CVEs published in November 2025
3,062 vulnerabilities, 265 critical, 10 exploited.
- linux, linux kernel +1 moresmb/client: fix memory leak in smb2_open_file()5.5 Medium
- linux, linux kernel +1 moreBluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work5.5 Medium
- linux, linux kernel +1 morenetfs: Fix early read unlock of page with EOF in middle7.1 High
- linuxext4: detect invalid INLINE_DATA + EXTENTS flag combination7.8 High
- linuxdrm/xe/guc: Check GuC running state before deregistering exec queue7.8 High
- linuxmedia: nxp: imx8-isi: m2m: Fix streaming cleanup on release7.8 High
- linux, linux kernel +1 moreusbnet: Fix using smp_processor_id() in preemptible code warnings5.5 Medium
- linuxsched/deadline: Stop dl_server before CPU goes offlineNo score
- linuxASoC: amd/sdw_utils: avoid NULL deref when devm_kasprintf() failsNo score
- linuxmailbox: zynqmp-ipi: Fix SGI cleanup on unbindNo score
- linuxxen/events: Return -EEXIST for bound VIRQsNo score
- linuxxsk: Harden userspace-supplied xdp_desc validation7.8 High
- linuxipv6: use RCU in ip6_output()8.1 High
- linuxEDAC/i10nm: Skip DIMM enumeration on a disabled memory controller7.0 High
- linuxPM / devfreq: mtk-cci: Fix potential error pointer dereference in probe()No score
- linuxiommu/vt-d: debugfs: Fix legacy mode page table dump logic7.3 High
- linuxASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping7.5 High
- linuxmm: hugetlb: avoid soft lockup when mprotect to large memory area6.8 Medium
- linuxdrm/msm: Fix bootup splat with separate_gpu_drm modparamNo score
- linuxLoongArch: BPF: No support of struct argument in trampoline programs7.8 High
- linuxf2fs: fix to avoid migrating empty section5.7 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moretls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().7.8 High
- linuxdrm/amd/display: Add NULL pointer checks in dc_stream cursor attribute functionsNo score
- linuxblk-throttle: fix access race during throttle policy activationNo score
- linuxblk-mq: fix potential deadlock while nr_requests grown6.2 Medium
- linuxPCI/pwrctrl: Fix double cleanup on devm_add_action_or_reset() failureNo score
- linuxbpf: dont report verifier bug for missing bpf_scc_visit on speculative path4.6 Medium
- linuxALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RTNo score
- linuxBluetooth: ISO: Fix possible UAF on iso_conn_free8.0 High
- linuxnet: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast8.8 High
- linuxsmc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().7.8 High
- linuxf2fs: fix to avoid NULL pointer dereference in f2fs_check_quota_consistency()No score
- linuxf2fs: fix to truncate first page in error path of f2fs_truncate()7.1 High
- linuxcrypto: hisilicon/qm - request reserved interrupt for virtual function9.1 Critical
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +4 more +6 moreipv6: use RCU in ip6_xmit()8.1 High
- linuxdm: fix NULL pointer dereference in __dm_suspend()7.3 High
- linuxmptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable().8.1 High
- linuxASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callbackNo score
- linuxwifi: ath12k: Fix peer lookup in ath12k_dp_mon_rx_deliver_msdu()No score
- linuxscsi: ufs: core: Fix data race in CPU latency PM QoS request handlingNo score
- linuxsunrpc: fix null pointer dereference on zero-length checksum7.5 High
- linuxhwrng: ks-sa - fix division by zero in ks_sa_rng_initNo score
- linuxsparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC4.8 Medium
- linuxblk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx7.3 High
- linuxsparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III7.8 High
- linuxbpf: Enforce expected_attach_type for tailcall compatibility7.8 High
- linuxperf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access errorNo score
- linuxASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping7.8 High
- linuxnet: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock5.6 Medium
- linuxext4: fix potential null deref in ext4_mb_init()7.0 High
- Show moreLoading…