Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-58087ksmbd: fix racy issue from session lookup and expire
- CVE-2025-21843drm/panthor: avoid garbage value in panthor_ioctl_dev_query()
- CVE-2025-21842amdkfd: properly free gang_ctx_bo when failed to init user queue
- CVE-2025-21841cpufreq/amd-pstate: Fix cpufreq_policy ref counting
- CVE-2025-21840thermal/netlink: Prevent userspace segmentation fault by adjusting UAPI header
- CVE-2025-21839KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
- CVE-2025-21838usb: gadget: core: flush gadget workqueue after device removal
- CVE-2025-21836io_uring/kbuf: reallocate buf lists on upgrade
- CVE-2025-21835usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
- CVE-2024-58086drm/v3d: Stop active perfmon if it is being destroyed
- CVE-2025-21834seccomp: passthrough uretprobe systemcall without filtering
- CVE-2025-21833iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE
- CVE-2025-21832block: don't revert iter for -EIOCBQUEUED
- CVE-2025-21831PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1
- CVE-2024-58085tomoyo: don't emit warning in tomoyo_write_control()
- CVE-2024-58084firmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pool()
- CVE-2024-58083KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- CVE-2024-58082media: nuvoton: Fix an error check in npcm_video_ece_init()
- CVE-2024-58081clk: mmp2: call pm_genpd_init() only after genpd.name is set
- CVE-2024-58080clk: qcom: dispcc-sm6350: Add missing parent_map for a clock
- CVE-2024-58079media: uvcvideo: Fix crash during unbind if gpio unit is in use
- CVE-2024-58078misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors
- CVE-2024-58077ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback
- CVE-2024-58076clk: qcom: gcc-sm6350: Add missing parent_map for two clocks
- CVE-2025-21830landlock: Handle weird files
- CVE-2025-21829RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"
- CVE-2025-21828wifi: mac80211: don't flush non-uploaded STAs
- CVE-2025-21827Bluetooth: btusb: mediatek: Add locks for usb_driver_claim_interface()
- CVE-2025-21826netfilter: nf_tables: reject mismatching sum of field_len with set key length
- CVE-2025-21825bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT