Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38716hfs: fix general protection fault in hfs_find_init()
- CVE-2025-38715hfs: fix slab-out-of-bounds in hfs_bnode_read()
- CVE-2025-38714hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
- CVE-2025-38713hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
- CVE-2025-38712hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
- CVE-2025-38711smb/server: avoid deadlock when linking with ReplaceIfExists
- CVE-2025-38710gfs2: Validate i_depth for exhash directories
- CVE-2025-38709loop: Avoid updating block size under exclusive owner
- CVE-2025-38708drbd: add missing kref_get in handle_write_conflicts
- CVE-2025-38707fs/ntfs3: Add sanity check for file name
- CVE-2025-38706ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
- CVE-2025-38705drm/amd/pm: fix null pointer access
- CVE-2025-38704rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access
- CVE-2025-38703drm/xe: Make dma-fences compliant with the safe access rules
- CVE-2025-38702fbdev: fix potential buffer overflow in do_register_framebuffer()
- CVE-2025-38701ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
- CVE-2025-38700scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
- CVE-2025-38699scsi: bfa: Double-free fix
- CVE-2025-38698jfs: Regular file corruption check
- CVE-2025-38697jfs: upper bound check of tree index in dbAllocAG
- CVE-2025-38696MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
- CVE-2025-38695scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
- CVE-2025-38694media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
- CVE-2025-38693media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
- CVE-2025-38692exfat: add cluster chain loop check for dir
- CVE-2025-38691pNFS: Fix uninited ptr deref in block/scsi layout
- CVE-2025-38690drm/xe/migrate: prevent infinite recursion
- CVE-2025-38689x86/fpu: Fix NULL dereference in avx512_status()
- CVE-2025-38688iommufd: Prevent ALIGN() overflow
- CVE-2025-38687comedi: fix race between polling and detaching