Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-21685platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: fix serdev race
- CVE-2025-21684gpio: xilinx: Convert gpio_lock to raw spinlock
- CVE-2024-57949irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()
- CVE-2023-52925netfilter: nf_tables: don't fail inserts if duplicate has expired
- CVE-2023-52924netfilter: nf_tables: don't skip expired elements during walk
- CVE-2025-21683bpf: Fix bpf_sk_select_reuseport() memory leak
- CVE-2025-21682eth: bnxt: always recalculate features after XDP clearing, fix null-deref
- CVE-2025-21681openvswitch: fix lockup on tx to unregistering netdev with carrier
- CVE-2025-21680pktgen: Avoid out-of-bounds access in get_imix_entries
- CVE-2025-21679btrfs: add the missing error handling inside get_canonical_dev_path
- CVE-2025-21678gtp: Destroy device along with udp socket's netns dismantle.
- CVE-2025-21677pfcp: Destroy device along with udp socket's netns dismantle.
- CVE-2025-21676net: fec: handle page_pool_dev_alloc_pages error
- CVE-2025-21675net/mlx5: Clear port select structure when fail to create
- CVE-2025-21674net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel
- CVE-2025-21673smb: client: fix double free of TCP_Server_Info::hostname
- CVE-2025-21672afs: Fix merge preference rule failure condition
- CVE-2025-21671zram: fix potential UAF of zram table
- CVE-2025-21670vsock/bpf: return early if transport is not assigned
- CVE-2025-21669vsock/virtio: discard packets if the transport changes
- CVE-2025-21668pmdomain: imx8mp-blk-ctrl: add missing loop break condition
- CVE-2025-21667iomap: avoid avoid truncating 64-bit offset to 32 bits
- CVE-2025-21666vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
- CVE-2025-21665filemap: avoid truncating 64-bit offset to 32 bits
- CVE-2024-57948mac802154: check local interfaces before deleting sdata list
- CVE-2024-57947netfilter: nf_set_pipapo: fix initial map fill
- CVE-2024-57946virtio-blk: don't keep queue frozen during system suspend
- CVE-2025-21664dm thin: make get_first_thin use rcu-safe list first function
- CVE-2025-21663net: stmmac: dwmac-tegra: Read iommu stream id from device tree
- CVE-2025-21662net/mlx5: Fix variable not being completed when function returns