Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-38597 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video... | 2026-10-30 |
| CVE-2025-38595 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: xen: fix UAF in dmabuf_exp_from_pages() [dma_buf_fd() fixes; no prefer... | 2026-10-30 |
| CVE-2025-38590 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Remove skb secpath if xfrm state is not found Hardware retu... | 2026-10-30 |
| CVE-2025-38582 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix double destruction of rsv_qp rsv_qp may be double destro... | 2026-10-30 |
| CVE-2025-38531 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: iio: common: st_sensors: Fix use of uninitialize device structs Throug... | 2026-10-30 |
| CVE-2025-38524 | medium | 4.7 | No | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix recv-recv race of completed call If a call receives an even... | 2026-10-30 |
| CVE-2025-38507 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: avoid bluetooth suspend/resume stalls Ensure we don't s... | 2026-10-30 |
| CVE-2025-38429 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only after buffer is written Inside... | 2026-10-30 |
| CVE-2025-38373 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix potential deadlock in MR deregistration The issue arises... | 2026-10-30 |
| CVE-2025-38372 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling __xa_stor... | 2026-10-30 |
| CVE-2025-38283 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: bugfix live migration function without VF device dri... | 2026-10-30 |
| CVE-2025-38272 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: net: dsa: b53: do not enable EEE on bcm63xx BCM63xx internal switches... | 2026-10-30 |
| CVE-2025-38261 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: riscv: save the SR_SUM status over switches When threads/tasks are swi... | 2026-10-30 |
| CVE-2025-38248 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-free during router port configuration The... | 2026-10-30 |
| CVE-2025-38246 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: bnxt: properly flush XDP redirect lists We encountered following crash... | 2026-10-30 |
| CVE-2025-38244 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential deadlock when reconnecting channels Fix cif... | 2026-10-30 |
| CVE-2025-38234 | medium | 4.7 | No | In the Linux kernel, the following vulnerability has been resolved: sched/rt: Fix race in push_rt_task Overview ======== When a CPU choose... | 2026-10-30 |
| CVE-2025-38204 | high | 7.1 | No | In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds read in add_missing_indices stbl is... | 2026-10-30 |
| CVE-2025-38195 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset() ERROR INF... | 2026-10-30 |
| CVE-2025-38182 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: ublk: santizize the arguments from userspace when adding a device Sani... | 2026-10-30 |