Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-21661gpio: virtuser: fix missing lookup table cleanups
- CVE-2025-21660ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked
- CVE-2025-21659netdev: prevent accessing NAPI instances from another namespace
- CVE-2025-21658btrfs: avoid NULL pointer dereference if no valid extent tree
- CVE-2025-21657sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass()
- CVE-2025-21656hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
- CVE-2024-57945riscv: mm: Fix the out of bound issue of vmemmap address
- CVE-2024-57944iio: adc: ti-ads1298: Add NULL check in ads1298_init
- CVE-2024-57943exfat: fix the new buffer was not zeroed before writing
- CVE-2024-57942netfs: Fix ceph copy to cache on write-begin
- CVE-2024-57941netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled
- CVE-2024-57940exfat: fix the infinite loop in exfat_readdir()
- CVE-2024-57939riscv: Fix sleeping in invalid context in die()
- CVE-2024-57938net/sctp: Prevent autoclose integer overflow in sctp_association_init()
- CVE-2024-57936RDMA/bnxt_re: Fix max SGEs for the Work Request
- CVE-2024-57935RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- CVE-2024-57934fgraph: Add READ_ONCE() when accessing fgraph_array[]
- CVE-2024-57933gve: guard XSK operations on the existence of queues
- CVE-2024-57932gve: guard XDP xmit NDO on existence of xdp queues
- CVE-2024-57931selinux: ignore unknown extended permissions
- CVE-2024-57930tracing: Have process_string() also allow arrays
- CVE-2025-21655io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
- CVE-2023-52923netfilter: nf_tables: adapt set backend to use GC transaction API
- CVE-2024-57929dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- CVE-2024-57928netfs: Fix enomem handling in buffered reads
- CVE-2024-57927nfs: Fix oops in nfs_netfs_init_request() when copying to cache
- CVE-2024-57926drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err
- CVE-2024-57925ksmbd: fix a missing return value check bug
- CVE-2024-57924fs: relax assertions on failure to encode file handles
- CVE-2024-57923btrfs: zlib: fix avail_in bytes for s390 zlib HW compression path