Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-22036exfat: fix random stack corruption after get_block
- CVE-2025-22035tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- CVE-2025-22034mm/gup: reject FOLL_SPLIT_PMD with hugetlb VMAs
- CVE-2025-22033arm64: Don't call NULL in do_compat_alignment_fixup()
- CVE-2025-22032wifi: mt76: mt7921: fix kernel panic due to null pointer dereference
- CVE-2025-22031PCI/bwctrl: Fix NULL pointer dereference on bus number exhaustion
- CVE-2025-22030mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
- CVE-2025-22028media: vimc: skip .s_stream() for stopped entities
- CVE-2025-22027media: streamzap: fix race between device disconnection and urb callback
- CVE-2025-22026nfsd: don't ignore the return code of svc_proc_register()
- CVE-2025-22025nfsd: put dl_stid if fail to queue dl_recall
- CVE-2025-22024nfsd: fix management of listener transports
- CVE-2024-58097wifi: ath11k: fix RCU stall while reaping monitor destination ring
- CVE-2024-58096wifi: ath11k: add srng->lock for ath11k_hal_srng_ in monitor mode
- CVE-2024-58095jfs: add check read-only before txBeginAnon() call
- CVE-2024-58094jfs: add check read-only before truncation in jfs_truncate_nolock()
- CVE-2024-58093PCI/ASPM: Fix link state exit during switch upstream function removal
- CVE-2023-53034ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- CVE-2024-58092nfsd: fix legacy client tracking initialization
- CVE-2025-22023usb: xhci: Don't skip on Stopped - Length Invalid
- CVE-2025-22022usb: xhci: Apply the link chain quirk on NEC isoc endpoints
- CVE-2025-22021netfilter: socket: Lookup orig tuple for IPv6 SNAT
- CVE-2025-22020memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- CVE-2025-22019bcachefs: bch2_ioctl_subvolume_destroy() fixes
- CVE-2025-22018atm: Fix NULL pointer dereference
- CVE-2025-22017devlink: fix xa_alloc_cyclic() error handling
- CVE-2025-22016dpll: fix xa_alloc_cyclic() error handling
- CVE-2025-22015mm/migrate: fix shmem xarray update during migration
- CVE-2025-22014soc: qcom: pdr: Fix the potential deadlock
- CVE-2025-22013KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state