Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-21982pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw
- CVE-2025-21981ice: fix memory leak in aRFS after reset
- CVE-2025-21980sched: address a potential NULL pointer dereference in the GRED scheduler.
- CVE-2025-21979wifi: cfg80211: cancel wiphy_work before freeing wiphy
- CVE-2025-21978drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
- CVE-2025-21977fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs
- CVE-2025-21976fbdev: hyperv_fb: Allow graceful removal of framebuffer
- CVE-2025-21975net/mlx5: handle errors in mlx5_chains_create_table()
- CVE-2025-21974eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc()
- CVE-2025-21973eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx}
- CVE-2025-21972net: mctp: unshare packets when reassembling
- CVE-2025-21971net_sched: Prevent creation of classes with TC_H_ROOT
- CVE-2025-21970net/mlx5: Bridge, fix the crash caused by LAG state check
- CVE-2025-21969Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
- CVE-2025-21968drm/amd/display: Fix slab-use-after-free on hdcp_work
- CVE-2025-21967ksmbd: fix use-after-free in ksmbd_free_work_struct
- CVE-2025-21966dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
- CVE-2025-21965sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl()
- CVE-2025-21964cifs: Fix integer overflow while processing acregmax mount option
- CVE-2025-21963cifs: Fix integer overflow while processing acdirmax mount option
- CVE-2025-21962cifs: Fix integer overflow while processing closetimeo mount option
- CVE-2025-21961eth: bnxt: fix truesize for mb-xdp-pass case
- CVE-2025-21960eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
- CVE-2025-21959netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
- CVE-2025-21958Revert "openvswitch: switch to per-action label counting in conntrack"
- CVE-2025-21957scsi: qla1280: Fix kernel oops when debug level > 2
- CVE-2025-21956drm/amd/display: Assign normalized_pix_clk when color depth = 14
- CVE-2025-21955ksmbd: prevent connection release during oplock break notification
- CVE-2025-21954netmem: prevent TX of unreadable skbs
- CVE-2025-21953net: mana: cleanup mana struct after debugfs_remove()