Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38482comedi: das6402: Fix bit shift out of bounds
- CVE-2025-38481comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
- CVE-2025-38480comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
- CVE-2025-38478comedi: Fix initialization of data for instructions that write to subdevice
- CVE-2025-38477net/sched: sch_qfq: Fix race condition on qfq_aggregate
- CVE-2025-38476rpl: Fix use-after-free in rpl_do_srh_inline().
- CVE-2025-38475smc: Fix various oops due to inet_sock type confusion.
- CVE-2025-38474usb: net: sierra: check for no status endpoint
- CVE-2025-38473Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
- CVE-2025-38472netfilter: nf_conntrack: fix crash due to removal of uninitialised entry
- CVE-2025-38471tls: always refresh the queue when reading sock
- CVE-2025-38470net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- CVE-2025-38469KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls
- CVE-2025-38468net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
- CVE-2025-38467drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
- CVE-2025-38466perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- CVE-2025-38465netlink: Fix wraparounds of sk->sk_rmem_alloc.
- CVE-2025-38464tipc: Fix use-after-free in tipc_conn_close().
- CVE-2025-38463tcp: Correct signedness in skb remaining space calculation
- CVE-2025-38462vsock: Fix transport_{g2h,h2g} TOCTOU
- CVE-2025-38461vsock: Fix transport_ TOCTOU
- CVE-2025-38460atm: clip: Fix potential null-ptr-deref in to_atmarpd().
- CVE-2025-38459atm: clip: Fix infinite recursive call of clip_push().
- CVE-2025-38458atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
- CVE-2025-38457net/sched: Abort __tc_modify_qdisc if parent class does not exist
- CVE-2025-38456ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
- CVE-2025-38455KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
- CVE-2025-38454ALSA: ad1816a: Fix potential NULL pointer deref in snd_card_ad1816a_pnp()
- CVE-2025-38453io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU
- CVE-2025-38452net: ethernet: rtsn: Fix a null pointer dereference in rtsn_probe()