CVE 2025 document archive · 45
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,053 documents · Identifier year 2025 · 45 / 82
- CVE-2025-38220kernel: ext4: only dirty folios when data journaling regular files
- CVE-2025-38219kernel: f2fs: prevent kernel warning due to negative i_nlink from corrupted image
- CVE-2025-38218kernel: f2fs: fix to do sanity check on sit_bitmap_size
- CVE-2025-38217kernel: hwmon: (ftsteutates) Fix TOCTOU race in fts_read()
- CVE-2025-38216kernel: iommu/vt-d: Restore context entry setup order for aliased devices
- CVE-2025-38215kernel: fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var
- CVE-2025-38214kernel: Linux kernel: Denial of Service via null-pointer dereference in fb_videomode_to_var
- CVE-2025-38212kernel: ipc: fix to protect IPCS lookups using RCU
- CVE-2025-38211kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
- CVE-2025-38210kernel: configfs-tsm-report: Fix NULL dereference of tsm_ops
- CVE-2025-38209kernel: nvme-tcp: remove tag set when second admin queue config fails
- CVE-2025-38208kernel: smb: client: add NULL check in automount_fullpath
- CVE-2025-38207kernel: mm: fix uprobe pte be overwritten when expanding vma
- CVE-2025-38206kernel: Kernel: Double free vulnerability in exFAT filesystem can lead to denial of service
- CVE-2025-38205kernel: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1
- CVE-2025-38204kernel: jfs: fix array-index-out-of-bounds read in add_missing_indices
- CVE-2025-38203kernel: jfs: Fix null-ptr-deref in jfs_ioc_trim
- CVE-2025-38202kernel: bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
- CVE-2025-38201kernel: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- CVE-2025-38200kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw
- CVE-2025-38199kernel: wifi: ath12k: Fix memory leak due to multiple rx_stats allocation
- CVE-2025-38198kernel: fbcon: Make sure modelist not set on unregistered console
- CVE-2025-38197kernel: platform/x86: dell_rbu: Fix list usage
- CVE-2025-38196kernel: io_uring/rsrc: validate buffer count with offset for cloning
- CVE-2025-38195kernel: LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
- CVE-2025-38194kernel: jffs2: check that raw node were preallocated before writing summary
- CVE-2025-38193kernel: net_sched: sch_sfq: reject invalid perturb period
- CVE-2025-38192kernel: net: clear the dst when changing skb protocol
- CVE-2025-38191kernel: ksmbd: fix null pointer dereference in destroy_previous_session
- CVE-2025-38190kernel: atm: Revert atm_account_tx() if copy_from_iter_full() fails
- CVE-2025-38189kernel: drm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()`
- CVE-2025-38188kernel: drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE
- CVE-2025-38187kernel: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push()
- CVE-2025-38186kernel: bnxt_en: Fix double invocation of bnxt_ulp_stop()/bnxt_ulp_start()
- CVE-2025-38185kernel: atm: atmtcp: Free invalid length skb in atmtcp_c_send()
- CVE-2025-38184kernel: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- CVE-2025-38183kernel: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get()
- CVE-2025-38182kernel: ublk: santizize the arguments from userspace when adding a device
- CVE-2025-38181kernel: Linux kernel: Denial of service due to null pointer dereference in CALIPSO SYN cookie handling
- CVE-2025-38180kernel: Linux kernel: Use-After-Free vulnerability in ATM subsystem
- CVE-2025-38179kernel: smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma()
- CVE-2025-38177kernel: sch_hfsc: make hfsc_qlen_notify() idempotent
- CVE-2025-38176kernel: binder: fix use-after-free in binderfs_evict_inode()
- CVE-2025-38175kernel: binder: fix yet another UAF in binder_devices
- CVE-2025-38174kernel: thunderbolt: Do not double dequeue a configuration request
- CVE-2025-38173kernel: crypto: marvell/cesa - Handle zero-length skcipher requests
- CVE-2025-38172kernel: Linux kernel erofs: Use-After-Free due to device type mismatch
- CVE-2025-38171kernel: power: supply: max77705: Fix workqueue error handling in probe
- CVE-2025-38170kernel: arm64/fpsimd: Discard stale CPU state when handling SME traps
- CVE-2025-38169kernel: Linux kernel: Data corruption due to FPSIMD state clobbering during context switch