CVE 2025 document archive · 4
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,053 documents · Identifier year 2025 · 4 / 82
- CVE-2025-71103kernel: drm/msm: adreno: fix deferencing ifpc_reglist when not declared
- CVE-2025-71102kernel: scs: fix a wrong parameter in __scs_magic
- CVE-2025-71101kernel: Linux kernel: Information disclosure and denial of service in hp-bioscfg driver via out-of-bounds array access
- CVE-2025-71100kernel: wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc()
- CVE-2025-71099kernel: drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl()
- CVE-2025-71098kernel: ip6_gre: make ip6gre_header() robust
- CVE-2025-71097kernel: Linux kernel (IPv4): Denial of Service due to reference count leak in nexthop objects
- CVE-2025-71096kernel: RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly
- CVE-2025-71095kernel: Linux kernel: `stmmac` driver denial of service via incorrect XDP memory handling
- CVE-2025-71094kernel: net: usb: asix: validate PHY address before use
- CVE-2025-71093kernel: e1000: fix OOB in e1000_tbi_should_accept()
- CVE-2025-71092kernel: Linux kernel (RDMA/bnxt_re): Out-of-bounds write in error statistics handling
- CVE-2025-71091kernel: team: fix check for port enabled in team_queue_override_port_prio_changed()
- CVE-2025-71090kernel: nfsd: fix nfsd_file reference leak in nfsd4_add_rdaccess_to_wrdeleg()
- CVE-2025-71089kernel: iommu: disable SVA when CONFIG_X86 is set
- CVE-2025-71088kernel: Linux kernel: Denial of Service via MPTCP race condition
- CVE-2025-71087kernel: iavf: fix off-by-one issues in iavf_config_rss_reg()
- CVE-2025-71086kernel: net: rose: fix invalid array index in rose_kill_by_device()
- CVE-2025-71085kernel: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
- CVE-2025-71084kernel: RDMA/cm: Fix leaking the multicast GID table reference
- CVE-2025-71083kernel: Kernel: Denial of Service via NULL pointer dereference in drm/ttm
- CVE-2025-71082kernel: Bluetooth: btusb: revert use of devm_kzalloc in btusb
- CVE-2025-71081kernel: ASoC: stm32: sai: fix OF node leak on probe
- CVE-2025-71080kernel: ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT
- CVE-2025-71079kernel: net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write
- CVE-2025-71078kernel: powerpc/64s/slb: Fix SLB multihit issue during SLB preload
- CVE-2025-71077kernel: tpm: Cap the number of PCR banks
- CVE-2025-71076kernel: drm/xe/oa: Limit num_syncs to prevent oversized allocations
- CVE-2025-71075kernel: scsi: aic94xx: fix use-after-free in device removal path
- CVE-2025-71074kernel: Linux kernel functionfs: Use-After-Free vulnerability due to open/removal races
- CVE-2025-71073kernel: Input: lkkbd - disable pending work before freeing device
- CVE-2025-71072kernel: shmem: fix recovery on rename failures
- CVE-2025-71071kernel: iommu/mediatek: fix use-after-free on probe deferral
- CVE-2025-71070kernel: ublk: clean up user copy references on ublk server exit
- CVE-2025-71069kernel: f2fs: invalidate dentry cache on failed whiteout creation
- CVE-2025-71068kernel: svcrdma: bound check rq_pages index in inline path
- CVE-2025-71067kernel: ntfs: set dummy blocksize to read boot_block when mounting
- CVE-2025-71066kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change
- CVE-2025-71065kernel: f2fs: fix to avoid potential deadlock
- CVE-2025-71064kernel: net: hns3: using the num_tqps in the vf driver to apply for resources
- CVE-2025-70873sqlite: SQLite: Information Disclosure via Crafted ZIP File
- CVE-2025-70103libjxl: libjxl: Arbitrary code execution via crafted PBM images
- CVE-2025-70072Assimp: Assimp: Denial of Service via FBXConverter components
- CVE-2025-70071Assimp: Assimp: Denial of Service via FBXParser.cpp ParseVectorDataArray() function
- CVE-2025-70070Assimp: Assimp: Denial of Service via FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry()
- CVE-2025-70069Assimp: Assimp: Denial of Service via FBXConverter.cpp and ConvertMeshMultiMaterial() method
- CVE-2025-70067Assimp: Assimp: Buffer overflow in FBX Importer allows arbitrary code execution via crafted file.
- CVE-2025-69873ajv: ReDoS via $data reference
- CVE-2025-69725go-chi/chi: Go-chi/chi: Open Redirect vulnerability allows redirection to malicious websites
- CVE-2025-69720ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.