Linux Kernel CVE Statistics
104 Linux Kernel CVEs in November 2025
Full month · Source: NIST NVD
In November 2025, 104 Linux kernel CVEs were published, sourced from the NIST National Vulnerability Database. Of these, 2 were rated Critical, 42 were rated High severity and 1 Medium. No CVEs from this month have been confirmed as actively exploited via the CISA KEV catalog. November's 104 CVEs represent 2% of all 2025 Linux kernel CVEs , down from October's 651 (a 84% month-over-month decrease) .
104
Total CVEs
2
Critical
42
High
1
Medium
0
Low
0
KEV Exploited
All CVEs — November 2025
104 CVEs
| CVE ID | Package | Severity | CVSS | Published | Description | |
|---|---|---|---|---|---|---|
| CVE-2025-40209 | linux | Awaiting NVD | — | 2025-11-21 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak of qgroup_list in btrfs_add_… | |
| CVE-2025-40211 | linux | Awaiting NVD | — | 2025-11-21 | In the Linux kernel, the following vulnerability has been resolved: ACPI: video: Fix use-after-free in acpi_video_switc… | |
| CVE-2025-40161 | linux | Awaiting NVD | — | 2025-11-12 | In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix SGI cleanup on unbind The … | |
| CVE-2025-40138 | linux | Awaiting NVD | — | 2025-11-12 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid NULL pointer dereference in f2fs… | |
| CVE-2025-40193 | linux | Awaiting NVD | — | 2025-11-12 | In the Linux kernel, the following vulnerability has been resolved: xtensa: simdisk: add input size check in proc_write… | |
| CVE-2025-40181 | linux | Awaiting NVD | — | 2025-11-12 | In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Force legacy PCI hole to UC when overridin… | |
| CVE-2025-40132 | linux | Awaiting NVD | — | 2025-11-12 | In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof_sdw: Prevent jump to NULL add_side… | |
| CVE-2025-40180 | linux | Awaiting NVD | — | 2025-11-12 | In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in ma… | |
| CVE-2025-40208 | linux | Awaiting NVD | — | 2025-11-12 | In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware downloa… | |
| CVE-2025-40131 | linux | Awaiting NVD | — | 2025-11-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix peer lookup in ath12k_dp_mon_rx_d… | |
| CVE-2025-40145 | linux | Awaiting NVD | — | 2025-11-12 | In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Fix double cleanup on devm_add_action_… | |
| CVE-2025-40179 | linux | Awaiting NVD | — | 2025-11-12 | In the Linux kernel, the following vulnerability has been resolved: ext4: verify orphan file size is not too big In pri… | |
| CVE-2025-40185 | linux | Awaiting NVD | — | 2025-11-12 | In the Linux kernel, the following vulnerability has been resolved: ice: ice_adapter: release xa entry on adapter alloc… | |
| CVE-2025-40119 | linux | Awaiting NVD | — | 2025-11-12 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix potential null deref in ext4_mb_init() In… | |
| CVE-2025-40120 | linux | Awaiting NVD | — | 2025-11-12 | In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: hold PM usage ref to avoid PM/MDIO … |