Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38626f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
- CVE-2025-38625vfio/pds: Fix missing detach_ioas op
- CVE-2025-38624PCI: pnv_php: Clean up allocated IRQs on unplug
- CVE-2025-38623PCI: pnv_php: Fix surprise plug detection and recovery
- CVE-2025-38622net: drop UFO packets in udp_rcv_segment()
- CVE-2025-38621md: make rdev_addable usable for rcu mode
- CVE-2025-38620zloop: fix KASAN use-after-free of tag set
- CVE-2025-38619media: ti: j721e-csi2rx: fix list_del corruption
- CVE-2025-38618vsock: Do not allow binding to VMADDR_PORT_ANY
- CVE-2025-38617net/packet: fix a race in packet_set_ring() and packet_notifier()
- CVE-2025-38616tls: handle data disappearing from under the TLS ULP
- CVE-2024-58239tls: stop recv() if initial process_rx_list gave us non-DATA
- CVE-2025-38615fs/ntfs3: cancle set bad inode after removing name fails
- CVE-2025-38614eventpoll: Fix semi-unbounded recursion
- CVE-2025-38613staging: gpib: fix unset padding field copy back to userspace
- CVE-2025-38612staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
- CVE-2025-38610powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()
- CVE-2025-38609PM / devfreq: Check governor before using governor->name
- CVE-2025-38608bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
- CVE-2025-38607bpf: handle jset (if a & b ...) as a jump in CFG computation
- CVE-2025-38606wifi: ath12k: Avoid accessing uninitialized arvif->ar during beacon miss
- CVE-2025-38605wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type()
- CVE-2025-38604wifi: rtl818x: Kill URBs before clearing tx status queue
- CVE-2025-38602iwlwifi: Add missing check for alloc_ordered_workqueue
- CVE-2025-38601wifi: ath11k: clear initialized flag for deinit-ed srng lists
- CVE-2025-38600wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan()
- CVE-2025-38599wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx()
- CVE-2025-38598drm/amdgpu: fix use-after-free in amdgpu_userq_suspend+0x51a/0x5a0
- CVE-2025-38597drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port
- CVE-2025-38596drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code