Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-57922drm/amd/display: Add check for granularity in dml ceil/floor helpers
- CVE-2024-57921drm/amdgpu: Add a lock when accessing the buddy trim function
- CVE-2024-57919drm/amd/display: fix divide error in DM plane scale calcs
- CVE-2024-57918drm/amd/display: fix page fault due to max surface definition mismatch
- CVE-2024-57917topology: Keep the cpumask unchanged when printing cpumap
- CVE-2024-57916misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling
- CVE-2024-57914usb: typec: tcpci: fix NULL pointer issue on shared irq case
- CVE-2024-57913usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
- CVE-2024-57912iio: pressure: zpa2326: fix information leak in triggered buffer
- CVE-2024-57911iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
- CVE-2024-57910iio: light: vcnl4035: fix information leak in triggered buffer
- CVE-2024-57909iio: light: bh1745: fix information leak in triggered buffer
- CVE-2024-57908iio: imu: kmx61: fix information leak in triggered buffer
- CVE-2024-57907iio: adc: rockchip_saradc: fix information leak in triggered buffer
- CVE-2024-57906iio: adc: ti-ads8688: fix information leak in triggered buffer
- CVE-2024-57905iio: adc: ti-ads1119: fix information leak in triggered buffer
- CVE-2024-57904iio: adc: at91: call input_free_device() on allocated iio_dev
- CVE-2025-21654ovl: support encoding fid from inode with no alias
- CVE-2025-21653net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
- CVE-2025-21652ipvlan: Fix use-after-free in ipvlan_get_iflink().
- CVE-2025-21651net: hns3: don't auto enable misc vector
- CVE-2025-21650net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- CVE-2025-21649net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- CVE-2025-21648netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- CVE-2025-21647sched: sch_cake: add bounds checks to host bulk flow fairness counts
- CVE-2025-21646afs: Fix the maximum cell name length
- CVE-2025-21645platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it
- CVE-2025-21644drm/xe: Fix tlb invalidation when wedging
- CVE-2025-21643netfs: Fix kernel async DIO
- CVE-2025-21642mptcp: sysctl: sched: avoid using current->nsproxy