Linux Kernel CVE Statistics
1,055 Linux Kernel CVEs in December 2025
Full month · Source: NIST NVD
In December 2025, 1,055 Linux kernel CVEs were published, sourced from the NIST National Vulnerability Database. Of these, 37 were rated Critical, 289 were rated High severity and 12 Medium. No CVEs from this month have been confirmed as actively exploited via the CISA KEV catalog. December's 1,055 CVEs represent 19% of all 2025 Linux kernel CVEs , up from November's 104 (a 914% month-over-month increase) .
1055
Total CVEs
37
Critical
289
High
12
Medium
0
Low
0
KEV Exploited
All CVEs — December 2025
1055 CVEs
| CVE ID | Package | Severity | CVSS | Published | Description | |
|---|---|---|---|---|---|---|
| CVE-2023-54226 | linux | Awaiting NVD | — | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data races around sk->sk_shutdown. KCS… | |
| CVE-2023-54196 | linux | Awaiting NVD | — | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL pointer dereference in 'ni_write… | |
| CVE-2023-54263 | linux | Awaiting NVD | — | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR D… | |
| CVE-2023-54174 | linux | Awaiting NVD | — | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: vfio: Fix NULL pointer dereference caused by uninit… | |
| CVE-2022-50836 | linux | Awaiting NVD | — | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: sysmon: fix memory leak in qcom_add_sys… | |
| CVE-2023-54270 | linux | Awaiting NVD | — | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: media: usb: siano: Fix use after free bugs caused b… | |
| CVE-2022-50849 | linux | Awaiting NVD | — | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: pstore: Avoid kcore oops by vmap()ing with VM_IOREM… | |
| CVE-2023-54224 | linux | Awaiting NVD | — | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix lockdep splat and potential deadlock aft… | |
| CVE-2023-54294 | linux | Awaiting NVD | — | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak of md thread In raid10_run()… | |
| CVE-2023-54299 | linux | Awaiting NVD | — | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: bus: verify partner exists in typec_alt… | |
| CVE-2023-54213 | linux | Awaiting NVD | — | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: USB: sisusbvga: Add endpoint checks The syzbot fuzz… | |
| CVE-2022-50809 | linux | Awaiting NVD | — | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: xhci: dbc: Fix memory leak in xhci_alloc_dbc() If D… | |
| CVE-2023-54180 | linux | Awaiting NVD | — | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: btrfs: handle case when repair happens with dev-rep… | |
| CVE-2023-54251 | linux | Awaiting NVD | — | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCL… | |
| CVE-2022-50816 | linux | Awaiting NVD | — | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: ipv6: ensure sane device mtu in tunnels Another syz… |