Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-39728clk: samsung: Fix UBSAN panic in samsung_clk_init()
- CVE-2025-39688nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid()
- CVE-2025-38637net_sched: skbprio: Remove overly strict queue assertions
- CVE-2025-38575ksmbd: use aead_request_free to match aead_request_alloc
- CVE-2025-38479dmaengine: fsl-edma: free irq correctly in remove path
- CVE-2025-38240drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
- CVE-2025-38152remoteproc: core: Clear table_sz when rproc_shutdown
- CVE-2025-38104drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV
- CVE-2025-38049x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors
- CVE-2025-37925jfs: reject on-disk inodes of an unsupported type
- CVE-2025-37893LoongArch: BPF: Fix off-by-one error in build_prologue()
- CVE-2025-37860sfc: fix NULL dereferences in ef100_process_design_param()
- CVE-2025-37785ext4: fix OOB read when checking dotdot dir
- CVE-2021-47671can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
- CVE-2021-47670can: peak_usb: fix use after free bugs
- CVE-2021-47669can: vxcan: vxcan_xmit: fix use after free bug
- CVE-2021-47668can: dev: can_restart: fix use after free bug
- CVE-2020-36789can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context
- CVE-2025-23138watch_queue: fix pipe accounting mismatch
- CVE-2025-23137cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update
- CVE-2025-23136thermal: int340x: Add NULL check for adev
- CVE-2025-23135RISC-V: KVM: Teardown riscv specific bits after kvm_exit
- CVE-2025-23134ALSA: timer: Don't take register_mutex with copy_from/to_user()
- CVE-2025-23133wifi: ath11k: update channel list in reg notifier instead reg worker
- CVE-2025-23132f2fs: quota: fix to avoid warning in dquot_writeback_dquots()
- CVE-2025-23131dlm: prevent NPD when writing a positive value to event_done
- CVE-2025-23130f2fs: fix to avoid panic once fallocation fails for pinfile
- CVE-2025-23129wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path
- CVE-2025-22128wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error path
- CVE-2025-22127f2fs: fix potential deadloop in prepare_compress_overwrite()