PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2025 document archive · 11

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 11 / 82

  1. CVE-2025-68190kernel: drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()
  2. CVE-2025-68189kernel: Linux kernel drm/msm: Privilege escalation and denial of service via improper GEM object freeing
  3. CVE-2025-68188kernel: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()
  4. CVE-2025-68187kernel: net: mdio: Check regmap pointer returned by device_node_to_regmap()
  5. CVE-2025-68186kernel: Linux kernel: Denial of Service in ring-buffer component
  6. CVE-2025-68185kernel: nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
  7. CVE-2025-68184kernel: Linux kernel drm/mediatek: Denial of Service due to broken AFBC support on Mediatek MT8188
  8. CVE-2025-68183kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
  9. CVE-2025-68182kernel: wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link()
  10. CVE-2025-68181kernel: drm/radeon: Remove calls to drm_put_dev()
  11. CVE-2025-68180kernel: drm/amd/display: Fix NULL deref in debugfs odm_combine_segments
  12. CVE-2025-68179kernel: Linux kernel (s390): Denial of service and data corruption due to improper page table updates
  13. CVE-2025-68178kernel: Linux kernel blk-cgroup: Denial of Service due to circular locking dependency
  14. CVE-2025-68177kernel: cpufreq/longhaul: handle NULL policy in longhaul_exit
  15. CVE-2025-68176kernel: PCI: cadence: Check for the existence of cdns_pcie::ops before using it
  16. CVE-2025-68175kernel: Linux kernel: Denial of service in NXP i.MX8 ISI driver via improper streaming cleanup
  17. CVE-2025-68174kernel: Linux kernel AMD KFD: Race condition causes system crash
  18. CVE-2025-68173kernel: ftrace: Fix softlockup in ftrace_module_enable
  19. CVE-2025-68172kernel: crypto: aspeed - fix double free caused by devm
  20. CVE-2025-68171kernel: x86/fpu: Ensure XFD state on signal delivery
  21. CVE-2025-68170kernel: drm/radeon: Do not kfree() devres managed rdev
  22. CVE-2025-68169kernel: Linux kernel: Denial of Service via deadlock in netpoll memory allocation
  23. CVE-2025-68168kernel: jfs: fix uninitialized waitqueue in transaction manager
  24. CVE-2025-68167kernel: gpiolib: fix invalid pointer access in debugfs
  25. CVE-2025-68161Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification
  26. CVE-2025-68160openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter
  27. CVE-2025-68157webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects
  28. CVE-2025-68156github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation
  29. CVE-2025-68121crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption
  30. CVE-2025-68119cmd/go: cmd/go: Local code execution and arbitrary file write via malicious module version strings
  31. CVE-2025-68114capstone: Capstone: Memory corruption via unchecked vsnprintf return
  32. CVE-2025-67899uriparser: uriparser: Unbounded recursion and stack consumption via large input
  33. CVE-2025-67897Sequoia: Sequoia: Application crash via crafted encrypted message
  34. CVE-2025-67873capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution.
  35. CVE-2025-67779next: React Server Components: Denial of Service via Unsafe Deserialization
  36. CVE-2025-67733Valkey: Valkey: Data tampering and denial of service via improper null character handling in Lua scripts
  37. CVE-2025-67726tornado: Tornado Quadratic DoS via Crafted Multipart Parameters
  38. CVE-2025-67725tornado: Tornado Quadratic DoS via Repeated Header Coalescing
  39. CVE-2025-67724tornado: Tornado Header Injection and XSS via reason argument
  40. CVE-2025-67499CNI portmap plugin: github.com/containernetworking/plugins/plugins/meta/portmap: CNI portmap plugin: HostPort forwarding vulnerability allows traffic interception
  41. CVE-2025-67269gpsd: gpsd: Denial of Service due to malformed NAVCOM packet parsing
  42. CVE-2025-67268gpsd: gpsd: Arbitrary code execution via heap-based out-of-bounds write in NMEA2000 packet handling
  43. CVE-2025-67030org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method
  44. CVE-2025-66866binutils: BinUtils: Denial of Service via crafted PE file
  45. CVE-2025-66865binutils: stack overflow in d_print_comp_inner() in cp-demangle.c
  46. CVE-2025-66864binutils: NULL pointer dereference in d_print_comp_inner() in cp-demangle.c
  47. CVE-2025-66863binutils: BinUtils: Denial of Service via crafted PE file
  48. CVE-2025-66862binutils: heap-based buffer over-read in gnu_special() in cplus-dem.c
  49. CVE-2025-66861binutils: out-of-bounds read in d_unqualified_name() in cp-demangle.c
  50. CVE-2025-66628ImageMagick: ImageMagick Integer Overflow leading to out of bounds read (32-bit only)
CVE 2025 document archive — Page 11 | PulseLinux