737 Linux Kernel CVEs in September 2025
Full month · Source: NIST NVD
In September 2025, 737 Linux kernel CVEs were published, sourced from the NIST National Vulnerability Database. Of these, 1 was rated Critical, 209 were rated High severity and 527 Medium. CVE-2025-39682 was confirmed as actively exploited in the wild and added to the CISA Known Exploited Vulnerabilities catalog. September's 737 CVEs represent 13% of all 2025 Linux kernel CVEs , up from August's 189 (a 290% month-over-month increase) .
Actively Exploited CVEs — September 2025
1 CVE in CISA KEVCVE-2025-39682 is the only Linux kernel CVE from September 2025 confirmed as actively exploited in the wild. It carries a CVSS score of 9.8 (Critical severity) and is listed in the CISA Known Exploited Vulnerabilities catalog.
| CVE ID | Severity | CVSS | Published | Description | |
|---|---|---|---|---|---|
| CVE-2025-39682 | Critical KEV | 9.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-lengt… |
| CVE ID | Package | Severity | CVSS | Published | Description | |
|---|---|---|---|---|---|---|
| CVE-2025-39682 | linux | Critical KEV | 9.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_… | |
| CVE-2022-50386 | linux | High | 8.0 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix user-after-free This uses l2c… | |
| CVE-2025-39888 | linux | High | 7.8 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: fuse: Block access to folio overlimit syz reported … | |
| CVE-2025-39882 | linux | High | 7.8 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: fix potential OF node use-after-free … | |
| CVE-2025-39868 | linux | High | 7.8 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix runtime warning on truncate_folio_batch_… | |
| CVE-2025-39877 | linux | High | 7.8 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-free in state_show() … | |
| CVE-2025-39880 | linux | High | 7.8 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: libceph: fix invalid accesses to ceph_connection_v1… | |
| CVE-2025-39871 | linux | High | 7.8 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Remove improper idxd_free The call… | |
| CVE-2025-39870 | linux | High | 7.8 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix double free in idxd_setup_wqs(… | |
| CVE-2025-39873 | linux | High | 7.8 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: can: xilinx_can: xcan_write_frame(): fix use-after-… | |
| CVE-2025-39881 | linux | High | 7.8 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: kernfs: Fix UAF in polling when open file is releas… | |
| CVE-2025-39841 | linux | High | 7.8 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in deferred… | |
| CVE-2025-39861 | linux | High | 7.8 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: vhci: Prevent use-after-free by removing… | |
| CVE-2025-39859 | linux | High | 7.8 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: fix use-after-free bugs causing by ptp_oc… | |
| CVE-2025-39854 | linux | High | 7.8 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL access of tx->in_use in ice_ll_ts_int… |