Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38540HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
- CVE-2025-38539tracing: Add down_write(trace_event_sem) when adding trace event
- CVE-2025-38538dmaengine: nbpfaxi: Fix memory corruption in probe()
- CVE-2025-38537net: phy: Don't register LEDs for genphy
- CVE-2025-38536net: airoha: fix potential use-after-free in airoha_npu_get()
- CVE-2025-38535phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode
- CVE-2025-38534netfs: Fix copy-to-cache so that it performs collection with ceph+fscache
- CVE-2025-38533net: libwx: fix the using of Rx buffer DMA
- CVE-2025-38532net: libwx: properly reset Rx ring descriptor
- CVE-2025-38531iio: common: st_sensors: Fix use of uninitialize device structs
- CVE-2025-38530comedi: pcl812: Fix bit shift out of bounds
- CVE-2025-38529comedi: aio_iiro_16: Fix bit shift out of bounds
- CVE-2025-38528bpf: Reject %p% format string in bprintf-like helpers
- CVE-2025-38527smb: client: fix use-after-free in cifs_oplock_break
- CVE-2025-38526ice: add NULL check in eswitch lag check
- CVE-2025-38525rxrpc: Fix irq-disabled in local_bh_enable()
- CVE-2025-38524rxrpc: Fix recv-recv race of completed call
- CVE-2025-38523cifs: Fix the smbd_response slab to allow usercopy
- CVE-2025-38522sched/ext: Prevent update_locked_rq() calls with NULL rq
- CVE-2025-38521drm/imagination: Fix kernel crash when hard resetting the GPU
- CVE-2025-38520drm/amdkfd: Don't call mmput from MMU notifier callback
- CVE-2025-38519mm/damon: fix divide by zero in damon_get_intervals_score()
- CVE-2025-38518x86/CPU/AMD: Disable INVLPGB on Zen2
- CVE-2025-38517lib/alloc_tag: do not acquire non-existent lock in alloc_tag_top_users()
- CVE-2025-38516pinctrl: qcom: msm: mark certain pins as invalid for interrupts
- CVE-2025-38515drm/sched: Increment job count before swapping tail spsc queue
- CVE-2025-38514rxrpc: Fix oops due to non-existence of prealloc backlog struct
- CVE-2025-38513wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
- CVE-2025-38512wifi: prevent A-MSDU attacks in mesh networks
- CVE-2025-38511drm/xe/pf: Clear all LMTT pages on alloc