Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-21820tty: xilinx_uartps: split sysrq handling
- CVE-2025-21819Revert "drm/amd/display: Use HW lock mgr for PSR1"
- CVE-2025-21817block: mark GFP_NOIO around sysfs ->store()
- CVE-2025-21816hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- CVE-2025-21815mm/compaction: fix UBSAN shift-out-of-bounds warning
- CVE-2025-21814ptp: Ensure info->enable callback is always set
- CVE-2025-21813timers/migration: Fix off-by-one root mis-connection
- CVE-2025-21812ax25: rcu protect dev->ax25_ptr
- CVE-2025-21811nilfs2: protect access to buffers with no active references
- CVE-2025-21810driver core: class: Fix wild pointer dereferences in API class_dev_iter_next()
- CVE-2025-21809rxrpc, afs: Fix peer hash locking vs RCU callback
- CVE-2025-21808net: xdp: Disallow attaching device-bound programs in generic mode
- CVE-2025-21807block: fix queue freeze vs limits lock order in sysfs store methods
- CVE-2025-21806net: let net.core.dev_weight always be non-zero
- CVE-2025-21805RDMA/rtrs: Add missing deinit() call
- CVE-2025-21804PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- CVE-2025-21803LoongArch: Fix warnings during S3 suspend
- CVE-2025-21802net: hns3: fix oops when unload drivers paralleling
- CVE-2025-21801net: ravb: Fix missing rtnl lock in suspend/resume path
- CVE-2025-21800net/mlx5: HWS, fix definer's HWS_SET32 macro for negative offset
- CVE-2025-21799net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns()
- CVE-2025-21798firewire: test: Fix potential null dereference in firewire kunit test
- CVE-2024-58042rhashtable: Fix potential deadlock by moving schedule_work outside lock
- CVE-2024-58034memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
- CVE-2024-58022mailbox: th1520: Fix a NULL vs IS_ERR() bug
- CVE-2025-21797HID: corsair-void: Add missing delayed work cancel for headset status
- CVE-2025-21796nfsd: clear acl_access/acl_default after releasing them
- CVE-2025-21795NFSD: fix hang in nfsd4_shutdown_callback
- CVE-2025-21794HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
- CVE-2025-21793spi: sn-f-ospi: Fix division by zero