CVEs published in December 2025
5,238 vulnerabilities, 419 critical, 24 exploited.
- linuxdrm/amd/display: Check NULL before accessing7.8 High
- linuxlibceph: fix potential use-after-free in have_mon_and_osd_map()9.8 Critical
- linuxlibceph: prevent potential out-of-bounds writes in handle_auth_session_key()9.8 Critical
- linuxlibceph: replace BUG_ON with bounds check for map->max_osd7.5 High
- linuxusb: gadget: udc: fix use-after-free in usb_gadget_state_work7.8 High
- linuxASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-list5.5 Medium
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morebfs: Reconstruct file type when loading from disk7.1 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +4 more +6 morenvme: fix admin request_queue lifetime7.8 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreext4: refresh inline data size before write operations5.7 Medium
- linuxksmbd: ipc: fix use-after-free in ipc_msg_send_request9.8 Critical
- linuxcrypto: zstd - fix double-free in per-CPU stream cleanupNo score
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()7.5 High
- linuxrust_binder: fix race condition on death_list7.8 High
- linuxKVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced5.6 Medium
- linuxcomedi: multiq3: sanitize config options in multiq3_attach()No score
- linuxcomedi: check device's attached status in compat ioctlsNo score
- linuxstaging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser8.8 High
- linuxstaging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing8.8 High
- linuxstaging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing7.1 High
- linuxmm: don't spin in add_stack_record when gfp flags don't allowNo score
- linuxmisc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookupNo score
- linuxerofs: avoid infinite loops due to corrupted subpage compact indexes7.1 High
- linuxhung_task: fix warnings caused by unaligned lock pointers8.2 High
- linuxmost: usb: hdm_probe: Fix calling put_device() before device initialization5.4 Medium
- linuxvmw_balloon: indicate success when effectively deflating during migrationNo score
- linuxposix-timers: Plug potential memory leak in do_timer_create()No score
- linuxksmbd: close accepted socket when per-IP limit rejects connection7.5 High
- linuxnet: netpoll: fix incorrect refcount handling causing incorrect cleanup7.8 High
- linuxdrm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD5.7 Medium
- linuxNFS: Check the TLS certificate fields in nfs_match_client()7.0 High
- linuxNFS: Fix LTP test failures when timestamps are delegatedNo score
- linuxipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe7.5 High
- linuxnilfs2: avoid having an active sc_timer before freeing sciNo score
- linux, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 morebinfmt_misc: restore write access before closing files opened by open_exec()6.8 Medium
- linuxmtd: rawnand: cadence: fix DMA device NULL pointer dereferenceNo score
- linuxmtdchar: fix integer overflow in read/write ioctls7.8 High
- linuxscsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3)5.5 Medium
- linuxnouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot5.7 Medium
- linuxio_uring/cmd_net: fix wrong argument types for skb_queue_splice()7.8 High
- linuxdrm/tegra: Add call to put_pid()6.8 Medium
- linuxveth: more robust handing of race to avoid txq getting stuck7.5 High
- linuxmm/mempool: fix poisoning order>0 pages with HIGHMEM7.8 High
- linuxdrm/amdgpu: fix gpu page fault after hibernation on PF passthroughNo score
- linuxscsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()7.8 High
- linuxdrm/plane: Fix create_in_format_blob() return valueNo score
- linuxmptcp: Fix proto fallback detection with BPF6.3 Medium
- linuxsmb: client: fix incomplete backport in cfids_invalidation_worker()8.8 High
- linuxlib/test_kho: check if KHO is enabledNo score
- linux, linux kernel +1 moredrm/radeon: delete radeon_fence_process in is_signaled, no deadlock5.5 Medium
- linuxpinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc5.5 Medium
- Show moreLoading…