Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-21792ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
- CVE-2025-21791vrf: use RCU protection in l3mdev_l3_out()
- CVE-2025-21790vxlan: check vxlan_vnigroup_init() return value
- CVE-2025-21789LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
- CVE-2025-21788net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases
- CVE-2025-21787team: better TEAM_OPTION_TYPE_STRING validation
- CVE-2025-21786workqueue: Put the pwq after detaching the rescuer from the pool
- CVE-2025-21785arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- CVE-2025-21784drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
- CVE-2025-21783gpiolib: Fix crash on error in gpiochip_get_ngpios()
- CVE-2025-21782orangefs: fix a oob in orangefs_debug_write
- CVE-2025-21781batman-adv: fix panic during interface removal
- CVE-2025-21780drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- CVE-2025-21779KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- CVE-2025-21778tracing: Do not allow mmap() of persistent ring buffer
- CVE-2025-21777ring-buffer: Validate the persistent meta data subbuf array
- CVE-2025-21776USB: hub: Ignore non-compliant devices with too many configs or interfaces
- CVE-2025-21775can: ctucanfd: handle skb allocation failure
- CVE-2025-21774can: rockchip: rkcanfd_handle_rx_fifo_overflow_int(): bail out if skb cannot be allocated
- CVE-2025-21773can: etas_es58x: fix potential NULL pointer dereference on udev->serial
- CVE-2025-21772partitions: mac: fix handling of bogus partition table
- CVE-2025-21771sched_ext: Fix incorrect autogroup migration detection
- CVE-2025-21770iommu: Fix potential memory leak in iopf_queue_remove_device()
- CVE-2025-21769ptp: vmclock: Add .owner to vmclock_miscdev_fops
- CVE-2025-21768net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels
- CVE-2025-21767clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context
- CVE-2025-21766ipv4: use RCU protection in __ip_rt_update_pmtu()
- CVE-2025-21765ipv6: use RCU protection in ip6_default_advmss()
- CVE-2025-21764ndisc: use RCU protection in ndisc_alloc_skb()
- CVE-2025-21763neighbour: use RCU protection in __neigh_notify()