Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-58075crypto: tegra - do not transfer req when tegra init fails
- CVE-2024-58074drm/i915: Grab intel_display from the encoder to avoid potential oopsies
- CVE-2024-58073drm/msm/dpu: check dpu_plane_atomic_print_state() for valid sspp
- CVE-2024-58072wifi: rtlwifi: remove unused check_buddy_priv
- CVE-2024-58071team: prevent adding a device which is already a team device lower
- CVE-2024-58070bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
- CVE-2024-58069rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
- CVE-2024-58068OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
- CVE-2024-58067clk: mmp: pxa1908-mpmu: Fix a NULL vs IS_ERR() check
- CVE-2024-58066clk: mmp: pxa1908-apbcp: Fix a NULL vs IS_ERR() check
- CVE-2024-58065clk: mmp: pxa1908-apbc: Fix NULL vs IS_ERR() check
- CVE-2024-58064wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap()
- CVE-2024-58063wifi: rtlwifi: fix memory leaks and invalid access at probe error path
- CVE-2024-58062wifi: iwlwifi: mvm: avoid NULL pointer dereference
- CVE-2024-58061wifi: mac80211: prohibit deactivating all links
- CVE-2024-58060bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing
- CVE-2024-58059media: uvcvideo: Fix deadlock during uvc_probe
- CVE-2024-58058ubifs: skip dumping tnc tree when zroot is null
- CVE-2024-58057idpf: convert workqueues to unbound
- CVE-2024-58056remoteproc: core: Fix ida_free call while not allocated
- CVE-2024-58055usb: gadget: f_tcm: Don't free command immediately
- CVE-2024-58054staging: media: max96712: fix kernel oops when removing module
- CVE-2024-58053rxrpc: Fix handling of received connection abort
- CVE-2024-58052drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
- CVE-2024-58051ipmi: ipmb: Add check devm_kasprintf() returned value
- CVE-2022-49733ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
- CVE-2025-21824gpu: host1x: Fix a use of uninitialized mutex
- CVE-2025-21823batman-adv: Drop unmanaged ELP metric worker
- CVE-2025-21822ptp: vmclock: Set driver data before its usage
- CVE-2025-21821fbdev: omap: use threaded IRQ for LCD DMA