Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-37916pds_core: remove write-after-free of client_id
- CVE-2025-37915net_sched: drr: Fix double list add in class with netem as child qdisc
- CVE-2025-37914net_sched: ets: Fix double list add in class with netem as child qdisc
- CVE-2025-37913net_sched: qfq: Fix double list add in class with netem as child qdisc
- CVE-2025-37912ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr()
- CVE-2025-37911bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- CVE-2025-37910ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations
- CVE-2025-37909net: lan743x: Fix memleak issue when GSO enabled
- CVE-2025-37908mm, slab: clean up slab->obj_exts always
- CVE-2025-37907accel/ivpu: Fix locking order in ivpu_job_submit
- CVE-2025-37906ublk: fix race between io_uring_cmd_complete_in_task and ublk_cancel_cmd
- CVE-2025-37905firmware: arm_scmi: Balance device refcount when destroying devices
- CVE-2025-37904btrfs: fix the inode leak in btrfs_iget()
- CVE-2025-37903drm/amd/display: Fix slab-use-after-free in hdcp
- CVE-2025-37901irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs
- CVE-2025-37900iommu: Fix two issues in iommu_copy_struct_from_user()
- CVE-2025-37899ksmbd: fix use-after-free in session logoff
- CVE-2025-37898powerpc64/ftrace: fix module loading without patchable function entries
- CVE-2025-37897wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release
- CVE-2025-37896spi: spi-mem: Add fix to avoid divide error
- CVE-2025-37895bnxt_en: Fix error handling path in bnxt_init_chip()
- CVE-2025-37894net: use sock_gen_put() when sk_state is TCP_TIME_WAIT
- CVE-2025-37892mtd: inftlcore: Add error check for inftl_read_oob()
- CVE-2025-37891ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
- CVE-2025-37890net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
- CVE-2023-53146media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
- CVE-2023-53145Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- CVE-2025-37889ASoC: ops: Consistently treat platform_max as control value
- CVE-2025-37888net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table()
- CVE-2025-37887pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result