Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-53000netlink: prevent potential spectre v1 gadgets
- CVE-2023-52999net: fix UaF in netns ops registration error path
- CVE-2023-52998net: fec: Use page_pool_put_full_page when freeing rx buffers
- CVE-2023-52997ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
- CVE-2023-52996ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
- CVE-2023-52995riscv/kprobe: Fix instruction simulation of JALR
- CVE-2023-52994acpi: Fix suspend with Xen PV
- CVE-2023-52993x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
- CVE-2023-52992bpf: Skip task with pid=1 in send_signal_common()
- CVE-2023-52991net: fix NULL pointer in skb_segment_list
- CVE-2023-52989firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region
- CVE-2023-52988ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
- CVE-2023-52987ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write()
- CVE-2023-52986bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- CVE-2023-52985arm64: dts: imx8mm-verdin: Do not power down eth-phy
- CVE-2023-52984net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices
- CVE-2023-52983block, bfq: fix uaf for bfqq in bic_set_bfqq()
- CVE-2023-52982fscache: Use wait_on_bit() to wait for the freeing of relinquished volume
- CVE-2023-52981drm/i915: Fix request ref counting during error capture & debugfs dump
- CVE-2023-52980block: ublk: extending queue_size to fix overflow
- CVE-2023-52978riscv: kprobe: Fixup kernel panic when probing an illegal position
- CVE-2023-52977net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
- CVE-2023-52976efi: fix potential NULL deref in efi_mem_reserve_persistent
- CVE-2023-52975scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- CVE-2023-52974scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- CVE-2023-52973vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- CVE-2022-49761btrfs: always report error in run_one_delayed_ref()
- CVE-2022-49760mm/hugetlb: fix PTE marker handling in hugetlb_change_protection()
- CVE-2022-49759VMCI: Use threaded irqs instead of tasklets
- CVE-2022-49758reset: uniphier-glue: Fix possible null-ptr-deref