Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38657wifi: rtw89: mcc: prevent shift wrapping in rtw89_core_mlsr_switch()
- CVE-2025-38656wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()
- CVE-2025-38655pinctrl: canaan: k230: add NULL check in DT parse
- CVE-2025-38654pinctrl: canaan: k230: Fix order of DT parse and pinctrl register
- CVE-2025-38653proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al
- CVE-2025-38652f2fs: fix to avoid out-of-boundary access in devs.path
- CVE-2025-38651landlock: Fix warning from KUnit tests
- CVE-2025-38650hfsplus: remove mutex_lock check in hfsplus_free_extents
- CVE-2025-38649arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight
- CVE-2025-38648spi: stm32: Check for cfg availability in stm32_spi_probe
- CVE-2025-38647wifi: rtw89: sar: drop lockdep assertion in rtw89_set_sar_from_acpi
- CVE-2025-38646wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band
- CVE-2025-38645net/mlx5: Check device memory pointer before usage
- CVE-2025-38644wifi: mac80211: reject TDLS operations when station is not associated
- CVE-2025-38643wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()
- CVE-2025-38642wifi: mac80211: fix WARN_ON for monitor mode on some devices
- CVE-2025-38641Bluetooth: btusb: Fix potential NULL dereference on kmalloc failure
- CVE-2025-38640bpf: Disable migration in nf_hook_run_bpf().
- CVE-2025-38639netfilter: xt_nfacct: don't assume acct name is null-terminated
- CVE-2025-38638ipv6: add a retry logic in net6_rt_notify()
- CVE-2025-38636rv: Use strings in da monitors tracepoints
- CVE-2025-38635clk: davinci: Add NULL check in davinci_lpsc_clk_register()
- CVE-2025-38634power: supply: cpcap-charger: Fix null check for power_supply_get_by_name
- CVE-2025-38633clk: spacemit: mark K1 pll1_d8 as critical
- CVE-2025-38632pinmux: fix race causing mux_owner NULL with active mux_usecount
- CVE-2025-38631clk: imx95-blk-ctl: Fix synchronous abort
- CVE-2025-38630fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
- CVE-2025-38629ALSA: usb: scarlett2: Fix missing NULL check
- CVE-2025-38628vdpa/mlx5: Fix release of uninitialized resources on error path
- CVE-2025-38627f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic