Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-21728bpf: Send signals asynchronously if !preemptible
- CVE-2025-21727padata: fix UAF in padata_reorder
- CVE-2025-21726padata: avoid UAF for reorder_work
- CVE-2025-21725smb: client: fix oops due to unset link speed
- CVE-2025-21724iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
- CVE-2025-21723scsi: mpi3mr: Fix possible crash when setting up bsg fails
- CVE-2025-21722nilfs2: do not force clear folio if buffer is referenced
- CVE-2025-21721nilfs2: handle errors that nilfs_prepare_chunk() may return
- CVE-2025-21720xfrm: delete intermediate secpath entry in packet offload mode
- CVE-2025-21719ipmr: do not call mr_mfc_uses_dev() for unres entries
- CVE-2025-21718net: rose: fix timer races against user threads
- CVE-2025-21717net/mlx5e: add missing cpu_to_node to kvzalloc_node in mlx5e_open_xdpredirect_sq
- CVE-2025-21716vxlan: Fix uninit-value in vxlan_vnifilter_dump()
- CVE-2025-21715net: davicom: fix UAF in dm9000_drv_remove
- CVE-2025-21714RDMA/mlx5: Fix implicit ODP use after free
- CVE-2025-21713powerpc/pseries/iommu: Don't unset window if it was never set
- CVE-2025-21712md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime
- CVE-2025-21711net/rose: prevent integer overflows in rose_setsockopt()
- CVE-2025-21710tcp: correct handling of extreme memory squeeze
- CVE-2025-21709kernel: be more careful about dup_mmap() failures and uprobe registering
- CVE-2025-21708net: usb: rtl8150: enable basic endpoint checking
- CVE-2025-21707mptcp: consolidate suboption status
- CVE-2025-21706mptcp: pm: only set fullmesh for subflow endp
- CVE-2025-21705mptcp: handle fastopen disconnect correctly
- CVE-2024-58000io_uring: prevent reg-wait speculations
- CVE-2024-57999powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW
- CVE-2024-57998OPP: add index check to assert to avoid buffer overflow in _read_freq()
- CVE-2024-57997wifi: wcn36xx: fix channel survey memory allocation size
- CVE-2024-57996net_sched: sch_sfq: don't allow 1 packet limit
- CVE-2024-57995wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev()