CVE 2025 document archive · 26
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,053 documents · Identifier year 2025 · 26 / 82
- CVE-2025-40113kernel: remoteproc: qcom: pas: Shutdown lite ADSP DTB on X1E
- CVE-2025-40111kernel: drm/vmwgfx: Fix Use-after-free in validation
- CVE-2025-40110kernel: drm/vmwgfx: Fix a null-ptr access in the cursor snooper
- CVE-2025-40109kernel: Linux kernel: Denial of Service in crypto random number generator due to missing set_ent
- CVE-2025-40108kernel: serial: qcom-geni: Fix blocked task
- CVE-2025-40107kernel: can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled
- CVE-2025-40106kernel: comedi: fix divide-by-zero in comedi_buf_munge()
- CVE-2025-40105kernel: vfs: Don't leak disconnected dentries on umount
- CVE-2025-40104kernel: ixgbevf: fix mailbox API compatibility by negotiating supported features
- CVE-2025-40103kernel: smb: client: Fix refcount leak for cifs_sb_tlink
- CVE-2025-40102kernel: Linux kernel KVM: Denial of Service due to uninitialized vCPU event handling
- CVE-2025-40101kernel: btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST
- CVE-2025-40100kernel: btrfs: do not assert we found block group item when creating free space tree
- CVE-2025-40099kernel: cifs: parse_dfs_referrals: prevent oob on malformed input
- CVE-2025-40098kernel: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state()
- CVE-2025-40097kernel: ALSA: hda: Fix missing pointer check in hda_component_manager_init function
- CVE-2025-40096kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
- CVE-2025-40095kernel: usb: gadget: f_rndis: Refactor bind path to use __free()
- CVE-2025-40094kernel: Linux kernel: Denial of Service via NULL pointer dereference in USB gadget f_acm
- CVE-2025-40093kernel: usb: gadget: f_ecm: Refactor bind path to use __free()
- CVE-2025-40092kernel: usb: gadget: f_ncm: Refactor bind path to use __free()
- CVE-2025-40091kernel: ixgbe: fix too early devlink_free() in ixgbe_remove()
- CVE-2025-40090kernel: ksmbd: fix recursive locking in RPC handle list access
- CVE-2025-40089kernel: cxl/features: Add check for no entries in cxl_feature_info
- CVE-2025-40088kernel: hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
- CVE-2025-40087kernel: NFSD: Define a proc_layoutcommit for the FlexFiles layout type
- CVE-2025-40086kernel: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds
- CVE-2025-40085kernel: ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card
- CVE-2025-40084kernel: ksmbd: transport_ipc: validate payload size before reading handle
- CVE-2025-40083kernel: net/sched: sch_qfq: Fix null-deref in agg_dequeue
- CVE-2025-40082kernel: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
- CVE-2025-40081kernel: perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- CVE-2025-40080kernel: nbd: restrict sockets to TCP and UDP
- CVE-2025-40079kernel: riscv, bpf: Sign extend struct ops return values properly
- CVE-2025-40078kernel: Linux kernel: Denial of Service via improper access validation in bpf_sock_addr
- CVE-2025-40077kernel: f2fs: fix to avoid overflow while left shift operation
- CVE-2025-40076kernel: PCI: rcar-host: Pass proper IRQ domain to generic_handle_domain_irq()
- CVE-2025-40075kernel: tcp_metrics: use dst_dev_net_rcu()
- CVE-2025-40074kernel: ipv4: start using dst_dev_rcu()
- CVE-2025-40073kernel: drm/msm: Do not validate SSPP when it is not ready
- CVE-2025-40072kernel: fanotify: Validate the return value of mnt_ns_from_dentry() before dereferencing
- CVE-2025-40071kernel: tty: n_gsm: Don't block input queue by waiting MSC
- CVE-2025-40070kernel: pps: fix warning in pps_register_cdev when register device fail
- CVE-2025-40069kernel: drm/msm: Fix obj leak in VM_BIND error path
- CVE-2025-40068kernel: fs: ntfs3: Fix integer overflow in run_unpack()
- CVE-2025-40067kernel: fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist
- CVE-2025-40066kernel: wifi: mt76: mt7996: Check phy before init msta_link in mt7996_mac_sta_add_links()
- CVE-2025-40065kernel: RISC-V: KVM: Write hgatp register with valid mode bits
- CVE-2025-40064kernel: smc: Fix use-after-free in __pnet_find_base_ndev()
- CVE-2025-40063kernel: crypto: comp - Use same definition of context alloc and free ops