Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38270net: drv: netdevsim: don't napi_complete() from netpoll
- CVE-2025-38269btrfs: exit after state insertion failure at btrfs_convert_extent_bit()
- CVE-2025-38268usb: typec: tcpm: move tcpm_queue_vdm_unlocked to asynchronous work
- CVE-2025-38267ring-buffer: Do not trigger WARN_ON() due to a commit_overrun
- CVE-2025-38266pinctrl: mediatek: eint: Fix invalid pointer dereference for v1 platforms
- CVE-2025-38265serial: jsm: fix NPE during jsm_uart_port_init
- CVE-2025-38264nvme-tcp: sanitize request list handling
- CVE-2025-38263bcache: fix NULL pointer in cache_set_flush()
- CVE-2025-38262tty: serial: uartlite: register uart driver in init
- CVE-2025-38261riscv: save the SR_SUM status over switches
- CVE-2025-38260btrfs: handle csum tree error with rescue=ibadroots correctly
- CVE-2025-38259ASoC: codecs: wcd9335: Fix missing free of regulator supplies
- CVE-2025-38258mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write
- CVE-2025-38257s390/pkey: Prevent overflow in size calculation for memdup_user()
- CVE-2025-38256io_uring/rsrc: fix folio unpinning
- CVE-2025-38255lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly()
- CVE-2025-38254drm/amd/display: Add sanity checks for drm_edid_raw()
- CVE-2025-38253HID: wacom: fix crash in wacom_aes_battery_handler()
- CVE-2025-38252cxl/ras: Fix CPER handler device confusion
- CVE-2025-38251atm: clip: prevent NULL deref in clip_push()
- CVE-2025-38250Bluetooth: hci_core: Fix use-after-free in vhci_flush()
- CVE-2025-38249ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()
- CVE-2025-38248bridge: mcast: Fix use-after-free during router port configuration
- CVE-2025-38247userns and mnt_idmap leak in open_tree_attr(2)
- CVE-2025-38246bnxt: properly flush XDP redirect lists
- CVE-2025-38245atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- CVE-2025-38244smb: client: fix potential deadlock when reconnecting channels
- CVE-2025-38243btrfs: fix invalid inode pointer dereferences during log replay
- CVE-2025-38242mm: userfaultfd: fix race of userfaultfd_move and swap cache
- CVE-2025-38241mm/shmem, swap: fix softlockup with mTHP swapin