Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-37822riscv: uprobes: Add missing fence.i after building the XOL buffer
- CVE-2025-37821sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash
- CVE-2025-37820xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
- CVE-2025-37819irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
- CVE-2025-37818LoongArch: Return NULL from huge_pte_offset() for invalid PMD
- CVE-2025-37817mcb: fix a double free bug in chameleon_parse_gdd()
- CVE-2025-37816mei: vsc: Fix fortify-panic caused by invalid counted_by() use
- CVE-2025-37815misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
- CVE-2025-37814tty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT
- CVE-2025-37813usb: xhci: Fix invalid pointer dereference in Etron workaround
- CVE-2025-37812usb: cdns3: Fix deadlock when using NCM gadget
- CVE-2025-37811usb: chipidea: ci_hdrc_imx: fix usbmisc handling
- CVE-2025-37810usb: dwc3: gadget: check that event count does not exceed event buffer length
- CVE-2025-37809usb: typec: class: Fix NULL pointer access
- CVE-2025-37808crypto: null - Use spin lock instead of mutex
- CVE-2025-37807bpf: Fix kmemleak warning for percpu hashmap
- CVE-2025-37806fs/ntfs3: Keep write operations atomic
- CVE-2025-37805sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
- CVE-2025-37803udmabuf: fix a buf size overflow issue during udmabuf creation
- CVE-2025-37802ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"
- CVE-2025-37801spi: spi-imx: Add check for spi_imx_setupxfer()
- CVE-2025-37800driver core: fix potential NULL pointer dereference in dev_uevent()
- CVE-2020-36791net_sched: keep alloc_hash updated after hash allocation
- CVE-2024-58237bpf: consider that tail calls invalidate packet pointers
- CVE-2024-58100bpf: check changes_pkt_data property for extension programs
- CVE-2024-58098bpf: track changes_pkt_data property for global functions
- CVE-2025-37799vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
- CVE-2022-21546scsi: target: Fix WRITE_SAME No Data Buffer crash
- CVE-2023-53144erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms
- CVE-2023-53143ext4: fix another off-by-one fsmap error on 1k block filesystems