Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-40328 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_close_cached_fid() find_or_crea... | 2026-10-30 |
| CVE-2025-40311 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: accel/habanalabs: support mapping cb with vmalloc-backed coherent memor... | 2026-10-30 |
| CVE-2025-40289 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM Otherwise... | 2026-10-30 |
| CVE-2025-40268 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: cifs: client: fix memory leak in smb3_fs_context_parse_param The user... | 2026-10-30 |
| CVE-2025-40180 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop... | 2026-10-30 |
| CVE-2025-40170 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: net: use dst_dev_rcu() in sk_setup_caps() Use RCU to protect accesses... | 2026-10-30 |
| CVE-2025-40160 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: xen/events: Return -EEXIST for bound VIRQs Change find_virq() to retur... | 2026-10-30 |
| CVE-2025-40158 | high | 8.1 | No | In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_output() Use RCU in ip6_output() in order to use... | 2026-10-30 |
| CVE-2025-40137 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate first page in error path of f2fs_truncate() syzb... | 2026-10-30 |
| CVE-2025-40136 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - request reserved interrupt for virtual function... | 2026-10-30 |
| CVE-2025-40077 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid overflow while left shift operation Should cast typ... | 2026-10-30 |
| CVE-2025-40075 | high | 8.1 | No | In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: use dst_dev_net_rcu() Replace three dst_dev() with a lock... | 2026-10-30 |
| CVE-2025-40071 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: Don't block input queue by waiting MSC Currently gsm_queue... | 2026-10-30 |
| CVE-2025-40067 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist... | 2026-10-30 |
| CVE-2025-40065 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Write hgatp register with valid mode bits According to th... | 2026-10-30 |
| CVE-2025-40057 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ptp: Add a upper bound on max_vclocks syzbot reported WARNING in max_v... | 2026-10-30 |
| CVE-2025-40003 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work Th... | 2026-10-30 |
| CVE-2025-39965 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI x->id.spi == 0 means "no S... | 2026-10-30 |
| CVE-2025-39952 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: avoid buffer overflow in WID string configuration Fix... | 2026-10-30 |
| CVE-2025-39933 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: smb: client: let recv_done verify data_offset, data_length and remainin... | 2026-10-30 |