NVD disclosure day

Published threat advisories for December 24, 2025

CVE advisoryCRITICAL

CVE-2025-68745

Linux Kernel qla2xxx Driver Command Handling Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in the Linux kernel's SCSI driver could cause storage commands to become stuck after a chip reset, potentially leading to system instability. While the risk is currently assessed as very unlikely due to the driver's specific function, confirming its presence and reachability within the environment is im

CVE advisoryCRITICAL

CVE-2025-68741

Linux Kernel qla2xxx Driver Memory Corruption Vulnerability.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A memory corruption vulnerability exists in the Linux kernel's qla2xxx SCSI driver due to improper handling of memory deallocation in certain error paths, potentially leading to system instability. The vulnerability could be triggered by crafted SCSI commands, though it is considered to have a very unlikely direct exte

CVE advisoryCRITICAL

CVE-2023-54094

Linux Kernel skb Corruption Vulnerability

Halo Surface Signal: 3 out of 5 — possibly public-facing.

A vulnerability in the Linux kernel's network stack can cause system instability or crashes due to corrupted network buffers during packet segmentation. This issue is reachable via crafted network traffic and could disrupt network operations, warranting confirmation of its relevance to current system configurations.

CVE advisoryCRITICAL

CVE-2023-54090

Linux Kernel ixgbe Panic on High CPU Count XDP Transmit.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A Linux kernel vulnerability in the ixgbe network driver can cause a system panic when processing network data on systems with more than 64 CPUs. This issue arises from an incorrect calculation for indexing XDP TX rings, potentially leading to denial of service.

CVE advisoryCRITICAL

CVE-2023-54076

Linux Kernel SMB Client Use-After-Free Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A Linux kernel vulnerability in the SMB client's session handling could allow attackers to cause system instability or execute code, impacting data access and services. This issue is relevant if your systems utilize the kernel's network file sharing capabilities. The vulnerability has been resolved in the Linux kernel.

CVE advisoryCRITICAL

CVE-2025-68726

Linux Kernel Memory Corruption Vulnerability in AEAD Algorithms

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability exists in the Linux kernel's cryptographic API related to authenticated encryption with associated data (AEAD) algorithms. This flaw stems from improper handling of memory allocation during algorithm initialization, which could lead to memory corruption and system crashes. While the direct impact depend

CVE advisoryCRITICAL

CVE-2025-68359

Linux Kernel Btrfs Double Free Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in the Linux kernel's Btrfs file system could lead to a double-free memory error during specific operations. This flaw, if triggered, might cause system instability or data corruption. While the vulnerability is in a core component, its direct external impact is considered unlikely.