CVEs published in December 2025
5,238 vulnerabilities, 419 critical, 24 exploited.
- linuxmedia: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init()No score
- linuxgtp: Fix use-after-free in __gtp_encap_destroy().7.8 High
- linuxnilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse7.8 High
- linuxtracing/user_events: Ensure write index cannot be negative7.8 High
- linuxdrm/msm: fix NULL-deref on irq uninstallNo score
- linuxautofs: fix memory leak of waitqueues in autofs_catatonic_modeNo score
- linuxnfp: clean mc addresses in application firmware when closing portNo score
- linuxerofs: stop parsing non-compact HEAD index if clusterofs is invalid7.8 High
- linuxhfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling7.8 High
- linuxfs: drop peer group ids under namespace lock7.8 High
- linuxfs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()7.8 High
- linuxcrypto: safexcel - Cleanup ring IRQ workqueues on load failureNo score
- linuxfs/ntfs3: Return error for inconsistent extended attributes7.8 High
- linuxf2fs: fix to drop all dirty pages during umount() if cp_error is set7.8 High
- linuxdrm/msm/dpu: Add check for cstateNo score
- linuxbtrfs: fix incorrect splitting in btrfs_drop_extent_map_range7.8 High
- linuxdrm/fbdev-generic: prohibit potential out-of-bounds access7.8 High
- linuxpcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()No score
- linuxkcm: Fix memory leak in error path of kcm_sendmsg()6.8 Medium
- linuxpinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groupsNo score
- linuxusb: rndis_host: Secure rndis_query check against int overflow2.4 Low
- linuxmedia: rcar_fdp1: Fix refcount leak in probe and remove functionNo score
- linuxblk-cgroup: dropping parent refcount after pd_free_fn() is done7.8 High
- linuxcan: isotp: check CAN address family in isotp_bind()0.0 None
- linuxmtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()7.8 High
- linuxdriver: soc: xilinx: use _safe loop iterator to avoid a use after freeNo score
- linuxfs: Protect reconfiguration of sb read-write from racing writes5.8 Medium
- linuxnet: prevent skb corruption on frag list segmentation9.8 Critical
- linuxubi: Fix possible null-ptr-deref in ubi_free_volume()7.0 High
- linuxbpf: Add preempt_count_{sub,add} into btf id deny list6.7 Medium
- linuxALSA: firewire-digi00x: prevent potential use after free5.4 Medium
- linuxxen: speed up grant-table reclaim5.7 Medium
- linuxbtrfs: zoned: skip splitting and logical rewriting on pre-alloc writeNo score
- linuxpower: supply: bq27xxx: Fix poll_interval handling and races on remove7.8 High
- linuxmedia: max9286: Free control handlerNo score
- linuxorangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()No score
- linuxclk: st: Fix memory leak in st_of_quadfs_setup()No score
- linuxRDMA/hns: Fix refcount leak in hns_roce_mmapNo score
- linuxocfs2: fix memory leak in ocfs2_mount_volume()No score
- linuxfbdev: smscufx: Fix several use-after-free bugs7.0 High
- linuxbtrfs: set generation before calling btrfs_clean_tree_block in btrfs_init_new_buffer4.8 Medium
- linuxRISC-V: kexec: Fix memory leak of elf header bufferNo score
- linuxipv6/sit: use DEV_STATS_INC() to avoid data-races0.0 None
- linuxcrypto: marvell/octeontx - prevent integer overflowsNo score
- linuxfs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()5.3 Medium
- linuxmedia: i2c: ov5648: Free V4L2 fwnode data on unbindNo score
- linuxstaging: vt6655: fix potential memory leak7.8 High
- linuxmedia: camss: Clean up received buffers on failed start of streaming7.8 High
- linuxudf: Avoid double brelse() in udf_rename()7.8 High
- linuxapparmor: fix a memleak in multi_transaction_new()6.8 Medium
- Show moreLoading…