Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38177sch_hfsc: make hfsc_qlen_notify() idempotent
- CVE-2025-38176binder: fix use-after-free in binderfs_evict_inode()
- CVE-2025-38175binder: fix yet another UAF in binder_devices
- CVE-2025-38174thunderbolt: Do not double dequeue a configuration request
- CVE-2025-38173crypto: marvell/cesa - Handle zero-length skcipher requests
- CVE-2025-38172erofs: avoid using multiple devices with different type
- CVE-2025-38171power: supply: max77705: Fix workqueue error handling in probe
- CVE-2025-38170arm64/fpsimd: Discard stale CPU state when handling SME traps
- CVE-2025-38169arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP
- CVE-2025-38168perf: arm-ni: Unregister PMUs on probe failure
- CVE-2025-38167fs/ntfs3: handle hdr_first_de() return value
- CVE-2025-38166bpf: fix ktls panic with sockmap
- CVE-2025-38165bpf, sockmap: Fix panic when calling skb_linearize
- CVE-2025-38164f2fs: zone: fix to avoid inconsistence in between SIT and SSA
- CVE-2025-38163f2fs: fix to do sanity check on sbi->total_valid_block_count
- CVE-2025-38162netfilter: nft_set_pipapo: prevent overflow in lookup table allocation
- CVE-2025-38161RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction
- CVE-2025-38160clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
- CVE-2025-38159wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
- CVE-2025-38158hisi_acc_vfio_pci: fix XQE dma address error
- CVE-2025-38157wifi: ath9k_htc: Abort software beacon handling if disabled
- CVE-2025-38156wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mmio_wed_init()
- CVE-2025-38155wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()
- CVE-2025-38154bpf, sockmap: Avoid using sk_socket after free when sending
- CVE-2025-38153net: usb: aqc111: fix error handling of usbnet read calls
- CVE-2025-38151RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work
- CVE-2025-38150af_packet: move notifier's packet_dev_mc out of rcu critical section
- CVE-2025-38149net: phy: clear phydev->devlink when the link is deleted
- CVE-2025-38148net: phy: mscc: Fix memory leak when using one step timestamping
- CVE-2025-38147calipso: Don't call calipso functions for AF_INET sk.