Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-38009wifi: mt76: disable napi on driver removal
- CVE-2025-38008mm/page_alloc: fix race condition in unaccepted memory handling
- CVE-2025-38007HID: uclogic: Add NULL check in uclogic_input_configured()
- CVE-2025-38006net: mctp: Don't access ifa_index when missing
- CVE-2025-38005dmaengine: ti: k3-udma: Add missing locking
- CVE-2025-38004can: bcm: add locking for bcm_op runtime updates
- CVE-2025-38003can: bcm: add missing rcu read protection for procfs content
- CVE-2025-38002io_uring/fdinfo: grab ctx->uring_lock around io_uring_show_fdinfo()
- CVE-2025-38001net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
- CVE-2025-38000sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
- CVE-2025-37999fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio()
- CVE-2025-37998openvswitch: Fix unsafe attribute parsing in output_userspace()
- CVE-2025-37997netfilter: ipset: fix region locking in hash types
- CVE-2025-37996KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort()
- CVE-2025-37995module: ensure that kobject_put() is safe for module type kobjects
- CVE-2025-37994usb: typec: ucsi: displayport: Fix NULL pointer access
- CVE-2025-37993can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe
- CVE-2025-37992net_sched: Flush gso_skb list too during ->change()
- CVE-2025-37991parisc: Fix double SIGFPE crash
- CVE-2025-37990wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
- CVE-2025-37989net: phy: leds: fix memory leak
- CVE-2025-37988fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
- CVE-2025-37987pds_core: Prevent possible adminq overflow/stuck condition
- CVE-2025-37986usb: typec: class: Invalidate USB device pointers on partner unregistration
- CVE-2025-37985USB: wdm: close race between wdm_open and wdm_wwan_port_stop
- CVE-2025-37984crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
- CVE-2025-37983qibfs: fix another leak
- CVE-2025-37982wifi: wl1251: fix memory leak in wl1251_tx_work
- CVE-2025-37981scsi: smartpqi: Use is_kdump_kernel() to check for kdump
- CVE-2025-37980block: fix resource leak in blk_register_queue() error path