CVE 2025 document archive · 36
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,053 documents · Identifier year 2025 · 36 / 82
- CVE-2025-38674kernel: Revert "drm/prime: Use dma_buf from GEM object instance"
- CVE-2025-38673kernel: Revert "drm/gem-framebuffer: Use dma_buf from GEM object instance"
- CVE-2025-38672kernel: Revert "drm/gem-dma: Use dma_buf from GEM object instance"
- CVE-2025-38671kernel: Linux kernel (i2c: qup): Denial of Service via improper I2C client timeout handling
- CVE-2025-38670kernel: arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
- CVE-2025-38669kernel: Revert "drm/gem-shmem: Use dma_buf from GEM object instance"
- CVE-2025-38668kernel: regulator: core: fix NULL dereference on unbind due to stale coupling data
- CVE-2025-38667kernel: iio: fix potential out-of-bound write
- CVE-2025-38666kernel: net: appletalk: Fix use-after-free in AARP proxy probe
- CVE-2025-38665kernel: can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode
- CVE-2025-38664kernel: ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
- CVE-2025-38663kernel: nilfs2: reject invalid file types when reading inodes
- CVE-2025-38662kernel: ASoC: mediatek: mt8365-dai-i2s: pass correct size to mt8365_dai_set_priv
- CVE-2025-38661kernel: platform/x86: alienware-wmi-wmax: Fix `dmi_system_id` array
- CVE-2025-38660kernel: [ceph] parse_longname(): strrchr() expects NUL-terminated string
- CVE-2025-38659kernel: gfs2: No more self recovery
- CVE-2025-38658kernel: nvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails
- CVE-2025-38657kernel: wifi: rtw89: mcc: prevent shift wrapping in rtw89_core_mlsr_switch()
- CVE-2025-38656kernel: wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()
- CVE-2025-38655kernel: pinctrl: canaan: k230: add NULL check in DT parse
- CVE-2025-38654kernel: pinctrl: canaan: k230: Fix order of DT parse and pinctrl register
- CVE-2025-38653kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al
- CVE-2025-38652kernel: f2fs: fix to avoid out-of-boundary access in devs.path
- CVE-2025-38651kernel: landlock: Fix warning from KUnit tests
- CVE-2025-38650kernel: hfsplus: remove mutex_lock check in hfsplus_free_extents
- CVE-2025-38649kernel: arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight
- CVE-2025-38648kernel: spi: stm32: Check for cfg availability in stm32_spi_probe
- CVE-2025-38647kernel: wifi: rtw89: sar: drop lockdep assertion in rtw89_set_sar_from_acpi
- CVE-2025-38646kernel: wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band
- CVE-2025-38645kernel: net/mlx5: Check device memory pointer before usage
- CVE-2025-38644kernel: wifi: mac80211: reject TDLS operations when station is not associated
- CVE-2025-38643kernel: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()
- CVE-2025-38642kernel: wifi: mac80211: fix WARN_ON for monitor mode on some devices
- CVE-2025-38641kernel: Bluetooth: btusb: Fix potential NULL dereference on kmalloc failure
- CVE-2025-38640kernel: Linux kernel: Denial of Service in BPF netfilter due to improper migration handling
- CVE-2025-38639kernel: netfilter: xt_nfacct: don't assume acct name is null-terminated
- CVE-2025-38638kernel: ipv6: add a retry logic in net6_rt_notify()
- CVE-2025-38637kernel: net_sched: skbprio: Remove overly strict queue assertions
- CVE-2025-38636kernel: rv: Use strings in da monitors tracepoints
- CVE-2025-38635kernel: clk: davinci: Add NULL check in davinci_lpsc_clk_register()
- CVE-2025-38634kernel: power: supply: cpcap-charger: Fix null check for power_supply_get_by_name
- CVE-2025-38633kernel: clk: spacemit: mark K1 pll1_d8 as critical
- CVE-2025-38632kernel: pinmux: fix race causing mux_owner NULL with active mux_usecount
- CVE-2025-38631kernel: clk: imx95-blk-ctl: Fix synchronous abort
- CVE-2025-38630kernel: fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
- CVE-2025-38629kernel: ALSA: usb: scarlett2: Fix missing NULL check
- CVE-2025-38628kernel: vdpa/mlx5: Fix release of uninitialized resources on error path
- CVE-2025-38627kernel: f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic
- CVE-2025-38626kernel: f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
- CVE-2025-38625kernel: vfio/pds: Fix missing detach_ioas op