Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38391usb: typec: altmodes/displayport: do not index invalid pin_assignments
- CVE-2025-38390firmware: arm_ffa: Fix memory leak by freeing notifier callback node
- CVE-2025-38389drm/i915/gt: Fix timeline left held on VMA alloc error
- CVE-2025-38388firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context
- CVE-2025-38387RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
- CVE-2025-38386ACPICA: Refuse to evaluate a method if arguments are missing
- CVE-2025-38385net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
- CVE-2025-38384mtd: spinand: fix memory leak of ECC engine conf
- CVE-2025-38383mm/vmalloc: fix data race in show_numa_info()
- CVE-2025-38382btrfs: fix iteration of extrefs during log replay
- CVE-2025-38381Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt()
- CVE-2025-38379smb: client: fix warning when reconnecting channel
- CVE-2025-38378HID: appletb-kbd: fix slab use-after-free bug in appletb_kbd_probe
- CVE-2025-38377rose: fix dangling neighbour pointers in rose_rt_device_down()
- CVE-2025-38376usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume
- CVE-2025-38375virtio-net: ensure the received length does not exceed allocated size
- CVE-2025-38374optee: ffa: fix sleep in atomic context
- CVE-2025-38373IB/mlx5: Fix potential deadlock in MR deregistration
- CVE-2025-38372RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling
- CVE-2025-38371drm/v3d: Disable interrupts before resetting the GPU
- CVE-2025-38370btrfs: fix failure to rebuild free space tree using multiple transactions
- CVE-2025-38369dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
- CVE-2025-38368misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe()
- CVE-2025-38367LoongArch: KVM: Avoid overflow with array index
- CVE-2025-38366LoongArch: KVM: Check validity of "num_cpu" from user space
- CVE-2025-38365btrfs: fix a race between renames and directory logging
- CVE-2025-38364maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()
- CVE-2025-38363drm/tegra: Fix a possible null pointer dereference
- CVE-2025-38362drm/amd/display: Add null pointer check for get_first_active_display()
- CVE-2025-38361drm/amd/display: Check dce_hwseq before dereferencing it