Linux Kernel CVE Statistics
651 Linux Kernel CVEs in October 2025
Full month · Source: NIST NVD
In October 2025, 651 Linux kernel CVEs were published, sourced from the NIST National Vulnerability Database. Of these, 3 were rated Critical, 193 were rated High severity and 332 Medium. No CVEs from this month have been confirmed as actively exploited via the CISA KEV catalog. October's 651 CVEs represent 11% of all 2025 Linux kernel CVEs , down from September's 737 (a 12% month-over-month decrease) .
651
Total CVEs
3
Critical
193
High
332
Medium
2
Low
0
KEV Exploited
All CVEs — October 2025
651 CVEs
| CVE ID | Package | Severity | CVSS | Published | Description | |
|---|---|---|---|---|---|---|
| CVE-2025-40106 | linux | Awaiting NVD | — | 2025-10-31 | In the Linux kernel, the following vulnerability has been resolved: comedi: fix divide-by-zero in comedi_buf_munge() Th… | |
| CVE-2025-40091 | linux | Awaiting NVD | — | 2025-10-30 | In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix too early devlink_free() in ixgbe_remove… | |
| CVE-2025-40089 | linux | Awaiting NVD | — | 2025-10-30 | In the Linux kernel, the following vulnerability has been resolved: cxl/features: Add check for no entries in cxl_featu… | |
| CVE-2025-40098 | linux | Awaiting NVD | — | 2025-10-30 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fix NULL pointer dereference in… | |
| CVE-2025-40100 | linux | Awaiting NVD | — | 2025-10-30 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not assert we found block group item when… | |
| CVE-2025-40097 | linux | Awaiting NVD | — | 2025-10-30 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix missing pointer check in hda_compone… | |
| CVE-2025-40103 | linux | Awaiting NVD | — | 2025-10-30 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix refcount leak for cifs_sb_tlink Fi… | |
| CVE-2025-40086 | linux | Awaiting NVD | — | 2025-10-30 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't allow evicting of BOs in same VM in a… | |
| CVE-2025-40101 | linux | Awaiting NVD | — | 2025-10-30 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leaks when rejecting a non SINGLE… | |
| CVE-2025-40102 | linux | Awaiting NVD | — | 2025-10-30 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before in… | |
| CVE-2025-40083 | linux | Awaiting NVD | — | 2025-10-29 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix null-deref in agg_dequeue T… | |
| CVE-2025-40085 | linux | Awaiting NVD | — | 2025-10-29 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix NULL pointer deference in try_… | |
| CVE-2025-40073 | linux | Awaiting NVD | — | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Do not validate SSPP when it is not ready … | |
| CVE-2025-40066 | linux | Awaiting NVD | — | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Check phy before init msta_link… | |
| CVE-2025-40077 | linux | Awaiting NVD | — | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid overflow while left shift operat… |