Linux Kernel CVE Statistics

549 Linux Kernel CVEs in May 2025

Full month · Source: NIST NVD

April 2025 June 2025

In May 2025, 549 Linux kernel CVEs were published, sourced from the NIST National Vulnerability Database. Of these, 127 were rated High severity and 422 Medium. No CVEs from this month have been confirmed as actively exploited via the CISA KEV catalog. May's 549 CVEs represent 10% of all 2025 Linux kernel CVEs , up from April's 280 (a 96% month-over-month increase) .

549
Total CVEs
0
Critical
127
High
422
Medium
0
Low
0
KEV Exploited
All CVEs — May 2025 549 CVEs
All (549) Critical (0) High (127) Medium (422) Low (0)
CVE ID Package Severity CVSS Published Description
CVE-2025-37926 linux High 7.8 2025-05-20 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_session_rpc_open…
CVE-2025-37928 linux High 7.8 2025-05-20 In the Linux kernel, the following vulnerability has been resolved: dm-bufio: don't schedule in atomic context A BUG wa…
CVE-2025-37899 linux High 7.8 2025-05-20 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The ses…
CVE-2025-37991 linux High 7.8 2025-05-20 In the Linux kernel, the following vulnerability has been resolved: parisc: Fix double SIGFPE crash Camm noticed that o…
CVE-2025-37947 linux High 7.8 2025-05-20 In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writes by valid…
CVE-2025-37924 linux High 7.8 2025-05-20 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in kerberos authenticatio…
CVE-2025-37943 linux High 7.8 2025-05-20 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid data access in ath12k_dp_…
CVE-2025-37957 linux High 7.8 2025-05-20 In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Forcibly leave SMM mode on SHUTDOWN inter…
CVE-2025-37927 linux High 7.8 2025-05-20 In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix potential buffer overflow in parse_i…
CVE-2025-37892 linux High 7.8 2025-05-20 In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftl_read_oob(…
CVE-2025-37952 linux High 7.8 2025-05-20 In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix UAF in __close_file_table_ids A use-afte…
CVE-2025-37913 linux High 7.8 2025-05-20 In the Linux kernel, the following vulnerability has been resolved: net_sched: qfq: Fix double list add in class with n…
CVE-2025-37923 linux High 7.8 2025-05-20 In the Linux kernel, the following vulnerability has been resolved: tracing: Fix oob write in trace_seq_to_buffer() syz…
CVE-2025-37981 linux High 7.8 2025-05-20 In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Use is_kdump_kernel() to check for …
CVE-2025-37914 linux High 7.8 2025-05-20 In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: Fix double list add in class with n…

Frequently Asked Questions

How many Linux kernel CVEs were published in May 2025?

549 Linux kernel CVEs were published in May 2025, sourced from the NIST National Vulnerability Database. Of these, 0 were rated Critical severity, 127 High, and 422 Medium.

How does May 2025 compare to other months?

May 2025's 549 CVEs represent 10% of all 2025 Linux kernel CVEs. Compared to April's 280 CVEs, this was a 96% increase month-over-month. View the full 2025 breakdown →

April 2025 2025 statistics June 2025