CVEs published in December 2025
5,238 vulnerabilities, 419 critical, 24 exploited.
- linuxpinctrl: at91-pio4: check return value of devm_kasprintf()No score
java-11-openjdkTuxCare,java-11-openjdk-debugTuxCare,java-11-openjdk-demoTuxCare +15 more +17 moreUpdate of java-11-openjdkNo score- sunhailin12315 product-review 商品评价系统sunhailin12315 product-review 商品评价系统 Write a Review cross site scripting5.1 Medium
- linuxpowerpc/powernv/sriov: perform null check on iov before dereferencing iovNo score
- linuxmedia: af9005: Fix null-ptr-deref in af9005_i2c_xfer6.7 Medium
- linuxext4: fix deadlock when converting an inline directory in nojournal mode5.7 Medium
- linuxscsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition7.8 High
- linuxptp_qoriq: fix memory leak in probe()No score
- linuxext4: refuse to create ea block when umountedNo score
- linuxfirmware: meson_sm: fix to avoid potential NULL pointer dereferenceNo score
- linuxbtrfs: zoned: fix memory leak after finding block group with super blocks5.3 Medium
- linuxmtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type2.4 Low
- linuxbcache: fixup btree_cache_wait list damageNo score
- linuxwifi: mac80211: fortify the spinlock against deadlock by interruptNo score
- linuxtty: serial: imx: disable Ageing Timer interrupt request irq5.5 Medium
- linux, linux kernel +1 moreiomap: Fix possible overflow condition in iomap_write_delalloc_scan7.1 High
- linuxmedia: av7110: prevent underflow in write_ts_to_decoder()7.1 High
- linuxmedia: tuners: qt1010: replace BUG_ON with a regular errorNo score
- linuxbtrfs: release path before inode lookup during the ino lookup ioctl5.7 Medium
- linuxcifs: fix potential race when tree connecting ipc9.8 Critical
- linuxwifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()8.8 High
- linuxnet: broadcom: bcm4908_enet: update TX stats after actual transmission5.7 Medium
- linuxusb: musb: Fix musb_gadget.c rxstate overflow bug7.0 High
- linuxof: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()No score
- linuxRDMA/erdma: Fix refcount leak in erdma_mmapNo score
- wpchill strong testimonialsStrong Testimonials <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update4.3 Medium
- linuxMIPS: fw: Allow firmware to pass a empty envNo score
- linuxfbdev: udlfb: Fix endpoint check2.4 Low
- linuxfs/ntfs3: Fix a possible null-pointer dereference in ni_clear()5.7 Medium
- linuxmedia: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()2.4 Low
- linuxfs/sysv: Null check to prevent null-ptr-deref bug7.1 High
- linuxcifs: fix potential oops in cifs_oplock_break9.8 Critical
- linuxnet: macb: fix a memory corruption in extended buffer descriptor mode9.8 Critical
- linuxsh: dma: Fix DMA channel offset calculationNo score
- linuxbtrfs: set page extent mapped after read_folio in relocate_one_pageNo score
- linuxplatform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI stringsNo score
- linuxksmbd: avoid out of bounds access in decode_preauth_ctxt()8.2 High
- linuxbus: mhi: ep: Only send -ENOTCONN status if client driver is availableNo score
- linuxfs/ntfs3: Add check for kmemdup6.0 Medium
- linuxbpf: Silence a warning in btf_type_id_size()6.7 Medium
- linuxvdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_removeNo score
- linuxARM: OMAP2+: Fix memory leak in realtime_counter_init()No score
- linuxwifi: ath11k: Fix qmi_msg_handler data structure initialization7.8 High
- linuxpowerpc/rtas: avoid device tree lookups in rtas_os_term()No score
- linuxfs/ntfs3: Fix slab-out-of-bounds in r_page7.8 High
- linuxhwrng: amd - Fix PCI device refcount leakNo score
- linuxdrm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage7.8 High
- linuxnilfs2: fix shift-out-of-bounds due to too large exponent of block size7.1 High
- linuxapparmor: Fix memleak in alloc_ns()7.8 High
- linuxcifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message5.3 Medium
- Show moreLoading…