Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-39712media: mt9m114: Fix deadlock in get_frame_interval/set_frame_interval
- CVE-2025-39711media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls
- CVE-2025-39710media: venus: Add a check for packet size after reading from shared memory
- CVE-2025-39709media: venus: protect against spurious interrupts during probe
- CVE-2025-39708media: iris: Fix NULL pointer dereference
- CVE-2025-39707drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities
- CVE-2025-39706drm/amdkfd: Destroy KFD debugfs after destroy KFD wq
- CVE-2025-39705drm/amd/display: fix a Null pointer dereference vulnerability
- CVE-2025-39704LoongArch: KVM: Fix stack protector issue in send_ipi_data()
- CVE-2025-39703net, hsr: reject HSR frame if skb can't hold tag
- CVE-2025-39702ipv6: sr: Fix MAC comparison to be constant-time
- CVE-2025-39701ACPI: pfr_update: Fix the driver update version check
- CVE-2025-39700mm/damon/ops-common: ignore migration request to invalid nodes
- CVE-2025-39699iommu/riscv: prevent NULL deref in iova_to_phys
- CVE-2025-39698io_uring/futex: ensure io_futex_wait() cleans up properly on failure
- CVE-2025-39697NFS: Fix a race when updating an existing write
- CVE-2025-39696ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv
- CVE-2025-39695RDMA/rxe: Flush delayed SKBs while releasing RXE resources
- CVE-2025-39694s390/sclp: Fix SCCB present check
- CVE-2025-39693drm/amd/display: Avoid a NULL pointer dereference
- CVE-2025-39692smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
- CVE-2025-39691fs/buffer: fix use-after-free when call bh_read() helper
- CVE-2025-39690iio: accel: sca3300: fix uninitialized iio scan data
- CVE-2025-39689ftrace: Also allocate and copy hash for reading of filter files
- CVE-2025-39687iio: light: as73211: Ensure buffer holes are zeroed
- CVE-2025-39686comedi: Make insn_rw_emulate_bits() do insn->n samples
- CVE-2025-39685comedi: pcl726: Prevent invalid irq number
- CVE-2025-39684comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
- CVE-2025-39683tracing: Limit access to parser->buffer when trace_get_user failed
- CVE-2025-39682tls: fix handling of zero-length records on the rx_list