Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38686userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry
- CVE-2025-38685fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
- CVE-2025-38684net/sched: ets: use old 'nbands' while purging unused classes
- CVE-2025-38683hv_netvsc: Fix panic during namespace deletion with VF
- CVE-2025-38682i2c: core: Fix double-free of fwnode in i2c_unregister_device()
- CVE-2025-38681mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
- CVE-2025-38680media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
- CVE-2025-38679media: venus: Fix OOB read due to missing payload bound check
- CVE-2025-38678netfilter: nf_tables: reject duplicate device on updates
- CVE-2025-38677f2fs: fix to avoid out-of-boundary access in dnode page
- CVE-2024-58240tls: separate no-async decryption request handling from async
- CVE-2025-38676iommu/amd: Avoid stack buffer overflow from kernel cmdline
- CVE-2025-38675xfrm: state: initialize state_ptrs earlier in xfrm_state_find
- CVE-2025-38674Revert "drm/prime: Use dma_buf from GEM object instance"
- CVE-2025-38673Revert "drm/gem-framebuffer: Use dma_buf from GEM object instance"
- CVE-2025-38672Revert "drm/gem-dma: Use dma_buf from GEM object instance"
- CVE-2025-38671i2c: qup: jump out of the loop in case of timeout
- CVE-2025-38670arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
- CVE-2025-38669Revert "drm/gem-shmem: Use dma_buf from GEM object instance"
- CVE-2025-38668regulator: core: fix NULL dereference on unbind due to stale coupling data
- CVE-2025-38667iio: fix potential out-of-bound write
- CVE-2025-38666net: appletalk: Fix use-after-free in AARP proxy probe
- CVE-2025-38665can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode
- CVE-2025-38664ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
- CVE-2025-38663nilfs2: reject invalid file types when reading inodes
- CVE-2025-38662ASoC: mediatek: mt8365-dai-i2s: pass correct size to mt8365_dai_set_priv
- CVE-2025-38661platform/x86: alienware-wmi-wmax: Fix `dmi_system_id` array
- CVE-2025-38660[ceph] parse_longname(): strrchr() expects NUL-terminated string
- CVE-2025-38659gfs2: No more self recovery
- CVE-2025-38658nvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails