CVE 2025 document archive · 27
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,053 documents · Identifier year 2025 · 27 / 82
- CVE-2025-40062kernel: crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs
- CVE-2025-40061kernel: RDMA/rxe: Fix race in do_task() when draining
- CVE-2025-40060kernel: coresight: trbe: Return NULL pointer for allocation failures
- CVE-2025-40059kernel: coresight: Fix incorrect handling for return value of devm_kzalloc
- CVE-2025-40058kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk
- CVE-2025-40057kernel: ptp: Add a upper bound on max_vclocks
- CVE-2025-40056kernel: Linux kernel: Data corruption and denial of service in vhost/vringh due to improper copy_to_iter return value check
- CVE-2025-40055kernel: ocfs2: fix double free in user_cluster_connect()
- CVE-2025-40054kernel: f2fs: fix UAF issue in f2fs_merge_page_bio()
- CVE-2025-40053kernel: net: dlink: handle copy_thresh allocation failure
- CVE-2025-40052kernel: smb: client: fix crypto buffers in non-linear memory
- CVE-2025-40051kernel: vhost: vringh: Modify the return value check
- CVE-2025-40050kernel: bpf: Skip scalar adjustment for BPF_NEG if dst is a pointer
- CVE-2025-40049kernel: Squashfs: fix uninit-value in squashfs_get_parent
- CVE-2025-40048kernel: uio_hv_generic: Let userspace take care of interrupt mask
- CVE-2025-40047kernel: io_uring/waitid: always prune wait queue entry in io_waitid_wait()
- CVE-2025-40046kernel: io_uring/zcrx: fix overshooting recv limit
- CVE-2025-40045kernel: ASoC: codecs: wcd937x: set the comp soundwire port correctly
- CVE-2025-40044kernel: fs: udf: fix OOB read in lengthAllocDescs handling
- CVE-2025-40043kernel: net: nfc: nci: Add parameter validation for packet data
- CVE-2025-40042kernel: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- CVE-2025-40041kernel: LoongArch: BPF: Sign-extend struct ops return values properly
- CVE-2025-40040kernel: mm/ksm: fix flag-dropping behavior in ksm_madvise
- CVE-2025-40039kernel: ksmbd: Fix race condition in RPC handle list access
- CVE-2025-40038kernel: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid
- CVE-2025-40037kernel: fbdev: simplefb: Fix use after free in simplefb_detach_genpds()
- CVE-2025-40036kernel: misc: fastrpc: fix possible map leak in fastrpc_put_args
- CVE-2025-40035kernel: Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
- CVE-2025-40034kernel: PCI/AER: Avoid NULL pointer dereference in aer_ratelimit()
- CVE-2025-40033kernel: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable()
- CVE-2025-40032kernel: PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release
- CVE-2025-40031kernel: tee: fix register_shm_helper()
- CVE-2025-40030kernel: pinctrl: check the return value of pinmux_ops::get_function_name()
- CVE-2025-40029kernel: bus: fsl-mc: Check return value of platform_get_resource()
- CVE-2025-40028kernel: binder: fix double-free in dbitmap
- CVE-2025-40027kernel: Kernel: Denial of Service in 9p filesystem client via race condition
- CVE-2025-40026kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
- CVE-2025-40025kernel: f2fs: fix to do sanity check on node footer for non inode dnode
- CVE-2025-40024kernel: vhost: Take a reference on the task in struct vhost_task
- CVE-2025-40023kernel: drm/xe/vf: Don't expose sysfs attributes not applicable for VFs
- CVE-2025-40022kernel: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx
- CVE-2025-40021kernel: tracing: dynevent: Add a missing lockdown check on dynevent
- CVE-2025-40020kernel: can: peak_usb: fix shift-out-of-bounds issue
- CVE-2025-40019kernel: crypto: essiv - Check ssize for decryption and in-place encryption
- CVE-2025-40018kernel: ipvs: Defer ip_vs_ftp unregister during netns cleanup
- CVE-2025-40017kernel: media: iris: Fix memory leak by freeing untracked persist buffer
- CVE-2025-40016kernel: Linux kernel: uvcvideo Denial of Service from invalid UVC entity IDs
- CVE-2025-40015kernel: media: stm32-csi: Fix dereference before NULL check
- CVE-2025-40014kernel: objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()
- CVE-2025-40013kernel: ASoC: qcom: audioreach: fix potential null pointer dereference