Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38595xen: fix UAF in dmabuf_exp_from_pages()
- CVE-2025-38594iommu/vt-d: Fix UAF on sva unbind with pending IOPFs
- CVE-2025-38593Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'
- CVE-2025-38592Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv
- CVE-2025-38591bpf: Reject narrower access to pointer ctx fields
- CVE-2025-38590net/mlx5e: Remove skb secpath if xfrm state is not found
- CVE-2025-38589neighbour: Fix null-ptr-deref in neigh_flush_dev().
- CVE-2025-38588ipv6: prevent infinite loop in rt6_nlmsg_size()
- CVE-2025-38587ipv6: fix possible infinite loop in fib6_info_uses_dev()
- CVE-2025-38586bpf, arm64: Fix fp initialization for exception boundary
- CVE-2025-38585staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int()
- CVE-2025-38584padata: Fix pd UAF once and for all
- CVE-2025-38583clk: xilinx: vcu: unregister pll_post only if registered correctly
- CVE-2025-38582RDMA/hns: Fix double destruction of rsv_qp
- CVE-2025-38581crypto: ccp - Fix crash when rebind ccp device for ccp.ko
- CVE-2025-38580ext4: fix inode use after free in ext4_end_io_rsv_work()
- CVE-2025-38579f2fs: fix KMSAN uninit-value in extent_info usage
- CVE-2025-38578f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
- CVE-2025-38577f2fs: fix to avoid panic in f2fs_evict_inode
- CVE-2025-38576powerpc/eeh: Make EEH driver device hotplug safe
- CVE-2025-38574pptp: ensure minimal skb length in pptp_xmit()
- CVE-2025-38573spi: cs42l43: Property entry should be a null-terminated array
- CVE-2025-38572ipv6: reject malicious packets in ipv6_gso_segment()
- CVE-2025-38571sunrpc: fix client side handling of tls alerts
- CVE-2025-38570eth: fbnic: unlink NAPIs from queues on error to open
- CVE-2025-38569benet: fix BUG when creating VFs
- CVE-2025-38568net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing
- CVE-2025-38567nfsd: avoid ref leak in nfsd_open_local_fh()
- CVE-2025-38566sunrpc: fix handling of server side tls alerts
- CVE-2025-38565perf/core: Exit early on perf_mmap() fail