Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38239scsi: megaraid_sas: Fix invalid node index
- CVE-2025-38238scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out
- CVE-2025-38237media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode()
- CVE-2025-38236af_unix: Don't leave consecutive consumed OOB skbs.
- CVE-2025-38235HID: appletb-kbd: fix "appletb_backlight" backlight device reference counting
- CVE-2025-38234sched/rt: Fix race in push_rt_task
- CVE-2025-38233powerpc64/ftrace: fix clobbered r15 during livepatching
- CVE-2025-38232NFSD: fix race between nfsd registration and exports_proc
- CVE-2025-38231nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
- CVE-2025-38230jfs: validate AG parameters in dbMount() to prevent crashes
- CVE-2025-38229media: cxusb: no longer judge rbuf when the write fails
- CVE-2025-38228media: imagination: fix a potential memory leak in e5010_probe()
- CVE-2025-38227media: vidtv: Terminating the subsequent process of initialization failure
- CVE-2025-38226media: vivid: Change the siize of the composing
- CVE-2025-38225media: imx-jpeg: Cleanup after an allocation error
- CVE-2025-38224can: kvaser_pciefd: refine error prone echo_skb_max handling logic
- CVE-2025-38223ceph: avoid kernel BUG for encrypted inode with unaligned file size
- CVE-2025-38222ext4: inline: fix len overflow in ext4_prepare_inline_data
- CVE-2025-38221ext4: fix out of bounds punch offset
- CVE-2025-38220ext4: only dirty folios when data journaling regular files
- CVE-2025-38219f2fs: prevent kernel warning due to negative i_nlink from corrupted image
- CVE-2025-38218f2fs: fix to do sanity check on sit_bitmap_size
- CVE-2025-38217hwmon: (ftsteutates) Fix TOCTOU race in fts_read()
- CVE-2025-38216iommu/vt-d: Restore context entry setup order for aliased devices
- CVE-2025-38215fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var
- CVE-2025-38214fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
- CVE-2025-38212ipc: fix to protect IPCS lookups using RCU
- CVE-2025-38211RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
- CVE-2025-38210configfs-tsm-report: Fix NULL dereference of tsm_ops
- CVE-2025-38209nvme-tcp: remove tag set when second admin queue config fails