Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-39743jfs: truncate good inode pages when hard link is 0
- CVE-2025-39742RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
- CVE-2025-39741drm/xe/migrate: don't overflow max copy size
- CVE-2025-39740drm/xe/migrate: prevent potential UAF
- CVE-2025-39739iommu/arm-smmu-qcom: Add SM6115 MDSS compatible
- CVE-2025-39738btrfs: do not allow relocation of partially dropped subvolumes
- CVE-2025-39737mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
- CVE-2025-39736mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
- CVE-2025-40300x86/vmscape: Add conditional IBPB mitigation
- CVE-2025-39734Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
- CVE-2025-39733team: replace team lock with rtnl lock
- CVE-2025-39732wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()
- CVE-2025-39731f2fs: vm_unmap_ram() may be called from an invalid context
- CVE-2025-39730NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
- CVE-2025-39729crypto: ccp - Fix dereferencing uninitialized error pointer
- CVE-2025-39727mm: swap: fix potential buffer overflow in setup_clusters()
- CVE-2025-39726s390/ism: fix concurrency management in ism_cmd()
- CVE-2025-39725mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
- CVE-2025-39724serial: 8250: fix panic due to PSLVERR
- CVE-2025-39723netfs: Fix unbuffered write error handling
- CVE-2025-39722crypto: caam - Prevent crash on suspend with iMX8QM / iMX8ULP
- CVE-2025-39721crypto: qat - flush misc workqueue during device shutdown
- CVE-2025-39720ksmbd: fix refcount leak causing resource not released
- CVE-2025-39719iio: imu: bno055: fix OOB access of hw_xlate array
- CVE-2025-39718vsock/virtio: Validate length in packet header before skb_put()
- CVE-2025-39717open_tree_attr: do not allow id-mapping changes without OPEN_TREE_CLONE
- CVE-2025-39716parisc: Revise __get_user() to probe user read access
- CVE-2025-39715parisc: Revise gateway LWS calls to probe user read access
- CVE-2025-39714media: usbtv: Lock resolution while streaming
- CVE-2025-39713media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()