Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-47639KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU
- CVE-2021-47638ubifs: rename_whiteout: Fix double free for whiteout_ui->data
- CVE-2021-47637ubifs: Fix deadlock in concurrent rename whiteout and inode writeback
- CVE-2021-47636ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()
- CVE-2021-47635ubifs: Fix to add refcount once page is set private
- CVE-2021-47634ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl
- CVE-2021-47633ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
- CVE-2021-47632powerpc/set_memory: Avoid spinlock recursion in change_page_attr()
- CVE-2021-47631ARM: davinci: da850-evm: Avoid NULL pointer dereference
- CVE-2023-52926io_uring/rw: split io_read() into a helper
- CVE-2025-21704usb: cdc-acm: Check control transfer buffer size before access
- CVE-2025-21703netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
- CVE-2025-21702pfifo_tail_enqueue: Drop new packet when sch->limit == 0
- CVE-2025-21701net: avoid race between device unregistration and ethnl ops
- CVE-2025-21700net: sched: Disallow replacing of child qdisc from one parent to another
- CVE-2025-21699gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
- CVE-2024-57952Revert "libfs: fix infinite directory reads for offset dir"
- CVE-2025-21697drm/v3d: Ensure job pointer is set to NULL after job completion
- CVE-2025-21696mm: clear uffd-wp PTE/PMD state on mremap()
- CVE-2025-21695platform/x86: dell-uart-backlight: fix serdev race
- CVE-2025-21694fs/proc: fix softlockup in __read_vmcore (part 2)
- CVE-2024-57951hrtimers: Handle CPU state correctly on hotplug
- CVE-2025-21693mm: zswap: properly synchronize freeing resources during CPU hotunplug
- CVE-2025-21692net: sched: fix ets qdisc OOB Indexing
- CVE-2025-21691cachestat: fix page cache statistics permission checking
- CVE-2025-21690scsi: storvsc: Ratelimit warning logs to prevent VM denial of service
- CVE-2025-21689USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
- CVE-2025-21688drm/v3d: Assign job pointer to NULL before signaling the fence
- CVE-2025-21687vfio/platform: check the bounds of read/write syscalls
- CVE-2024-57950drm/amd/display: Initialize denominator defaults to 1