Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38300crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare()
- CVE-2025-38299ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY()
- CVE-2025-38298EDAC/skx_common: Fix general protection fault
- CVE-2025-38297PM: EM: Fix potential division-by-zero error in em_compute_costs()
- CVE-2025-38296ACPI: platform_profile: Avoid initializing on non-ACPI platforms
- CVE-2025-38295perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create()
- CVE-2025-38294wifi: ath12k: fix NULL access in assign channel context handler
- CVE-2025-38293wifi: ath11k: fix node corruption in ar->arvifs list
- CVE-2025-38292wifi: ath12k: fix invalid access to memory
- CVE-2025-38291wifi: ath12k: Prevent sending WMI commands to firmware during firmware crash
- CVE-2025-38290wifi: ath12k: fix node corruption in ar->arvifs list
- CVE-2025-38289scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk
- CVE-2025-38288scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels
- CVE-2025-38287IB/cm: Drop lockdep assert and WARN when freeing old msg
- CVE-2025-38286pinctrl: at91: Fix possible out-of-boundary access
- CVE-2025-38285bpf: Fix WARN() in get_bpf_raw_tp_regs
- CVE-2025-38284wifi: rtw89: pci: configure manual DAC mode via PCI config API only
- CVE-2025-38283hisi_acc_vfio_pci: bugfix live migration function without VF device driver
- CVE-2025-38282kernfs: Relax constraint in draining guard
- CVE-2025-38281wifi: mt76: mt7996: Add NULL check in mt7996_thermal_init
- CVE-2025-38280bpf: Avoid __bpf_prog_ret0_warn when jit fails
- CVE-2025-38279bpf: Do not include stack ptr register in precision backtracking bookkeeping
- CVE-2025-38278octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback
- CVE-2025-38277mtd: nand: ecc-mxic: Fix use of uninitialized variable ret
- CVE-2025-38276fs/dax: Fix "don't skip locked entries when scanning entries"
- CVE-2025-38275phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug
- CVE-2025-38274fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt()
- CVE-2025-38273net: tipc: fix refcount warning in tipc_aead_encrypt
- CVE-2025-38272net: dsa: b53: do not enable EEE on bcm63xx
- CVE-2025-38271net: prevent a NULL deref in rtnl_create_link()