Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38360drm/amd/display: Add more checks for DSC / HUBP ONO guarantees
- CVE-2025-38359s390/mm: Fix in_atomic() handling in do_secure_storage_access()
- CVE-2025-38358btrfs: fix race between async reclaim worker and close_ctree()
- CVE-2025-38357fuse: fix runtime warning on truncate_folio_batch_exceptionals()
- CVE-2025-38356drm/xe/guc: Explicitly exit CT safe mode on unwind
- CVE-2025-38355drm/xe: Process deferred GGTT node removals on device unwind
- CVE-2025-38354drm/msm/gpu: Fix crash when throttling GPU immediately during boot
- CVE-2025-38353drm/xe: Fix taking invalid lock on wedge
- CVE-2025-38352posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- CVE-2025-38351KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush
- CVE-2025-38350net/sched: Always pass notifications when child class becomes empty
- CVE-2025-38349eventpoll: don't decrement ep refcount while still holding the ep mutex
- CVE-2025-38348wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
- CVE-2025-38347f2fs: fix to do sanity check on ino and xnid
- CVE-2025-38346ftrace: Fix UAF when lookup kallsym after ftrace disabled
- CVE-2025-38345ACPICA: fix acpi operand cache leak in dswstate.c
- CVE-2025-38344ACPICA: fix acpi parse and parseext cache leaks
- CVE-2025-38343wifi: mt76: mt7996: drop fragments with multicast or broadcast RA
- CVE-2025-38342software node: Correct a OOB check in software_node_get_reference_args()
- CVE-2025-38341eth: fbnic: avoid double free when failing to DMA-map FW msg
- CVE-2025-38340firmware: cs_dsp: Fix OOB memory read access in KUnit test
- CVE-2025-38339powerpc/bpf: fix JIT code size calculation of bpf trampoline
- CVE-2025-38338fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()
- CVE-2025-38337jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- CVE-2025-38336ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
- CVE-2025-38335Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT
- CVE-2025-38334x86/sgx: Prevent attempts to reclaim poisoned pages
- CVE-2025-38333f2fs: fix to bail out in get_new_segment()
- CVE-2025-38332scsi: lpfc: Use memcpy() for BIOS version
- CVE-2025-38331net: ethernet: cortina: Use TOE/TSO on all TCP