Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-37948arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
- CVE-2025-37947ksmbd: prevent out-of-bounds stream writes by validating *pos
- CVE-2025-37946s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs
- CVE-2025-37945net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY
- CVE-2025-37944wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
- CVE-2025-37943wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
- CVE-2025-37941ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe()
- CVE-2025-37940ftrace: Add cond_resched() to ftrace_graph_set_hash()
- CVE-2025-37939libbpf: Fix accessing BTF.ext core_relo header
- CVE-2025-37938tracing: Verify event formats that have "%*p.."
- CVE-2025-37937objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- CVE-2025-37936perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
- CVE-2025-37935net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM
- CVE-2025-37934ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction
- CVE-2025-37933octeon_ep: Fix host hang issue during device reboot
- CVE-2025-37932sch_htb: make htb_qlen_notify() idempotent
- CVE-2025-37931btrfs: adjust subpage bit start based on sectorsize
- CVE-2025-37930drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()
- CVE-2025-37929arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
- CVE-2025-37928dm-bufio: don't schedule in atomic context
- CVE-2025-37927iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
- CVE-2025-37926ksmbd: fix use-after-free in ksmbd_session_rpc_open
- CVE-2025-37924ksmbd: fix use-after-free in kerberos authentication
- CVE-2025-37923tracing: Fix oob write in trace_seq_to_buffer()
- CVE-2025-37922book3s64/radix : Align section vmemmap start address to PAGE_SIZE
- CVE-2025-37921vxlan: vnifilter: Fix unlocked deletion of default FDB entry
- CVE-2025-37920xsk: Fix race condition in AF_XDP generic RX path
- CVE-2025-37919ASoC: amd: acp: Fix NULL pointer deref in acp_i2s_set_tdm_slot
- CVE-2025-37918Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()
- CVE-2025-37917net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll