Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38451md/md-bitmap: fix GPF in bitmap_get_stats()
- CVE-2025-38450wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_sta_set_decap_offload()
- CVE-2025-38449drm/gem: Acquire references on GEM handles for framebuffers
- CVE-2025-38448usb: gadget: u_serial: Fix race condition in TTY wakeup
- CVE-2025-38447mm/rmap: fix potential out-of-bounds page table access during batched unmap
- CVE-2025-38446clk: imx: Fix an out-of-bounds access in dispmix_csr_clk_dev_data
- CVE-2025-38445md/raid1: Fix stack memory use after return in raid1_reshape
- CVE-2025-38444raid10: cleanup memleak at raid10_make_request
- CVE-2025-38443nbd: fix uaf in nbd_genl_connect() error path
- CVE-2025-38442block: reject bs > ps block devices when THP is disabled
- CVE-2025-38441netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
- CVE-2025-38440net/mlx5e: Fix race between DIM disable and net_dim()
- CVE-2025-38439bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- CVE-2025-38438ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak.
- CVE-2025-38437ksmbd: fix potential use-after-free in oplock/lease break ack
- CVE-2025-38436drm/scheduler: signal scheduled fence when kill job
- CVE-2025-38435riscv: vector: Fix context save/restore with xtheadvector
- CVE-2025-38434Revert "riscv: Define TASK_SIZE_MAX for __access_ok()"
- CVE-2025-38433riscv: fix runtime constant support for nommu kernels
- CVE-2025-38432net: netpoll: Initialize UDP checksum field before checksumming
- CVE-2025-38431smb: client: fix regression with native SMB symlinks
- CVE-2025-38430nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
- CVE-2025-38429bus: mhi: ep: Update read pointer only after buffer is written
- CVE-2025-38428Input: ims-pcu - check record size in ims_pcu_flash_firmware()
- CVE-2025-38427video: screen_info: Relocate framebuffers behind PCI bridges
- CVE-2025-38426drm/amdgpu: Add basic validation for RAS header
- CVE-2025-38425i2c: tegra: check msg length in SMBUS block read
- CVE-2025-38424perf: Fix sample vs do_exit()
- CVE-2025-38423ASoC: codecs: wcd9375: Fix double free of regulator supplies
- CVE-2025-38422net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices