Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-22096drm/msm/gem: Fix error code msm_parse_deps()
- CVE-2025-22095PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
- CVE-2025-22094powerpc/perf: Fix ref-counting on the PMU 'vpa_pmu'
- CVE-2025-22093drm/amd/display: avoid NPD when ASIC does not support DMUB
- CVE-2025-22092PCI: Fix NULL dereference in SR-IOV VF creation error path
- CVE-2025-22091RDMA/mlx5: Fix page_size variable overflow
- CVE-2025-22090x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()
- CVE-2025-22089RDMA/core: Don't expose hw_counters outside of init net namespace
- CVE-2025-22088RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
- CVE-2025-22087bpf: Fix array bounds error with may_goto
- CVE-2025-22086RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
- CVE-2025-22085RDMA/core: Fix use-after-free when rename device name
- CVE-2025-22084w1: fix NULL pointer dereference in probe
- CVE-2025-22083vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
- CVE-2025-22082iio: backend: make sure to NULL terminate stack buffer
- CVE-2025-22081fs/ntfs3: Fix a couple integer overflows on 32bit systems
- CVE-2025-22080fs/ntfs3: Prevent integer overflow in hdr_first_de()
- CVE-2025-22079ocfs2: validate l_tree_depth to avoid out-of-bounds access
- CVE-2025-22078staging: vchiq_arm: Fix possible NPR of keep-alive thread
- CVE-2025-22077Revert "smb: client: fix TCP timers deadlock after rmmod"
- CVE-2025-22076exfat: fix missing shutdown check
- CVE-2025-22075rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- CVE-2025-22074ksmbd: fix r_count dec/increment mismatch
- CVE-2025-22073spufs: fix a leak on spufs_new_file() failure
- CVE-2025-22072spufs: fix gang directory lifetimes
- CVE-2025-22071spufs: fix a leak in spufs_create_context()
- CVE-2025-22070fs/9p: fix NULL pointer dereference on mkdir
- CVE-2025-22069riscv: fgraph: Fix stack layout to match __arch_ftrace_regs argument of ftrace_return_to_handler
- CVE-2025-22068ublk: make sure ubq->canceling is set when queue is frozen
- CVE-2025-22067spi: cadence: Fix out-of-bounds array access in cdns_mrvl_xspi_setup_clock()