CVE 2025 document archive · 28
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,053 documents · Identifier year 2025 · 28 / 82
- CVE-2025-40012kernel: net/smc: fix warning in smc_rx_splice() when calling get_page()
- CVE-2025-40011kernel: drm/gma500: Fix null dereference in hdmi teardown
- CVE-2025-40010kernel: afs: Fix potential null pointer dereference in afs_put_server
- CVE-2025-40009kernel: fs/proc/task_mmu: check p->vec_buf for NULL
- CVE-2025-40008kernel: kmsan: fix out-of-bounds access to shadow memory
- CVE-2025-40007kernel: netfs: fix reference leak
- CVE-2025-40006kernel: mm/hugetlb: fix folio is still mapped when deleted
- CVE-2025-40005kernel: spi: cadence-quadspi: Implement refcount to handle unbind during busy
- CVE-2025-40004kernel: net/9p: Fix buffer overflow in USB transport layer
- CVE-2025-40003kernel: net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work
- CVE-2025-40002kernel: thunderbolt: Fix use-after-free in tb_dp_dprx_work
- CVE-2025-40001kernel: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue
- CVE-2025-40000kernel: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait()
- CVE-2025-39999kernel: blk-mq: fix blk_mq_tags double free while nr_requests grown
- CVE-2025-39998kernel: Linux kernel: Buffer overflow in target_lu_gp_members_show can lead to arbitrary code execution
- CVE-2025-39997kernel: Linux kernel: Use-After-Free in ALSA USB audio due to race condition
- CVE-2025-39996kernel: Linux kernel (media: b2c2): Use-after-free vulnerability in flexcop_pci_remove leading to denial of service.
- CVE-2025-39995kernel: media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe
- CVE-2025-39994kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition
- CVE-2025-39993kernel: media: rc: fix races with imon_disconnect()
- CVE-2025-39992kernel: mm: swap: check for stable address space before operating on the VMA
- CVE-2025-39991kernel: wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()
- CVE-2025-39990kernel: bpf: Check the helper function is valid in get_helper_proto
- CVE-2025-39989kernel: x86/mce: use is_copy_from_user() to determine copy-from-user context
- CVE-2025-39988kernel: can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
- CVE-2025-39987kernel: can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
- CVE-2025-39986kernel: can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
- CVE-2025-39985kernel: can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
- CVE-2025-39984kernel: net: tun: Update napi->skb after XDP process
- CVE-2025-39983kernel: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue
- CVE-2025-39982kernel: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
- CVE-2025-39981kernel: Bluetooth: MGMT: Fix possible UAFs
- CVE-2025-39980kernel: nexthop: Forbid FDB status change while nexthop is in a group
- CVE-2025-39979kernel: net/mlx5: fs, fix UAF in flow counter release
- CVE-2025-39978kernel: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()
- CVE-2025-39977kernel: futex: Prevent use-after-free during requeue-PI
- CVE-2025-39976kernel: futex: Use correct exit on failure from futex_hash_allocate_default()
- CVE-2025-39975kernel: smb: client: fix wrong index reference in smb2_compound_op()
- CVE-2025-39974kernel: tracing/osnoise: Fix slab-out-of-bounds in _parse_integer_limit()
- CVE-2025-39973kernel: i40e: add validation for ring_len param
- CVE-2025-39972kernel: i40e: fix idx validation in i40e_validate_queue_map
- CVE-2025-39971kernel: i40e: fix idx validation in config queues msg
- CVE-2025-39970kernel: i40e: fix input validation logic for action_meta
- CVE-2025-39969kernel: i40e: fix validation of VF state in get resources
- CVE-2025-39968kernel: Linux kernel i40e: Resource exhaustion via unbounded VF filter requests
- CVE-2025-39967kernel: fbcon: fix integer overflow in fbcon_do_set_font
- CVE-2025-39966kernel: iommufd: Fix race during abort for file descriptors
- CVE-2025-39965kernel: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
- CVE-2025-39964kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
- CVE-2025-39963kernel: io_uring: fix incorrect io_kiocb reference in io_link_skb