Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38074vhost-scsi: protect vq->log_used with vq->mutex
- CVE-2025-38072libnvdimm/labels: Fix divide error in nd_label_data_init()
- CVE-2025-38071x86/mm: Check return value from memblock_phys_alloc_range()
- CVE-2025-38070ASoC: sma1307: Add NULL check in sma1307_setting_loaded()
- CVE-2025-38069PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops
- CVE-2025-38068crypto: lzo - Fix compression buffer overrun
- CVE-2025-38067rseq: Fix segfault on registration when rseq_cs is non-zero
- CVE-2025-38066dm cache: prevent BUG_ON by blocking retries on failed device resumes
- CVE-2025-38065orangefs: Do not truncate file size
- CVE-2025-38064virtio: break and reset virtio devices on device_shutdown()
- CVE-2025-38063dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- CVE-2025-38062genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie
- CVE-2025-38061net: pktgen: fix access outside of user given buffer in pktgen_thread_write()
- CVE-2025-38060bpf: copy_verifier_state() should copy 'loop_entry' field
- CVE-2025-38059btrfs: avoid NULL pointer dereference if no valid csum tree
- CVE-2025-38058__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
- CVE-2025-38057espintcp: fix skb leaks
- CVE-2025-38056ASoC: SOF: Intel: hda: Fix UAF when reloading module
- CVE-2025-38055perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq
- CVE-2025-38054ptp: ocp: Limit signal/freq counts in summary output functions
- CVE-2025-38053idpf: fix null-ptr-deref in idpf_features_check
- CVE-2025-38052net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
- CVE-2025-38051smb: client: Fix use-after-free in cifs_fill_dirent
- CVE-2025-38050mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios
- CVE-2025-38048virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
- CVE-2025-38047x86/fred: Fix system hang during S4 resume with FRED enabled
- CVE-2025-38045wifi: iwlwifi: fix debug actions order
- CVE-2025-38044media: cx231xx: set device_caps for 417
- CVE-2025-38043firmware: arm_ffa: Set dma_mask for ffa devices
- CVE-2025-38042dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chn