651 Linux Kernel CVEs in October 2025
Full month · Source: NIST NVD
In October 2025, 651 Linux kernel CVEs were published, sourced from the NIST National Vulnerability Database. Of these, 3 were rated Critical, 193 were rated High severity and 333 Medium. CVE-2025-39964 was confirmed as actively exploited in the wild and added to the CISA Known Exploited Vulnerabilities catalog. October's 651 CVEs represent 11% of all 2025 Linux kernel CVEs , down from September's 737 (a 12% month-over-month decrease) .
Actively Exploited CVEs — October 2025
1 CVE in CISA KEVCVE-2025-39964 is the only Linux kernel CVE from October 2025 confirmed as actively exploited in the wild. It carries a CVSS score of 5.5 (Medium severity) and is listed in the CISA Known Exploited Vulnerabilities catalog.
| CVE ID | Severity | CVSS | Published | Description | |
|---|---|---|---|---|---|
| CVE-2025-39964 | Medium KEV | 5.5 | 2025-10-13 | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concu… |
| CVE ID | Package | Severity | CVSS | Published | Description | |
|---|---|---|---|---|---|---|
| CVE-2025-40106 | linux | Awaiting NVD | — | 2025-10-31 | In the Linux kernel, the following vulnerability has been resolved: comedi: fix divide-by-zero in comedi_buf_munge() Th… | |
| CVE-2025-40091 | linux | Awaiting NVD | — | 2025-10-30 | In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix too early devlink_free() in ixgbe_remove… | |
| CVE-2025-40103 | linux | Awaiting NVD | — | 2025-10-30 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix refcount leak for cifs_sb_tlink Fi… | |
| CVE-2025-40086 | linux | Awaiting NVD | — | 2025-10-30 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't allow evicting of BOs in same VM in a… | |
| CVE-2025-40102 | linux | Awaiting NVD | — | 2025-10-30 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before in… | |
| CVE-2025-40097 | linux | Awaiting NVD | — | 2025-10-30 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix missing pointer check in hda_compone… | |
| CVE-2025-40089 | linux | Awaiting NVD | — | 2025-10-30 | In the Linux kernel, the following vulnerability has been resolved: cxl/features: Add check for no entries in cxl_featu… | |
| CVE-2025-40100 | linux | Awaiting NVD | — | 2025-10-30 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not assert we found block group item when… | |
| CVE-2025-40101 | linux | Awaiting NVD | — | 2025-10-30 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leaks when rejecting a non SINGLE… | |
| CVE-2025-40098 | linux | Awaiting NVD | — | 2025-10-30 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fix NULL pointer dereference in… | |
| CVE-2025-40083 | linux | Awaiting NVD | — | 2025-10-29 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix null-deref in agg_dequeue T… | |
| CVE-2025-40085 | linux | Awaiting NVD | — | 2025-10-29 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix NULL pointer deference in try_… | |
| CVE-2025-40031 | linux | Awaiting NVD | — | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: tee: fix register_shm_helper() In register_shm_help… | |
| CVE-2025-40070 | linux | Awaiting NVD | — | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: pps: fix warning in pps_register_cdev when register… | |
| CVE-2025-40076 | linux | Awaiting NVD | — | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: PCI: rcar-host: Pass proper IRQ domain to generic_h… |