Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-37886pds_core: make wait_context part of q_info
- CVE-2025-37885KVM: x86: Reset IRTE to host control if *new* route isn't postable
- CVE-2025-37884bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
- CVE-2025-37883s390/sclp: Add check for get_zeroed_page()
- CVE-2025-37882usb: xhci: Fix isochronous Ring Underrun/Overrun event handling
- CVE-2025-37881usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
- CVE-2025-37880um: work around sched_yield not yielding in time-travel mode
- CVE-2025-378799p/net: fix improper handling of bogus negative read/write replies
- CVE-2025-37878perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
- CVE-2025-37877iommu: Clear iommu-dma ops on cleanup
- CVE-2025-37876netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS
- CVE-2025-37875igc: fix PTM cycle trigger logic
- CVE-2025-37874net: ngbe: fix memory leak in ngbe_probe() error path
- CVE-2025-37873eth: bnxt: fix missing ring index trim on error path
- CVE-2025-37872net: txgbe: fix memory leak in txgbe_probe() error path
- CVE-2025-37871nfsd: decrease sc_count directly if fail to queue dl_recall
- CVE-2025-37870drm/amd/display: prevent hang on link training fail
- CVE-2025-37869drm/xe: Use local fence in error path of xe_migrate_clear
- CVE-2025-37868drm/xe/userptr: fix notifier vs folio deadlock
- CVE-2025-37867RDMA/core: Silence oversized kvmalloc() warning
- CVE-2025-37866mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show()
- CVE-2025-37865net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported
- CVE-2025-37864net: dsa: clean up FDB, MDB, VLAN entries on unbind
- CVE-2025-37863ovl: don't allow datadir only
- CVE-2025-37862HID: pidff: Fix null pointer dereference in pidff_find_fields
- CVE-2025-37861scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
- CVE-2025-37859page_pool: avoid infinite loop to schedule delayed worker
- CVE-2025-37858fs/jfs: Prevent integer overflow in AG size calculation
- CVE-2025-37857scsi: st: Fix array overflow in st_setup()
- CVE-2025-37856btrfs: harden block_group::bg_list against list_del() races