Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38510kasan: remove kasan_find_vm_area() to prevent possible deadlock
- CVE-2025-38509wifi: mac80211: reject VHT opmode for unsupported channel widths
- CVE-2025-38508x86/sev: Use TSC_FACTOR for Secure TSC frequency calculation
- CVE-2025-38507HID: nintendo: avoid bluetooth suspend/resume stalls
- CVE-2025-38506KVM: Allow CPU to reschedule while setting per-page memory attributes
- CVE-2025-38505wifi: mwifiex: discard erroneous disassoc frames on STA interface
- CVE-2025-38504io_uring/zcrx: fix pp destruction warnings
- CVE-2025-38503btrfs: fix assertion when building free space tree
- CVE-2025-38502bpf: Fix oob access in cgroup local storage
- CVE-2025-38501ksmbd: limit repeated connections from clients with the same IP
- CVE-2025-38500xfrm: interface: fix use-after-free after changing collect_md xfrm interface
- CVE-2025-38499clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- CVE-2024-58238Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- CVE-2022-50233Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}
- CVE-2025-38498do_change_type(): refuse to operate on unmounted/not ours mounts
- CVE-2025-38497usb: gadget: configfs: Fix OOB read on empty string write
- CVE-2025-38496dm-bufio: fix sched in atomic context
- CVE-2025-38495HID: core: ensure the allocated report buffer can contain the reserved report ID
- CVE-2025-38494HID: core: do not bypass hid_hw_raw_request
- CVE-2025-38493tracing/osnoise: Fix crash in timerlat_dump_stack()
- CVE-2025-38492netfs: Fix race between cache write completion and ALL_QUEUED being set
- CVE-2025-38491mptcp: make fallback action and fallback decision atomic
- CVE-2025-38490net: libwx: remove duplicate page_pool_put_full_page()
- CVE-2025-38489s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again
- CVE-2025-38488smb: client: fix use-after-free in crypt_message when using async crypto
- CVE-2025-38487soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
- CVE-2025-38486soundwire: Revert "soundwire: qcom: Add set_channel_map api support"
- CVE-2025-38485iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush
- CVE-2025-38484iio: backend: fix out-of-bound write
- CVE-2025-38483comedi: das16m1: Fix bit shift out of bounds