Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-22066ASoC: imx-card: Add NULL check in imx_card_probe()
- CVE-2025-22065idpf: fix adapter NULL pointer dereference on reboot
- CVE-2025-22064netfilter: nf_tables: don't unregister hook when table is dormant
- CVE-2025-22063netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
- CVE-2025-22062sctp: add mutual exclusion in proc_sctp_do_udp_port()
- CVE-2025-22061net: airoha: Fix qid report in airoha_tc_get_htb_get_leaf_queue()
- CVE-2025-22060net: mvpp2: Prevent parser TCAM memory corruption
- CVE-2025-22059udp: Fix multiple wraparounds of sk->sk_rmem_alloc.
- CVE-2025-22058udp: Fix memory accounting leak.
- CVE-2025-22057net: decrease cached dst counters in dst_release
- CVE-2025-22056netfilter: nft_tunnel: fix geneve_opt type confusion addition
- CVE-2025-22055net: fix geneve_opt length integer overflow
- CVE-2025-22054arcnet: Add NULL check in com20020pci_probe()
- CVE-2025-22053net: ibmveth: make veth_pool_store stop hanging
- CVE-2025-22052staging: gpib: Fix Oops after disconnect in ni_usb
- CVE-2025-22051staging: gpib: Fix Oops after disconnect in agilent usb
- CVE-2025-22050usbnet:fix NPE during rx_complete
- CVE-2025-22049LoongArch: Increase ARCH_DMA_MINALIGN up to 16
- CVE-2025-22048LoongArch: BPF: Don't override subprog's return value
- CVE-2025-22047x86/microcode/AMD: Fix __apply_microcode_amd()'s return value
- CVE-2025-22046uprobes/x86: Harden uretprobe syscall trampoline check
- CVE-2025-22045x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
- CVE-2025-22044acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
- CVE-2025-22043ksmbd: add bounds check for durable handle context
- CVE-2025-22042ksmbd: add bounds check for create lease context
- CVE-2025-22041ksmbd: fix use-after-free in ksmbd_sessions_deregister()
- CVE-2025-22040ksmbd: fix session use-after-free in multichannel connection
- CVE-2025-22039ksmbd: fix overflow in dacloffset bounds check
- CVE-2025-22038ksmbd: validate zero num_subauth before sub_auth is accessed
- CVE-2025-22037ksmbd: fix null pointer dereference in alloc_preauth_hash()