Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-21762arp: use RCU protection in arp_xmit()
- CVE-2025-21761openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- CVE-2025-21760ndisc: extend RCU protection in ndisc_send_skb()
- CVE-2025-21759ipv6: mcast: extend RCU protection in igmp6_send()
- CVE-2025-21758ipv6: mcast: add RCU protection to mld_newpack()
- CVE-2025-21756vsock: Keep the binding until socket destruction
- CVE-2024-58021HID: winwing: Add NULL check in winwing_init_led()
- CVE-2024-58020HID: multitouch: Add NULL check in mt_input_configured
- CVE-2024-57852firmware: qcom: scm: smc: Handle missing SCM device
- CVE-2024-57834media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
- CVE-2024-54458scsi: ufs: bsg: Set bsg_queue to NULL after removal
- CVE-2024-54456NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
- CVE-2024-52560fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()
- CVE-2024-52559drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()
- CVE-2024-52557drm: zynqmp_dp: Fix integer overflow in zynqmp_dp_rate_get()
- CVE-2024-49570drm/xe/tracing: Fix a potential TP_printk UAF
- CVE-2025-21754btrfs: fix assertion failure when splitting ordered extent after transaction abort
- CVE-2025-21753btrfs: fix use-after-free when attempting to join an aborted transaction
- CVE-2025-21752btrfs: don't use btrfs_set_item_key_safe on RAID stripe-extents
- CVE-2025-21751net/mlx5: HWS, change error flow on matcher disconnect
- CVE-2025-21750wifi: brcmfmac: Check the return value of of_property_read_string_index()
- CVE-2025-21749net: rose: lock the socket in rose_bind()
- CVE-2025-21748ksmbd: fix integer overflows on 32 bit systems
- CVE-2025-21747drm/ast: astdp: Fix timeout for enabling video signal
- CVE-2025-21746Input: synaptics - fix crash when enabling pass-through port
- CVE-2025-21745blk-cgroup: Fix class @block_class's subsystem refcount leakage
- CVE-2025-21744wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
- CVE-2025-21743usbnet: ipheth: fix possible overflow in DPE length check
- CVE-2025-21742usbnet: ipheth: use static NDP16 location in URB
- CVE-2025-21741usbnet: ipheth: fix DPE OoB read