Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-49956staging: rtl8712: fix use after free bugs
- CVE-2022-49955powerpc/rtas: Fix RTAS MSR[HV] handling for Cell
- CVE-2022-49954Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- CVE-2022-49953iio: light: cm3605: Fix an error handling path in cm3605_probe()
- CVE-2022-49952misc: fastrpc: fix memory corruption on probe
- CVE-2022-49951firmware_loader: Fix use-after-free during unregister
- CVE-2022-49950misc: fastrpc: fix memory corruption on open
- CVE-2022-49949firmware_loader: Fix memory leak in firmware upload
- CVE-2022-49948vt: Clear selection before changing the font
- CVE-2022-49947binder: fix alloc->vma_vm_mm null-ptr dereference
- CVE-2022-49946clk: bcm: rpi: Prevent out-of-bounds access
- CVE-2022-49945hwmon: (gpio-fan) Fix array out of bounds access
- CVE-2022-49944Revert "usb: typec: ucsi: add a common function ucsi_unregister_connectors()"
- CVE-2022-49943USB: gadget: Fix obscure lockdep violation for udc_mutex
- CVE-2022-49942wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- CVE-2022-49940tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf()
- CVE-2022-49939binder: fix UAF of ref->proc caused by race condition
- CVE-2022-49938cifs: fix small mempool leak in SMB2_negotiate()
- CVE-2022-49937media: mceusb: Use new usb_control_msg_*() routines
- CVE-2022-49936USB: core: Prevent nested device-reset calls
- CVE-2022-49935dma-buf/dma-resv: check if the new fence is really later
- CVE-2022-49934wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- CVE-2025-38082gpio: virtuser: fix potential out-of-bound write
- CVE-2025-38081spi-rockchip: Fix register out of bounds access
- CVE-2025-38080drm/amd/display: Increase block_sequence array size
- CVE-2025-38079crypto: algif_hash - fix double free in hash_accept
- CVE-2025-38078ALSA: pcm: Fix race of buffer access at PCM OSS layer
- CVE-2025-38077platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
- CVE-2025-38076alloc_tag: allocate percpu counters for module tags dynamically
- CVE-2025-38075scsi: target: iscsi: Fix timeout on deleted connection