Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38085mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- CVE-2025-38084mm/hugetlb: unshare page tables during VMA split, not before
- CVE-2025-38083net_sched: prio: fix a race in prio_tune()
- CVE-2022-50232arm64: set UXN on swapper page tables
- CVE-2022-50231crypto: arm64/poly1305 - fix a read out-of-bound
- CVE-2022-50230arm64: set UXN on swapper page tables
- CVE-2022-50229ALSA: bcd2000: Fix a UAF bug on the error path of probing
- CVE-2022-50228KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0
- CVE-2022-50227KVM: x86/xen: Initialize Xen timer only once
- CVE-2022-50226crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak
- CVE-2022-50225riscv:uprobe fix SR_SPIE set/clear handling
- CVE-2022-50224KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- CVE-2022-50223LoongArch: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- CVE-2022-50222tty: vt: initialize unicode screen buffer
- CVE-2022-50221drm/fb-helper: Fix out-of-bounds access
- CVE-2022-50220usbnet: Fix linkwatch use-after-free on disconnect
- CVE-2022-50219bpf: Fix KASAN use-after-free Read in compute_effective_progs
- CVE-2022-50218iio: light: isl29028: Fix the warning in isl29028_remove()
- CVE-2022-50217fuse: write inode in fuse_release()
- CVE-2022-50215scsi: sg: Allow waiting for commands to complete on removed device
- CVE-2022-50214coresight: Clear the connection field properly
- CVE-2022-50213netfilter: nf_tables: do not allow SET_ID to refer to another table
- CVE-2022-50212netfilter: nf_tables: do not allow CHAIN_ID to refer to another table
- CVE-2022-50211md-raid10: fix KASAN warning
- CVE-2022-50210MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- CVE-2022-50209meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init
- CVE-2022-50208soc: amlogic: Fix refcount leak in meson-secure-pwrc.c
- CVE-2022-50207ARM: bcm: Fix refcount leak in bcm_kona_smc_init
- CVE-2022-50206arm64: fix oops in concurrently setting insn_emulation sysctls
- CVE-2022-50205ext2: Add more validity checks for inode counts