Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38564perf/core: Handle buffer mapping fail correctly in perf_mmap()
- CVE-2025-38563perf/core: Prevent VMA split of buffer mappings
- CVE-2025-38562ksmbd: fix null pointer dereference error in generate_encryptionkey
- CVE-2025-38561ksmbd: fix Preauh_HashValue race condition
- CVE-2025-38560x86/sev: Evict cache lines during SNP memory validation
- CVE-2025-38559platform/x86/intel/pmt: fix a crashlog NULL pointer access
- CVE-2025-38558usb: gadget: uvc: Initialize frame-based format color matching descriptor
- CVE-2025-38557HID: apple: validate feature-report field count to prevent NULL pointer dereference
- CVE-2025-38556HID: core: Harden s32ton() against conversion to 0 bits
- CVE-2025-38555usb: gadget : fix use-after-free in composite_dev_cleanup()
- CVE-2025-38554mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped
- CVE-2023-3867ksmbd: fix out of bounds read in smb2_sess_setup
- CVE-2023-4130ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()
- CVE-2023-3866ksmbd: validate session id and tree id in the compound request
- CVE-2023-3865ksmbd: fix out-of-bound read in smb2_write
- CVE-2023-4515ksmbd: validate command request size
- CVE-2023-32249ksmbd: not allow guest user on multichannel
- CVE-2023-32246ksmbd: call rcu_barrier() in ksmbd_server_exit()
- CVE-2025-38552mptcp: plug races between subflow fail and subflow creation
- CVE-2025-38551virtio-net: fix recursived rtnl_lock() during probe()
- CVE-2025-38550ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
- CVE-2025-38549efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths
- CVE-2025-38548hwmon: (corsair-cpro) Validate the size of the received input buffer
- CVE-2025-38547iio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC channel maps
- CVE-2025-38546atm: clip: Fix memory leak of struct clip_vcc.
- CVE-2025-38545net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skb_shared_info
- CVE-2025-38544rxrpc: Fix bug due to prealloc collision
- CVE-2025-38543drm/tegra: nvdec: Fix dma_alloc_coherent error check
- CVE-2025-38542net: appletalk: Fix device refcount leak in atrtr_create()
- CVE-2025-38541wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init()