Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-21739scsi: ufs: core: Fix use-after free in init error and remove paths
- CVE-2025-21738ata: libata-sff: Ensure that we cannot write outside the allocated buffer
- CVE-2025-21737ceph: fix memory leak in ceph_mds_auth_match()
- CVE-2025-21736nilfs2: fix possible int overflows in nilfs_fiemap()
- CVE-2025-21735NFC: nci: Add bounds checking in nci_hci_create_pipe()
- CVE-2025-21734misc: fastrpc: Fix copy buffer page size
- CVE-2025-21733tracing/osnoise: Fix resetting of tracepoints
- CVE-2025-21732RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error
- CVE-2024-58019nvkm/gsp: correctly advance the read pointer of GSP message queue
- CVE-2024-58018nvkm: correctly calculate the available space of the GSP cmdq buffer
- CVE-2024-58017printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
- CVE-2024-58016safesetid: check size of policy writes
- CVE-2024-58015wifi: ath12k: Fix for out-of bound access error
- CVE-2024-58014wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()
- CVE-2024-58013Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync
- CVE-2024-58012ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params
- CVE-2024-58011platform/x86: int3472: Check for adev == NULL
- CVE-2024-58010binfmt_flat: Fix integer overflow bug on 32 bit systems
- CVE-2024-58009Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- CVE-2024-58008KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y
- CVE-2024-58007soc: qcom: socinfo: Avoid out of bounds read of serial number
- CVE-2024-58006PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()
- CVE-2024-58005tpm: Change to kvalloc() in eventlog/acpi.c
- CVE-2024-58004media: intel/ipu6: remove cpu latency qos request on error
- CVE-2024-58003media: i2c: ds90ub9x3: Fix extra fwnode_handle_put()
- CVE-2024-58002media: uvcvideo: Remove dangling pointers
- CVE-2024-58001ocfs2: handle a symlink read error correctly
- CVE-2025-21731nbd: don't allow reconnect after disconnect
- CVE-2025-21730wifi: rtw89: avoid to init mgnt_entry list twice when WoWLAN failed
- CVE-2025-21729wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion