linux security advisories
60 threat alerts tracking vulnerabilities and security advisories that affect linux products.
Vulnios monitors linux CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent linux security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2026-43067 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: ext4: handle wraparound when searching for blocks for indirect mapped blocks Commit 4865c768b563 ("ext4: always allocate blocks on
criticalCVE-2026-43067Critical Vulnerability: CVE-2024-35960 — linux, debian — linux_kernel, debian_linux
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Properly link new fs rules into the tree Previously, add_rule_fg would only add newly created rules from the handle into
criticalCVE-2024-35960Critical Vulnerability: CVE-2024-35845 — linux, debian — linux_kernel, debian_linux
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dbg-tlv: ensure NUL termination The iwl_fw_ini_debug_info_tlv is used as a string, so we must ensure the string is
criticalCVE-2024-35845Critical Vulnerability: CVE-2025-39682 — linux, debian — linux_kernel, debian_linux
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (a
criticalCVE-2025-39682Critical Vulnerability: CVE-2025-38660 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: [ceph] parse_longname(): strrchr() expects NUL-terminated string ... and parse_longname() is not guaranteed that. That's the reas
criticalCVE-2025-38660Critical Vulnerability: CVE-2025-39758 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages Ever since commit c2ff29e99a76 ("siw: Inline do_tcp_sendpages()"), we ha
criticalCVE-2025-39758Critical Vulnerability: CVE-2024-58240 — linux, debian — linux_kernel, debian_linux
In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no r
criticalCVE-2024-58240Critical Vulnerability: CVE-2026-64257 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject overlapping data areas in SMB2 responses Commit 53b7c271f06b ("smb: client: restrict implied bcc[0] exemption
criticalCVE-2026-64257Critical Vulnerability: CVE-2022-49770 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: ceph: avoid putting the realm twice when decoding snaps fails When decoding the snaps fails it maybe leaving the 'first_realm' and
criticalCVE-2022-49770Critical Vulnerability: CVE-2023-3867 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of bounds read in smb2_sess_setup ksmbd does not consider the case of that smb2 session setup is in compound reques
criticalCVE-2023-3867Critical Vulnerability: CVE-2023-52480 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup and expire Thread A + Thread B ksmbd_session_lookup
criticalCVE-2023-52480Critical Vulnerability: CVE-2023-32249 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: ksmbd: not allow guest user on multichannel This patch return STATUS_NOT_SUPPORTED if binding session is guest.
criticalCVE-2023-32249Critical Vulnerability: CVE-2023-52441 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of bounds in init_smb2_rsp_hdr() If client send smb2 negotiate request and then send smb1 negotiate request, init_s
criticalCVE-2023-52441Critical Vulnerability: CVE-2023-52440 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob() If authblob->SessionKey.Length is bigger than session key size(CIFS_K
criticalCVE-2023-52440Critical Vulnerability: CVE-2022-50350 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix a race condition between login_work and the login thread In case a malicious initiator sends some random
criticalCVE-2022-50350Critical Vulnerability: CVE-2023-53360 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: Rework scratch handling for READ_PLUS (again) I found that the read code might send multiple requests using the same nfs_
criticalCVE-2023-53360Critical Vulnerability: CVE-2023-53382 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: net/smc: Reset connection when trying to use SMCRv2 fails. We found a crash when using SMCRv2 with 2 Mellanox ConnectX-4. It can b
criticalCVE-2023-53382Critical Vulnerability: CVE-2022-50363 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: skmsg: pass gfp argument to alloc_sk_msg() syzbot found that alloc_sk_msg() could be called from a non sleepable context. sk_psock
criticalCVE-2022-50363Critical Vulnerability: CVE-2023-53338 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: lwt: Fix return values of BPF xmit ops BPF encap ops can return different types of positive values, such like NET_RX_DROP, NET_XMI
criticalCVE-2023-53338Critical Vulnerability: CVE-2022-50335 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: 9p: set req refcount to zero to avoid uninitialized usage When a new request is allocated, the refcount will be zero if it is reus
criticalCVE-2022-50335Critical Vulnerability: CVE-2022-50373 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix race in lowcomms This patch fixes a race between queue_work() in _dlm_lowcomms_commit_msg() and srcu_read_unlock(). T
criticalCVE-2022-50373Critical Vulnerability: CVE-2022-50410 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READ Since before the git era, NFSD has conserved the number of pages held by
criticalCVE-2022-50410Critical Vulnerability: CVE-2023-53006 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uncleared server->smbd_conn in reconnect In smbd_destroy(), clear the server->smbd_conn pointer after freein
criticalCVE-2023-53006Critical Vulnerability: CVE-2024-58087 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue from session lookup and expire Increment the session reference count within the lock for lookup to avoid rac
criticalCVE-2024-58087Critical Vulnerability: CVE-2023-53083 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: nfsd: don't replace page in rq_pages if it's a continuation of last page The splice read calls nfsd_splice_actor to put the pages
criticalCVE-2023-53083Critical Vulnerability: CVE-2023-4515 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate command request size In commit 2b9b8f3b68ed ("ksmbd: validate command payload size"), except for SMB2_OPLOCK_BREAK
criticalCVE-2023-4515Critical Vulnerability: CVE-2022-50235 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READDIR Restore the previous limit on the @count argument to prevent a buffer
criticalCVE-2022-50235Critical Vulnerability: CVE-2023-53116 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid potential UAF in nvmet_req_complete() An nvme target ->queue_response() operation implementation may free the request
criticalCVE-2023-53116Critical Vulnerability: CVE-2023-53192 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix nexthop hash size The nexthop code expects a 31 bit hash, such as what is returned by fib_multipath_hash() and rt6_mult
criticalCVE-2023-53192Critical Vulnerability: CVE-2024-58006 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() In commit 4284c88fff0e ("PCI: designware-ep: Allow pci_epc_set_
criticalCVE-2024-58006Critical Vulnerability: CVE-2024-56718 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: net/smc: protect link down work from execute after lgr freed link down work may be scheduled before lgr freed but execute after lg
criticalCVE-2024-56718Critical Vulnerability: CVE-2024-53209 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix receive ring space parameters when XDP is active The MTU setting at the time an XDP multi-buffer is attached determin
criticalCVE-2024-53209Critical Vulnerability: CVE-2024-56656 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips The 5760X (P7) chip's HW GRO/LRO interface is very similar to that
criticalCVE-2024-56656Critical Vulnerability: CVE-2024-57882 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix TCP options overflow. Syzbot reported the following splat: Oops: general protection fault, probably for non-canonical
criticalCVE-2024-57882Critical Vulnerability: CVE-2024-57843 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix overflow inside virtnet_rq_alloc When the frag just got a page, then may lead to regression on VM. Specially if th
criticalCVE-2024-57843Critical Vulnerability: CVE-2024-57932 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: gve: guard XDP xmit NDO on existence of xdp queues In GVE, dedicated XDP queues only exist when an XDP program is installed and th
criticalCVE-2024-57932Critical Vulnerability: CVE-2024-57793 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors In CoCo VMs it is possible for the untrusted host to cause set
criticalCVE-2024-57793Critical Vulnerability: CVE-2022-49201 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: ibmvnic: fix race between xmit and reset There is a race between reset and the transmit paths that can lead to ibmvnic_xmit() acce
criticalCVE-2022-49201Critical Vulnerability: CVE-2022-49362 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix potential use-after-free in nfsd_file_put() nfsd_file_put_noref() can free @nf, so don't dereference @nf immediately upo
criticalCVE-2022-49362Critical Vulnerability: CVE-2022-49149 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix call timer start racing with call destruction The rxrpc_call struct has a timer used to handle various timed events rel
criticalCVE-2022-49149Critical Vulnerability: CVE-2022-49194 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: Use stronger register read/writes to assure ordering GCC12 appears to be much smarter about its dependency tracking
