Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-23158media: venus: hfi: add check to handle incorrect queue size
- CVE-2025-23157media: venus: hfi_parser: add check to avoid out of bound access
- CVE-2025-23156media: venus: hfi_parser: refactor hfi packet parsing logic
- CVE-2025-23155net: stmmac: Fix accessing freed irq affinity_hint
- CVE-2025-23154io_uring/net: fix io_req_post_cqe abuse by send bundle
- CVE-2025-23153arm/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch()
- CVE-2025-23152arm64/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch()
- CVE-2025-23151bus: mhi: host: Fix race between unprepare and queue_buf
- CVE-2025-23150ext4: fix off-by-one error in do_split
- CVE-2025-23149tpm: do not start chip while suspended
- CVE-2025-23148soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- CVE-2025-23147i3c: Add NULL pointer check in i3c_master_queue_ibi()
- CVE-2025-23146mfd: ene-kb3930: Fix a potential NULL pointer dereference
- CVE-2025-23145mptcp: fix NULL pointer in can_accept_new_subflow
- CVE-2025-23144backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- CVE-2025-23143net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
- CVE-2025-23142sctp: detect and prevent references to a freed transport in sendmsg
- CVE-2025-23141KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
- CVE-2025-23140misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
- CVE-2024-58099vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- CVE-2025-37838HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition
- CVE-2025-40364io_uring: fix io_req_prep_async with provided buffers
- CVE-2025-40325md/raid10: wait barrier before returning discard request with REQ_NOWAIT
- CVE-2025-40114iio: light: Add check for array bounds in veml6075_read_int_time_ms
- CVE-2025-40014objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()
- CVE-2025-39989x86/mce: use is_copy_from_user() to determine copy-from-user context
- CVE-2025-39930ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai()
- CVE-2025-39778objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show()
- CVE-2025-39755staging: gpib: Fix cb7210 pcmcia Oops
- CVE-2025-39735jfs: fix slab-out-of-bounds read in ea_get()