PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2025 document archive · 22

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 22 / 82

  1. CVE-2025-40316kernel: drm/mediatek: Fix device use-after-free on unbind
  2. CVE-2025-40315kernel: usb: gadget: f_fs: Fix epfile null pointer access after ep enable
  3. CVE-2025-40314kernel: usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget
  4. CVE-2025-40313kernel: ntfs3: pretend $Extend records as regular files
  5. CVE-2025-40312kernel: Linux kernel (JFS): Data corruption, information disclosure, and system unavailability via invalid inode mode.
  6. CVE-2025-40311kernel: accel/habanalabs: support mapping cb with vmalloc-backed coherent memory
  7. CVE-2025-40310kernel: amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw
  8. CVE-2025-40309kernel: Bluetooth: SCO: Fix UAF on sco_conn_free
  9. CVE-2025-40308kernel: Bluetooth: bcsp: receive data only if registered
  10. CVE-2025-40307kernel: exfat: validate cluster allocation bits of the allocation bitmap
  11. CVE-2025-40306kernel: orangefs: fix xattr related buffer overflow..
  12. CVE-2025-40305kernel: 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
  13. CVE-2025-40304kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service.
  14. CVE-2025-40303kernel: btrfs: ensure no dirty metadata is written back for an fs with errors
  15. CVE-2025-40302kernel: media: videobuf2: forbid remove_bufs when legacy fileio is active
  16. CVE-2025-40301kernel: Linux kernel: Information disclosure and denial of service in Bluetooth HCI event handling
  17. CVE-2025-40300kernel: x86/vmscape: Add conditional IBPB mitigation
  18. CVE-2025-40299kernel: gve: Implement gettimex64 with -EOPNOTSUPP
  19. CVE-2025-40298kernel: gve: Implement settime64 with -EOPNOTSUPP
  20. CVE-2025-40297kernel: net: bridge: fix use-after-free due to MST port state bypass
  21. CVE-2025-40296kernel: platform/x86: int3472: Fix double free of GPIO device during unregister
  22. CVE-2025-40295kernel: fscrypt: fix left shift underflow when inode->i_blkbits > PAGE_SHIFT
  23. CVE-2025-40294kernel: Linux kernel: Out-of-bounds write in Bluetooth MGMT can lead to information disclosure and denial of service
  24. CVE-2025-40293kernel: iommufd: Don't overflow during division for dirty tracking
  25. CVE-2025-40292kernel: virtio-net: fix received length check in big packets
  26. CVE-2025-40291kernel: io_uring: fix regbuf vector size truncation
  27. CVE-2025-40290kernel: xsk: avoid data corruption on cq descriptor number
  28. CVE-2025-40289kernel: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM
  29. CVE-2025-40288kernel: drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices
  30. CVE-2025-40287kernel: exfat: fix improper check of dentry.stream.valid_size
  31. CVE-2025-40286kernel: smb/server: fix possible memory leak in smb2_read()
  32. CVE-2025-40285kernel: smb/server: fix possible refcount leak in smb2_sess_setup()
  33. CVE-2025-40284kernel: Bluetooth: MGMT: cancel mesh send timer when hdev removed
  34. CVE-2025-40283kernel: Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
  35. CVE-2025-40282kernel: Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
  36. CVE-2025-40281kernel: sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
  37. CVE-2025-40280kernel: tipc: Fix use-after-free in tipc_mon_reinit_self()
  38. CVE-2025-40279kernel: Linux kernel: Information disclosure via uninitialized data in tcf_connmark_dump()
  39. CVE-2025-40278kernel: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
  40. CVE-2025-40277kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
  41. CVE-2025-40276kernel: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached
  42. CVE-2025-40275kernel: ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd
  43. CVE-2025-40274kernel: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying
  44. CVE-2025-40273kernel: NFSD: free copynotify stateid in nfs4_free_ol_stateid()
  45. CVE-2025-40272kernel: mm/secretmem: fix use-after-free race in fault handler
  46. CVE-2025-40271kernel: Linux kernel: Use-after-free in proc_readdir_de() can lead to privilege escalation or denial of service.
  47. CVE-2025-40270kernel: mm, swap: fix potential UAF issue for VMA readahead
  48. CVE-2025-40269kernel: Linux kernel ALSA USB audio driver: Buffer overflow leading to information disclosure and denial of service
  49. CVE-2025-40268kernel: cifs: client: fix memory leak in smb3_fs_context_parse_param
  50. CVE-2025-40267kernel: io_uring/rw: ensure allocated iovec gets cleared for early failure
CVE 2025 document archive — Page 22 | PulseLinux