Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-37979ASoC: qcom: Fix sc7280 lpass potential buffer overflow
- CVE-2025-37978block: integrity: Do not call set_page_dirty_lock()
- CVE-2025-37977scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set
- CVE-2025-37975riscv: module: Fix out-of-bounds relocation access
- CVE-2025-37974s390/pci: Fix missing check for zpci_create_device() error return
- CVE-2025-37973wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation
- CVE-2025-37972Input: mtk-pmic-keys - fix possible null pointer dereference
- CVE-2025-37971staging: bcm2835-camera: Initialise dev in v4l2_dev
- CVE-2025-37970iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
- CVE-2025-37969iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
- CVE-2025-37968iio: light: opt3001: fix deadlock due to concurrent flag access
- CVE-2025-37967usb: typec: ucsi: displayport: Fix deadlock
- CVE-2025-37966riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_CTRL
- CVE-2025-37965drm/amd/display: Fix invalid context error in dml helper
- CVE-2025-37964x86/mm: Eliminate window where TLB flushes may be inadvertently skipped
- CVE-2025-37963arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
- CVE-2025-37962ksmbd: fix memory leak in parse_lease_state()
- CVE-2025-37961ipvs: fix uninit-value for saddr in do_output_route4
- CVE-2025-37960memblock: Accept allocated memory before use in memblock_double_array()
- CVE-2025-37959bpf: Scrub packet on bpf_redirect_peer
- CVE-2025-37958mm/huge_memory: fix dereferencing invalid pmd migration entry
- CVE-2025-37957KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
- CVE-2025-37956ksmbd: prevent rename with empty string
- CVE-2025-37955virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable()
- CVE-2025-37954smb: client: Avoid race in open_cached_dir with lease breaks
- CVE-2025-37953sch_htb: make htb_deactivate() idempotent
- CVE-2025-37952ksmbd: Fix UAF in __close_file_table_ids
- CVE-2025-37951drm/v3d: Add job to pending list if the reset was skipped
- CVE-2025-37950ocfs2: fix panic in failed foilio allocation
- CVE-2025-37949xenbus: Use kref to track req lifetime