CVE 2025 document archive · 47
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,053 documents · Identifier year 2025 · 47 / 82
- CVE-2025-38118kernel: Linux kernel: Bluetooth MGMT use-after-free vulnerability allows privilege escalation
- CVE-2025-38117kernel: Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- CVE-2025-38116kernel: wifi: ath12k: fix uaf in ath12k_core_init()
- CVE-2025-38115kernel: Linux kernel: Local Denial of Service in network scheduler
- CVE-2025-38114kernel: e1000: Move cancel_work_sync to avoid deadlock
- CVE-2025-38113kernel: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used
- CVE-2025-38112kernel: Linux kernel: Denial of Service due to TOCTOU in `sk_is_readable()`
- CVE-2025-38111kernel: net/mdiobus: Fix potential out-of-bounds read/write access
- CVE-2025-38110kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access
- CVE-2025-38109kernel: Linux kernel (net/mlx5): Use-after-free in ECVF vports unload leads to denial of service
- CVE-2025-38108kernel: net_sched: red: fix a race in __red_change()
- CVE-2025-38107kernel: Linux kernel: Race condition in network scheduler can cause denial of service and data compromise.
- CVE-2025-38106kernel: Linux kernel io_uring: Local privilege escalation, information disclosure, or denial of service via use-after-free
- CVE-2025-38105kernel: Linux kernel: Denial of Service in USB-audio MIDI driver due to improper timer shutdown
- CVE-2025-38104kernel: drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV
- CVE-2025-38103kernel: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
- CVE-2025-38102kernel: VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
- CVE-2025-38101kernel: Linux kernel: Privilege escalation or denial of service due to improper buffer locking in ring-buffer
- CVE-2025-38100kernel: Linux kernel: Local Denial of Service due to TIF_IO_BITMAP inconsistency
- CVE-2025-38099kernel: Linux kernel Bluetooth: Denial of Service via improper SCO voice setting
- CVE-2025-38098kernel: drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink
- CVE-2025-38097kernel: espintcp: remove encap socket caching to avoid reference leak
- CVE-2025-38096kernel: Linux Kernel: Denial of Service in iwlwifi due to improper firmware error handling
- CVE-2025-38095kernel: Linux kernel dma-buf: Denial of Service via memory reordering
- CVE-2025-38094kernel: net: cadence: macb: Fix a possible deadlock in macb_halt_tx.
- CVE-2025-38093kernel: arm64: dts: qcom: x1e80100: Add GPU cooling
- CVE-2025-38092kernel: ksmbd: use list_first_entry_or_null for opinfo_get_list()
- CVE-2025-38091kernel: Linux kernel AMD display driver: Denial of Service via incorrect DML21 plane_id query
- CVE-2025-38090kernel: drivers/rapidio/rio_cm.c: prevent possible heap overwrite
- CVE-2025-38089kernel: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error
- CVE-2025-38088kernel: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap
- CVE-2025-38087kernel: net/sched: fix use-after-free in taprio_dev_notifier
- CVE-2025-38086kernel: net: ch9200: fix uninitialised access during mii_nway_restart
- CVE-2025-38085kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- CVE-2025-38084kernel: mm/hugetlb: unshare page tables during VMA split, not before
- CVE-2025-38083kernel: net_sched: prio: fix a race in prio_tune()
- CVE-2025-38082kernel: gpio: virtuser: fix potential out-of-bound write
- CVE-2025-38081kernel: spi-rockchip: Fix register out of bounds access
- CVE-2025-38080kernel: drm/amd/display: Increase block_sequence array size
- CVE-2025-38079kernel: crypto: algif_hash - fix double free in hash_accept
- CVE-2025-38078kernel: Linux kernel: Use-After-Free vulnerability in PCM OSS layer due to race condition
- CVE-2025-38077kernel: Linux kernel: Buffer overflow in dell-wmi-sysman leading to denial of service, information disclosure, or code execution
- CVE-2025-38076kernel: alloc_tag: allocate percpu counters for module tags dynamically
- CVE-2025-38075kernel: Linux kernel: Denial of Service due to NULL pointer dereference in iSCSI target NOPIN timer handling
- CVE-2025-38074kernel: vhost-scsi: protect vq->log_used with vq->mutex
- CVE-2025-38072kernel: libnvdimm/labels: Fix divide error in nd_label_data_init()
- CVE-2025-38071kernel: x86/mm: Check return value from memblock_phys_alloc_range()
- CVE-2025-38070kernel: ASoC: sma1307: Add NULL check in sma1307_setting_loaded()
- CVE-2025-38069kernel: PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops
- CVE-2025-38068kernel: Linux kernel: LZO compression buffer overrun due to insufficient output buffer checks