Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-21641mptcp: sysctl: blackhole timeout: avoid using current->nsproxy
- CVE-2025-21640sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
- CVE-2025-21639sctp: sysctl: rto_min/max: avoid using current->nsproxy
- CVE-2025-21638sctp: sysctl: auth_enable: avoid using current->nsproxy
- CVE-2025-21637sctp: sysctl: udp_port: avoid using current->nsproxy
- CVE-2025-21636sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
- CVE-2025-21635rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
- CVE-2025-21634cgroup/cpuset: remove kernfs active break
- CVE-2025-21632x86/fpu: Ensure shadow stack is active before "getting" registers
- CVE-2025-21631block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
- CVE-2024-57857RDMA/siw: Remove direct link to net_device
- CVE-2024-57844drm/xe: Fix fault on fd close after unbind
- CVE-2024-57841net: fix memory leak in tcp_conn_request()
- CVE-2024-57802netrom: check buffer length before accessing it
- CVE-2024-57801net/mlx5e: Skip restore TC rules for vport rep without loaded flag
- CVE-2024-57795RDMA/rxe: Remove the direct link to net_device
- CVE-2024-54031netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
- CVE-2024-53681nvmet: Don't overflow subsysnqn
- CVE-2024-39282net: wwan: t7xx: Fix FSM command timeout issue
- CVE-2024-36476RDMA/rtrs: Ensure 'ib_sge list' is accessible
- CVE-2025-21629net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets
- CVE-2024-57903net: restrict SO_REUSEPORT to inet sockets
- CVE-2024-57902af_packet: fix vlan_get_tci() vs MSG_PEEK
- CVE-2024-57901af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
- CVE-2024-57900ila: serialize calls to nf_register_net_hooks()
- CVE-2024-57899wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
- CVE-2024-57898wifi: cfg80211: clear link ID from bitmap during link delete after clean up
- CVE-2024-57897drm/amdkfd: Correct the migration DMA map direction
- CVE-2024-57896btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- CVE-2024-57895ksmbd: set ATTR_CTIME flags when setting mtime