2025 CVE Vulnerabilities
45,180 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-40319 | HIGH | 7.8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: bpf: Sync pending IRQ work before freeing ring buff... |
| CVE-2025-40318 | HIGH | 8.8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix race in hci_cmd_sync_deque... |
| CVE-2025-40317 | HIGH | 7.8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: regmap: slimbus: fix bus_context pointer in regmap ... |
| CVE-2025-40316 | — | — | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix device use-after-free on unbind ... |
| CVE-2025-40315 | — | — | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix epfile null pointer access a... |
| CVE-2025-40314 | — | — | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: Use-after-free during failed in... |
| CVE-2025-40313 | — | — | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: pretend $Extend records as regular files Si... |
| CVE-2025-40312 | — | — | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: jfs: Verify inode mode when loading from disk The ... |
| CVE-2025-40311 | — | — | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: accel/habanalabs: support mapping cb with vmalloc-b... |
| CVE-2025-40310 | — | — | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: amd/amdkfd: resolve a race in amdgpu_amdkfd_device_... |
| CVE-2025-40309 | HIGH | 8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix UAF on sco_conn_free BUG: KASA... |
| CVE-2025-40308 | — | — | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bcsp: receive data only if registered C... |
| CVE-2025-40307 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: exfat: validate cluster allocation bits of the allo... |
| CVE-2025-40306 | HIGH | 7.8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: orangefs: fix xattr related buffer overflow... Wil... |
| CVE-2025-40305 | — | — | 0.1% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: 9p/trans_fd: p9_fd_request: kick rx thread if EPOLL... |
| CVE-2025-40304 | HIGH | 7.8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: fbdev: Add bounds checking in bit_putcs to fix vmal... |
| CVE-2025-40303 | HIGH | 7.8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: btrfs: ensure no dirty metadata is written back for... |
| CVE-2025-40302 | HIGH | 7.8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: forbid remove_bufs when legacy fi... |
| CVE-2025-40301 | HIGH | 7.6 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: validate skb length for unkno... |
| CVE-2025-40299 | — | — | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: gve: Implement gettimex64 with -EOPNOTSUPP gve imp... |
| CVE-2025-40298 | — | — | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: gve: Implement settime64 with -EOPNOTSUPP ptp_cloc... |
| CVE-2025-40297 | HIGH | 7.8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix use-after-free due to MST port sta... |
| CVE-2025-40296 | — | — | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: int3472: Fix double free of GPIO devi... |
| CVE-2025-40295 | — | — | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: fscrypt: fix left shift underflow when inode->i_blk... |
| CVE-2025-40294 | — | — | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix OOB access in parse_adv_monito... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now