Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-21952HID: corsair-void: Update power supply values with a unified work handler
- CVE-2025-21951bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock
- CVE-2025-21950drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
- CVE-2025-21949LoongArch: Set hugetlb mmap base address aligned with pmd size
- CVE-2025-21948HID: appleir: Fix potential NULL dereference at raw event handle
- CVE-2025-21947ksmbd: fix type confusion via race condition when using ipc_msg_send_request
- CVE-2025-21946ksmbd: fix out-of-bounds in parse_sec_desc()
- CVE-2025-21945ksmbd: fix use-after-free in smb2_lock
- CVE-2025-21944ksmbd: fix bug on trap in smb2_lock
- CVE-2025-21943gpio: aggregator: protect driver attr handlers against module unload
- CVE-2025-21942btrfs: zoned: fix extent range end unlock in cow_file_range()
- CVE-2025-21941drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params
- CVE-2025-21940drm/amdkfd: Fix NULL Pointer Dereference in KFD queue
- CVE-2025-21939drm/xe/hmm: Don't dereference struct page pointers without notifier lock
- CVE-2025-21938mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
- CVE-2025-21937Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
- CVE-2025-21936Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
- CVE-2025-21935rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- CVE-2025-21934rapidio: fix an API misues when rio_add_net() fails
- CVE-2025-21933arm: pgtable: fix NULL pointer dereference issue
- CVE-2025-21932mm: abort vma_modify() on merge out of memory failure
- CVE-2025-21931hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio
- CVE-2025-21930wifi: iwlwifi: mvm: don't try to talk to a dead firmware
- CVE-2025-21929HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove()
- CVE-2025-21928HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- CVE-2025-21927nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- CVE-2025-21926net: gso: fix ownership in __udp_gso_segment
- CVE-2025-21925llc: do not use skb_get() before dev_queue_xmit()
- CVE-2025-21924net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- CVE-2025-21923HID: hid-steam: Fix use-after-free when detaching device