Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-21870ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
- CVE-2025-21869powerpc/code-patching: Disable KASAN report during patching via temporary mm
- CVE-2025-21868net: allow small head cache usage with large MAX_SKB_FRAGS values
- CVE-2025-21867bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()
- CVE-2023-52927netfilter: allow exp not to be removed in nf_ct_find_expectation
- CVE-2025-21866powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC
- CVE-2025-21865gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().
- CVE-2025-21864tcp: drop secpath at the same time as we currently drop dst
- CVE-2025-21863io_uring: prevent opcode speculation
- CVE-2025-21862drop_monitor: fix incorrect initialization order
- CVE-2025-21861mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
- CVE-2025-21860mm/zswap: fix inconsistency when zswap_store_page() fails
- CVE-2025-21859USB: gadget: f_midi: f_midi_complete to call queue_work
- CVE-2025-21858geneve: Fix use-after-free in geneve_find_dev().
- CVE-2025-21857net/sched: cls_api: fix error handling causing NULL dereference
- CVE-2025-21856s390/ism: add release function for struct device
- CVE-2025-21855ibmvnic: Don't reference skb after sending to VIOS
- CVE-2025-21854sockmap, vsock: For connectible sockets allow only connected
- CVE-2025-21853bpf: avoid holding freeze_mutex during mmap operation
- CVE-2025-21852net: Add rx_skb of kfree_skb to raw_tp_null_args[].
- CVE-2025-21851bpf: Fix softlockup in arena_map_free on 64k page kernel
- CVE-2025-21850nvmet: Fix crash when a namespace is disabled
- CVE-2025-21849drm/i915/gt: Use spin_lock_irqsave() in interruptible context
- CVE-2025-21848nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
- CVE-2025-21847ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()
- CVE-2025-21846acct: perform last write from workqueue
- CVE-2025-21845mtd: spi-nor: sst: Fix SST write failure
- CVE-2025-21844smb: client: Add check for next_buffer in receive_encrypted_standard()
- CVE-2024-58089btrfs: fix double accounting race when btrfs_run_delalloc_range() failed
- CVE-2024-58088bpf: Fix deadlock when freeing cgroup storage