Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38146net: openvswitch: Fix the dead loop of MPLS parse
- CVE-2025-38145soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
- CVE-2025-38144watchdog: lenovo_se30_wdt: Fix possible devm_ioremap() NULL pointer dereference in lenovo_se30_wdt_probe()
- CVE-2025-38143backlight: pm8941: Add NULL check in wled_configure()
- CVE-2025-38142hwmon: (asus-ec-sensors) check sensor index in read_string()
- CVE-2025-38141dm: fix dm_blk_report_zones
- CVE-2025-38140dm: limit swapping tables for devices with zone write plugs
- CVE-2025-38139netfs: Fix oops in write-retry from mis-resetting the subreq iterator
- CVE-2025-38138dmaengine: ti: Add NULL check in udma_probe()
- CVE-2025-38137PCI/pwrctrl: Cancel outstanding rescan work when unregistering
- CVE-2025-38136usb: renesas_usbhs: Reorder clock handling and power management in probe
- CVE-2025-38135serial: Fix potential null-ptr-deref in mlb_usio_probe()
- CVE-2025-38134usb: acpi: Prevent null pointer dereference in usb_acpi_add_usb4_devlink()
- CVE-2025-38133iio: adc: ad4851: fix ad4858 chan pointer handling
- CVE-2025-38132coresight: holding cscfg_csdev_lock while removing cscfg from csdev
- CVE-2025-38131coresight: prevent deactivate active config while enabling the config
- CVE-2025-38130drm/connector: only call HDMI audio helper plugged cb if non-null
- CVE-2025-38129page_pool: Fix use-after-free in page_pool_recycle_in_ring
- CVE-2025-38128Bluetooth: MGMT: reject malformed HCI_CMD_SYNC commands
- CVE-2025-38127ice: fix Tx scheduler error handling in XDP callback
- CVE-2025-38126net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping
- CVE-2025-38125net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- CVE-2025-38124net: fix udp gso skb_segment after pull from frag_list
- CVE-2025-38123net: wwan: t7xx: Fix napi rx poll issue
- CVE-2025-38122gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO
- CVE-2025-38121wifi: iwlwifi: mld: avoid panic on init failure
- CVE-2025-38120netfilter: nf_set_pipapo_avx2: fix initial map fill
- CVE-2025-38119scsi: core: ufs: Fix a hang in the error handler
- CVE-2025-38118Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
- CVE-2025-38117Bluetooth: MGMT: Protect mgmt_pending list with its own lock