Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-22126md: fix mddev uaf while iterating all_mddevs list
- CVE-2025-22125md/raid1,raid10: don't ignore IO flags
- CVE-2025-22124md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb
- CVE-2025-22123f2fs: fix to avoid accessing uninitialized curseg
- CVE-2025-22122block: fix adding folio to bio
- CVE-2025-22121ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
- CVE-2025-22120ext4: goto right label 'out_mmap_sem' in ext4_setattr()
- CVE-2025-22119wifi: cfg80211: init wiphy_work before allocating rfkill fails
- CVE-2025-22118ice: validate queue quanta parameters to prevent OOB access
- CVE-2025-22117ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw()
- CVE-2025-22116idpf: check error for register_netdev() on init
- CVE-2025-22115btrfs: fix block group refcount race in btrfs_create_pending_block_groups()
- CVE-2025-22114btrfs: don't clobber ret in btrfs_validate_super()
- CVE-2025-22113ext4: avoid journaling sb update on error if journal is destroying
- CVE-2025-22112eth: bnxt: fix out-of-range access of vnic_info array
- CVE-2025-22111net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.
- CVE-2025-22110netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation error
- CVE-2025-22109ax25: Remove broken autobind
- CVE-2025-22108bnxt_en: Mask the bd_cnt field in the TX BD properly
- CVE-2025-22107net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
- CVE-2025-22106vmxnet3: unregister xdp rxq info in the reset path
- CVE-2025-22105bonding: check xdp prog when set bond mode
- CVE-2025-22104ibmvnic: Use kernel helpers for hex dumps
- CVE-2025-22103net: fix NULL pointer dereference in l3mdev_l3_rcv
- CVE-2025-22102Bluetooth: btnxpuart: Fix kernel panic during FW release
- CVE-2025-22101net: libwx: fix Tx L4 checksum
- CVE-2025-22100drm/panthor: Fix race condition when gathering fdinfo group samples
- CVE-2025-22099drm: xlnx: zynqmp_dpsub: Add NULL check in zynqmp_audio_init
- CVE-2025-22098drm: zynqmp_dp: Fix a deadlock in zynqmp_dp_ignore_hpd_set()
- CVE-2025-22097drm/vkms: Fix use after free and double free on init error