CVEs published in December 2025
5,238 vulnerabilities, 419 critical, 24 exploited.
- linuxmptcp: fix address removal logic in mptcp_pm_nl_rm_addrNo score
- linuxnet: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on errorNo score
- linuxcifs: fix memory leak in smb3_fs_context_parse_param error path4.8 Medium
- linuxnvme-multipath: fix lockdep WARN due to partition scan work7.5 High
- linuxInput: pegasus-notetaker - fix potential out-of-bounds access2.4 Low
- linuxLoongArch: BPF: Disable trampoline for kernel module function traceNo score
- linuxice: fix PTP cleanup on driver removal in error path7.0 High
- linux, linux kernel +1 moretimers: Fix NULL function pointer race in timer_shutdown_sync()4.7 Medium
- linuxidpf: fix possible vport_config NULL pointer deref in remove7.0 High
- linuxfs: Fix uninitialized 'offp' in statmount_string()7.8 High
- linux, linux kernel +1 moreksm: use range-walk function to jump over holes in scan_get_next_rmap_item5.5 Medium
- linuxerofs: avoid infinite loop due to incomplete zstd-compressed dataNo score
- linuxmlx5: Fix default values in create CQ7.8 High
- linuxbpf: account for current allocated stack depth in widen_imprecise_scalars()7.8 High
- linuxdrm/xe/guc: Synchronize Dead CT worker with unbind7.8 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +4 more +6 morenetfilter: nft_ct: add seqadj extension for natted connections7.5 High
- linuxALSA: hda/hdmi: Fix breakage at probing nvhdmi-mcp driverNo score
- linuxpmdomain: arm: scmi: Fix genpd leak on provider registration failure7.8 High
- linuxsched_ext: Fix unsafe locking in the scx_dump_state()No score
- linuxdrm/amdgpu: remove two invalid BUG_ON()s6.8 Medium
- linuxbpf: Add bpf_prog_run_data_pointers()4.8 Medium
- linuxcodetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for slabobj_extNo score
- linuxcrash: fix crashkernel resource shrink9.8 Critical
- linuxbnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap()No score
- linuxdrm/amd/display: Cache streams targeting link when performing LT automation5.4 Medium
- linuxmedia: imon: make send_packet() more robust5.1 Medium
- linuxdrm/xe/guc: Add devm release action to safely tear down CT5.5 Medium
- linuxnet: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup9.8 Critical
- linuxudp_tunnel: use netdev_warn() instead of netdev_WARN()7.8 High
- linuxdrm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()5.7 Medium
- linuxdrm/msm: Fix GEM free for imported dma-bufs7.8 High
- linuxtcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()2.0 Low
- linuxnet: mdio: Check regmap pointer returned by device_node_to_regmap()No score
- linuxring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches upNo score
- linuxnfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing5.8 Medium
- linuxdrm/mediatek: Disable AFBC support on Mediatek DRM driver7.1 High
- linuxima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr7.8 High
- linuxwifi: iwlwifi: fix potential use after free in iwl_mld_remove_link()7.5 High
- linuxdrm/radeon: Remove calls to drm_put_dev()7.8 High
- linuxdrm/amd/display: Fix NULL deref in debugfs odm_combine_segmentsNo score
- linuxblk-cgroup: fix possible deadlock while configuring policy5.7 Medium
- linuxcpufreq/longhaul: handle NULL policy in longhaul_exitNo score
- linuxPCI: cadence: Check for the existence of cdns_pcie::ops before using it7.8 High
- linuxmedia: nxp: imx8-isi: Fix streaming cleanup on release7.8 High
- linuxamd/amdkfd: enhance kfd process check in switch partition7.8 High
- linuxftrace: Fix softlockup in ftrace_module_enable7.8 High
- linuxcrypto: aspeed - fix double free caused by devmNo score
- linuxx86/fpu: Ensure XFD state on signal delivery7.8 High
- linuxdrm/radeon: Do not kfree() devres managed rdev7.8 High
- linuxnetpoll: Fix deadlock in memory allocation under spinlockNo score
- Show moreLoading…