CVE 2025 document archive · 37
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,053 documents · Identifier year 2025 · 37 / 82
- CVE-2025-38624kernel: PCI: pnv_php: Clean up allocated IRQs on unplug
- CVE-2025-38623kernel: PCI: pnv_php: Fix surprise plug detection and recovery
- CVE-2025-38622kernel: net: drop UFO packets in udp_rcv_segment()
- CVE-2025-38621kernel: md: make rdev_addable usable for rcu mode
- CVE-2025-38620kernel: zloop: fix KASAN use-after-free of tag set
- CVE-2025-38619kernel: media: ti: j721e-csi2rx: fix list_del corruption
- CVE-2025-38618kernel: vsock: Do not allow binding to VMADDR_PORT_ANY
- CVE-2025-38617kernel: net/packet: fix a race in packet_set_ring() and packet_notifier()
- CVE-2025-38616kernel: Linux kernel: Denial of Service in kTLS due to race condition in receive path
- CVE-2025-38615kernel: fs/ntfs3: cancle set bad inode after removing name fails
- CVE-2025-38614kernel: eventpoll: Fix semi-unbounded recursion
- CVE-2025-38613kernel: staging: gpib: fix unset padding field copy back to userspace
- CVE-2025-38612kernel: staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
- CVE-2025-38610kernel: powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()
- CVE-2025-38609kernel: PM / devfreq: Check governor before using governor->name
- CVE-2025-38608kernel: Linux kernel kTLS: Denial of Service from uninitialized data transmission
- CVE-2025-38607kernel: bpf: handle jset (if a & b ...) as a jump in CFG computation
- CVE-2025-38606kernel: wifi: ath12k: Avoid accessing uninitialized arvif->ar during beacon miss
- CVE-2025-38605kernel: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type()
- CVE-2025-38604kernel: wifi: rtl818x: Kill URBs before clearing tx status queue
- CVE-2025-38602kernel: iwlwifi: Add missing check for alloc_ordered_workqueue
- CVE-2025-38601kernel: wifi: ath11k: clear initialized flag for deinit-ed srng lists
- CVE-2025-38600kernel: wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan()
- CVE-2025-38599kernel: wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx()
- CVE-2025-38598kernel: drm/amdgpu: fix use-after-free in amdgpu_userq_suspend+0x51a/0x5a0
- CVE-2025-38597kernel: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port
- CVE-2025-38596kernel: drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code
- CVE-2025-38595kernel: xen: fix UAF in dmabuf_exp_from_pages()
- CVE-2025-38594kernel: iommu/vt-d: Fix UAF on sva unbind with pending IOPFs
- CVE-2025-38593kernel: Linux kernel: Denial of Service in Bluetooth subsystem due to double free vulnerability
- CVE-2025-38592kernel: Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv
- CVE-2025-38591kernel: Linux kernel: Denial of Service in BPF due to improper context access
- CVE-2025-38590kernel: net/mlx5e: Remove skb secpath if xfrm state is not found
- CVE-2025-38589kernel: neighbour: Fix null-ptr-deref in neigh_flush_dev()
- CVE-2025-38588kernel: ipv6: prevent infinite loop in rt6_nlmsg_size()
- CVE-2025-38587kernel: ipv6: fix possible infinite loop in fib6_info_uses_dev()
- CVE-2025-38586kernel: Linux kernel: Denial of Service in ARM64 BPF JIT due to improper frame pointer initialization
- CVE-2025-38585kernel: staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int()
- CVE-2025-38584kernel: padata: Fix pd UAF once and for all
- CVE-2025-38583kernel: clk: xilinx: vcu: unregister pll_post only if registered correctly
- CVE-2025-38582kernel: RDMA/hns: Fix double destruction of rsv_qp
- CVE-2025-38581kernel: crypto: ccp - Fix crash when rebind ccp device for ccp.ko
- CVE-2025-38580kernel: ext4: fix inode use after free in ext4_end_io_rsv_work()
- CVE-2025-38579kernel: f2fs: fix KMSAN uninit-value in extent_info usage
- CVE-2025-38578kernel: f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
- CVE-2025-38577kernel: f2fs: fix to avoid panic in f2fs_evict_inode
- CVE-2025-38576kernel: powerpc/eeh: Make EEH driver device hotplug safe
- CVE-2025-38575kernel: ksmbd: use aead_request_free to match aead_request_alloc
- CVE-2025-38574kernel: pptp: ensure minimal skb length in pptp_xmit()
- CVE-2025-38573kernel: spi: cs42l43: Property entry should be a null-terminated array