Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-37763drm/imagination: take paired job reference
- CVE-2025-37762drm/virtio: Fix missed dmabuf unpinning in error path of prepare_fb()
- CVE-2025-37761drm/xe: Fix an out-of-bounds shift when invalidating TLB
- CVE-2025-37760mm/vma: add give_up_on_oom option on modify/merge, use in uffd release
- CVE-2025-37759ublk: fix handling recovery & reissue in ublk_abort_queue()
- CVE-2025-37758ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
- CVE-2025-37757tipc: fix memory leak in tipc_link_xmit
- CVE-2025-37756net: tls: explicitly disallow disconnect
- CVE-2025-37755net: libwx: handle page_pool_dev_alloc_pages error
- CVE-2025-37754drm/i915/huc: Fix fence not released on early probe errors
- CVE-2025-37752net_sched: sch_sfq: move the limit validation
- CVE-2025-37751x86/cpu: Avoid running off the end of an AMD erratum table
- CVE-2025-37750smb: client: fix UAF in decryption with multichannel
- CVE-2025-37749net: ppp: Add bound checking for skb data on ppp_sync_txmung
- CVE-2025-37748iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group
- CVE-2025-37747perf: Fix hang while freeing sigtrap event
- CVE-2025-37746perf/dwc_pcie: fix duplicate pci_dev devices
- CVE-2025-37745PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
- CVE-2025-37744wifi: ath12k: fix memory leak in ath12k_pci_remove()
- CVE-2025-37743wifi: ath12k: Avoid memory leak while enabling statistics
- CVE-2025-37742jfs: Fix uninit-value access of imap allocated in the diMount() function
- CVE-2025-37741jfs: Prevent copying of nlink with value 0 from disk inode
- CVE-2025-37740jfs: add sanity check for agwidth in dbMount
- CVE-2025-37739f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
- CVE-2025-37738ext4: ignore xattrs past end
- CVE-2025-23163net: vlan: don't propagate flags on open
- CVE-2025-23162drm/xe/vf: Don't try to trigger a full GT reset if VF
- CVE-2025-23161PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
- CVE-2025-23160media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization
- CVE-2025-23159media: venus: hfi: add a check to handle OOB in sfr region