Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38421platform/x86/amd: pmf: Use device managed allocations
- CVE-2025-38420wifi: carl9170: do not ping device which has failed to load firmware
- CVE-2025-38419remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach()
- CVE-2025-38418remoteproc: core: Release rproc->clean_table after rproc_attach() fails
- CVE-2025-38417ice: fix eswitch code memory leak in reset scenario
- CVE-2025-38416NFC: nci: uart: Set tty->disc_data only in success path
- CVE-2025-38415Squashfs: check return result of sb_min_blocksize
- CVE-2025-38414wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850
- CVE-2025-38413virtio-net: xsk: rx: fix the frame's length check
- CVE-2025-38412platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
- CVE-2025-38411netfs: Fix double put of request
- CVE-2025-38410drm/msm: Fix a fence leak in submit error path
- CVE-2025-38409drm/msm: Fix another leak in the submit error path
- CVE-2025-38408genirq/irq_sim: Initialize work context pointers properly
- CVE-2025-38407riscv: cpu_ops_sbi: Use static array for boot_data
- CVE-2025-38406wifi: ath6kl: remove WARN on bad firmware input
- CVE-2025-38405nvmet: fix memory leak of bio integrity
- CVE-2025-38404usb: typec: displayport: Fix potential deadlock
- CVE-2025-38403vsock/vmci: Clear the vmci transport packet properly when initializing it
- CVE-2025-38402idpf: return 0 size for RSS key if not supported
- CVE-2025-38401mtk-sd: Prevent memory corruption from DMA map failure
- CVE-2025-38400nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- CVE-2025-38399scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
- CVE-2025-38398spi: spi-qpic-snand: reallocate BAM transactions
- CVE-2025-38397nvme-multipath: fix suspicious RCU usage warning
- CVE-2025-38396fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
- CVE-2025-38395regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
- CVE-2025-38394HID: appletb-kbd: fix memory corruption of input_handler_list
- CVE-2025-38393NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
- CVE-2025-38392idpf: convert control queue mutex to a spinlock