criticalCVE-2022-49194Critical Vulnerability: CVE-2022-49094 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: net/tls: fix slab-out-of-bounds bug in decrypt_internal The memory size of tls_ctx->rx.iv for AES128-CCM is 12 setting in tls_set_
criticalCVE-2022-49094Critical Vulnerability: CVE-2022-49093 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: skbuff: fix coalescing for page_pool fragment recycling Fix a use-after-free when using page_pool with page fragments. We encounte
criticalCVE-2022-49093Critical Vulnerability: CVE-2022-49280 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: NFSD: prevent underflow in nfssvc_decode_writeargs() Smatch complains: fs/nfsd/nfsxdr.c:341 nfssvc_decode_writeargs() warn: no
criticalCVE-2022-49280Critical Vulnerability: CVE-2022-49356 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Trap RDMA segment overflows Prevent svc_rdma_build_writes() from walking off the end of a Write chunk's segment array. Cau
criticalCVE-2022-49356Critical Vulnerability: CVE-2024-49568 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg When receiving proposal msg in server, the fields v2_
criticalCVE-2024-49568Critical Vulnerability: CVE-2024-53206 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix use-after-free of nreq in reqsk_timer_handler(). The cited commit replaced inet_csk_reqsk_queue_drop_and_put() with __ine
criticalCVE-2024-53206Critical Vulnerability: CVE-2022-49407 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: dlm: fix plock invalid read This patch fixes an invalid read showed by KASAN. A unlock will allocate a "struct plock_op" and a fol
criticalCVE-2022-49407Critical Vulnerability: CVE-2024-56645 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_session_new(): fix skb reference counting Since j1939_session_skb_queue() does an extra skb_get() for each new s
criticalCVE-2024-56645Critical Vulnerability: CVE-2022-49561 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: re-fetch conntrack after insertion In case the conntrack is clashing, insertion can free skb->_nfct and set
criticalCVE-2022-49561Critical Vulnerability: CVE-2024-56779 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur The action force umount(umount -f) will attempt to kill all rpc_tas
criticalCVE-2024-56779Critical Vulnerability: CVE-2022-49418 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix free of uninitialized nfs4_label on referral lookup. Send along the already-allocated fattr along with nfs4_fs_location
criticalCVE-2022-49418Critical Vulnerability: CVE-2024-36476 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Ensure 'ib_sge list' is accessible Move the declaration of the 'ib_sge list' variable outside the 'always_invalidate' b
criticalCVE-2024-36476Critical Vulnerability: CVE-2024-57936 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix max SGEs for the Work Request Gen P7 supports up to 13 SGEs for now. WQE software structure can hold only 6 now.
criticalCVE-2024-57936Critical Vulnerability: CVE-2024-57802 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: netrom: check buffer length before accessing it Syzkaller reports an uninit value read from ax25cmp when sending raw message throu
criticalCVE-2024-57802Critical Vulnerability: CVE-2022-49058 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: cifs: potential buffer overflow in handling symlinks Smatch printed a warning: arch/x86/crypto/poly1305_glue.c:198 poly1305_updat
criticalCVE-2022-49058Critical Vulnerability: CVE-2024-49571 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg When receiving proposal msg in server, the field ip
criticalCVE-2024-49571Critical Vulnerability: CVE-2022-49260 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec - fix the aead software fallback for engine Due to the subreq pointer misuse the private context memory. The
criticalCVE-2022-49260Critical Vulnerability: CVE-2024-47408 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: net/smc: check smcd_v2_ext_offset when receiving proposal msg When receiving proposal msg in server, the field smcd_v2_ext_offset
criticalCVE-2024-47408Critical Vulnerability: CVE-2024-57947 — linux — linux_kernel
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_set_pipapo: fix initial map fill The initial buffer has to be inited to all-ones, but it must restrict it to the siz
criticalCVE-2024-57947
Showing the 60 most recent. Older alerts are archived but still reachable via search and the main feed.
Track linux exposure across your environment
Vulnios automatically cross-references your asset inventory against new linux CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan