CVE 2025 document archive · 24
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,053 documents · Identifier year 2025 · 24 / 82
- CVE-2025-40214kernel: af_unix: Initialise scc_index in unix_add_edge()
- CVE-2025-40213kernel: Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete
- CVE-2025-40212kernel: nfsd: fix refcount leak in nfsd_set_fh_dentry()
- CVE-2025-40211kernel: ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- CVE-2025-40210kernel: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND"
- CVE-2025-40209kernel: btrfs: fix memory leak of qgroup_list in btrfs_add_qgroup_relation
- CVE-2025-40208kernel: media: iris: fix module removal if firmware download failed
- CVE-2025-40207kernel: media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
- CVE-2025-40206kernel: netfilter: nft_objref: validate objref and objrefmap expressions
- CVE-2025-40205kernel: btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
- CVE-2025-40204kernel: sctp: Fix MAC comparison to be constant-time
- CVE-2025-40203kernel: listmount: don't call path_put() under namespace semaphore
- CVE-2025-40202kernel: ipmi: Rework user message limit handling
- CVE-2025-40201kernel: kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
- CVE-2025-40200kernel: Squashfs: reject negative file sizes in squashfs_read_inode()
- CVE-2025-40199kernel: page_pool: Fix PP_MAGIC_MASK to avoid crashing on some 32-bit arches
- CVE-2025-40198kernel: ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()
- CVE-2025-40197kernel: media: mc: Clear minor number before put device
- CVE-2025-40196kernel: fs: quota: create dedicated workqueue for quota_release_work
- CVE-2025-40195kernel: Linux kernel: NULL pointer dereference in mount leads to local denial of service
- CVE-2025-40194kernel: cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- CVE-2025-40193kernel: xtensa: simdisk: add input size check in proc_write_simdisk
- CVE-2025-40192kernel: Revert "ipmi: fix msg stack when IPMI is disconnected"
- CVE-2025-40191kernel: drm/amdkfd: Fix kfd process ref leaking when userptr unmapping
- CVE-2025-40190kernel: ext4: guard against EA inode refcount underflow in xattr update
- CVE-2025-40189kernel: net: usb: lan78xx: Fix lost EEPROM read timeout error(-ETIMEDOUT) in lan78xx_read_raw_eeprom
- CVE-2025-40188kernel: pwm: berlin: Fix wrong register in suspend/resume
- CVE-2025-40187kernel: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
- CVE-2025-40186kernel: Linux kernel: Privilege escalation or Denial of Service via TCP Fast Open vulnerability
- CVE-2025-40185kernel: ice: ice_adapter: release xa entry on adapter allocation failure
- CVE-2025-40184kernel: KVM: arm64: Fix debug checking for np-guests using huge mappings
- CVE-2025-40183kernel: bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- CVE-2025-40182kernel: crypto: skcipher - Fix reqsize handling
- CVE-2025-40181kernel: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP
- CVE-2025-40180kernel: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop
- CVE-2025-40179kernel: ext4: verify orphan file size is not too big
- CVE-2025-40178kernel: pid: Add a judgment for ns null in pid_nr_ns
- CVE-2025-40177kernel: accel/qaic: Fix bootlog initialization ordering
- CVE-2025-40176kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails
- CVE-2025-40175kernel: idpf: cleanup remaining SKBs in PTP flows
- CVE-2025-40174kernel: x86/mm: Fix SMP ordering in switch_mm_irqs_off()
- CVE-2025-40173kernel: net/ip6_tunnel: Prevent perpetual tunnel growth
- CVE-2025-40172kernel: accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
- CVE-2025-40171kernel: Kernel: Denial of Service in nvmet-fc due to resource leak
- CVE-2025-40170kernel: net: use dst_dev_rcu() in sk_setup_caps()
- CVE-2025-40169kernel: bpf: Reject negative offsets for ALU ops
- CVE-2025-40168kernel: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match()
- CVE-2025-40167kernel: ext4: detect invalid INLINE_DATA + EXTENTS flag combination
- CVE-2025-40166kernel: drm/xe/guc: Check GuC running state before deregistering exec queue
- CVE-2025-40165kernel: media: nxp: imx8-isi: m2m: Fix streaming cleanup on release