: fix the hibmc loaded failed bug
- CVE-2025-39771regulator: pca9450: Use devm_register_sys_off_handler
- CVE-2025-39770net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
- CVE-2025-39769bnxt_en: Fix lockdep warning during rmmod
- CVE-2025-39768net/mlx5: HWS, fix complex rules rehash error flow
- CVE-2025-39767LoongArch: Optimize module load time by optimizing PLT/GOT counting
- CVE-2025-39766net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
- CVE-2025-39765ALSA: timer: fix ida_free call while not allocated
- CVE-2025-39764netfilter: ctnetlink: remove refcounting in expectation dumpers
- CVE-2025-39763ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- CVE-2025-39762drm/amd/display: add null check
- CVE-2025-39761wifi: ath12k: Decrement TID on RX peer frag setup error handling
- CVE-2025-39760usb: core: config: Prevent OOB read in SS endpoint companion parsing
- CVE-2025-39759btrfs: qgroup: fix race between quota disable and quota rescan ioctl
- CVE-2025-39758RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages
- CVE-2025-39757ALSA: usb-audio: Validate UAC3 cluster segment descriptors
- CVE-2025-39756fs: Prevent file descriptor table allocations exceeding INT_MAX
- CVE-2025-39754mm/smaps: fix race between smaps_hugetlb_range and migration
- CVE-2025-39753gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops
- CVE-2025-39752ARM: rockchip: fix kernel hang during smp initialization
- CVE-2025-39750wifi: ath12k: Correct tid cleanup when tid setup fails
- CVE-2025-39749rcu: Protect ->defer_qs_iw_pending from data race
- CVE-2025-39748bpf: Forget ranges when refining tnum after JSET
- CVE-2025-39747drm/msm: Add error handling for krealloc in metadata setup
- CVE-2025-39746wifi: ath10k: shutdown driver when hardware is unreliable
- CVE-2025-39745rcutorture: Fix rcutorture_one_extend_check() splat in RT kernels
- CVE-2025-39744rcu: Fix rcu_read_unlock() deadloop due to IRQ work