Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38208smb: client: add NULL check in automount_fullpath
- CVE-2025-38207mm: fix uprobe pte be overwritten when expanding vma
- CVE-2025-38206exfat: fix double free in delayed_free
- CVE-2025-38205drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1
- CVE-2025-38204jfs: fix array-index-out-of-bounds read in add_missing_indices
- CVE-2025-38203jfs: Fix null-ptr-deref in jfs_ioc_trim
- CVE-2025-38202bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
- CVE-2025-38201netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- CVE-2025-38200i40e: fix MMIO write access to an invalid page in i40e_clear_hw
- CVE-2025-38199wifi: ath12k: Fix memory leak due to multiple rx_stats allocation
- CVE-2025-38198fbcon: Make sure modelist not set on unregistered console
- CVE-2025-38197platform/x86: dell_rbu: Fix list usage
- CVE-2025-38196io_uring/rsrc: validate buffer count with offset for cloning
- CVE-2025-38195LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
- CVE-2025-38194jffs2: check that raw node were preallocated before writing summary
- CVE-2025-38193net_sched: sch_sfq: reject invalid perturb period
- CVE-2025-38192net: clear the dst when changing skb protocol
- CVE-2025-38191ksmbd: fix null pointer dereference in destroy_previous_session
- CVE-2025-38190atm: Revert atm_account_tx() if copy_from_iter_full() fails.
- CVE-2025-38189drm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()`
- CVE-2025-38188drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE
- CVE-2025-38187drm/nouveau: fix a use-after-free in r535_gsp_rpc_push()
- CVE-2025-38186bnxt_en: Fix double invocation of bnxt_ulp_stop()/bnxt_ulp_start()
- CVE-2025-38185atm: atmtcp: Free invalid length skb in atmtcp_c_send().
- CVE-2025-38184tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- CVE-2025-38183net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get()
- CVE-2025-38182ublk: santizize the arguments from userspace when adding a device
- CVE-2025-38181calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- CVE-2025-38180net: atm: fix /proc/net/atm/lec handling
- CVE-2025-38179smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma()