Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38116wifi: ath12k: fix uaf in ath12k_core_init()
- CVE-2025-38115net_sched: sch_sfq: fix a potential crash on gso_skb handling
- CVE-2025-38114e1000: Move cancel_work_sync to avoid deadlock
- CVE-2025-38113ACPI: CPPC: Fix NULL pointer dereference when nosmp is used
- CVE-2025-38112net: Fix TOCTOU issue in sk_is_readable()
- CVE-2025-38111net/mdiobus: Fix potential out-of-bounds read/write access
- CVE-2025-38110net/mdiobus: Fix potential out-of-bounds clause 45 read/write access
- CVE-2025-38109net/mlx5: Fix ECVF vports unload on shutdown flow
- CVE-2025-38108net_sched: red: fix a race in __red_change()
- CVE-2025-38107net_sched: ets: fix a race in ets_qdisc_change()
- CVE-2025-38106io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo()
- CVE-2025-38105ALSA: usb-audio: Kill timer properly at removal
- CVE-2025-38103HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
- CVE-2025-38102VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
- CVE-2025-38101ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set()
- CVE-2025-38100x86/iopl: Cure TIF_IO_BITMAP inconsistencies
- CVE-2025-38099Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken
- CVE-2025-38098drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink
- CVE-2025-38097espintcp: remove encap socket caching to avoid reference leak
- CVE-2025-38096wifi: iwlwifi: don't warn when if there is a FW error
- CVE-2025-38095dma-buf: insert memory barrier before updating num_fences
- CVE-2025-38094net: cadence: macb: Fix a possible deadlock in macb_halt_tx.
- CVE-2025-38093arm64: dts: qcom: x1e80100: Add GPU cooling
- CVE-2025-38092ksmbd: use list_first_entry_or_null for opinfo_get_list()
- CVE-2025-38091drm/amd/display: check stream id dml21 wrapper to get plane_id
- CVE-2025-38090drivers/rapidio/rio_cm.c: prevent possible heap overwrite
- CVE-2025-38089sunrpc: handle SVC_GARBAGE during svc auth processing as auth error
- CVE-2025-38088powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap
- CVE-2025-38087net/sched: fix use-after-free in taprio_dev_notifier
- CVE-2025-38086net: ch9200: fix uninitialised access during mii_nway_restart