CVE 2025 document archive · 5
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,053 documents · Identifier year 2025 · 5 / 82
- CVE-2025-69652binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information
- CVE-2025-69651binutils: Binutils: Denial of Service via crafted ELF binary processing
- CVE-2025-69650binutils: double free in readelf via crafted ELF binary with malformed relocation data
- CVE-2025-69649binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed header fields
- CVE-2025-69648binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data
- CVE-2025-69647binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data
- CVE-2025-69646binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data
- CVE-2025-69645binutils: Binutils objdump: Denial of Service via crafted DWARF debug information
- CVE-2025-69644binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information
- CVE-2025-69534python-markdown: denial of service via malformed HTML-like sequences
- CVE-2025-69421openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing
- CVE-2025-69420openssl: OpenSSL: Denial of Service via malformed TimeStamp Response
- CVE-2025-69419openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
- CVE-2025-69418openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls
- CVE-2025-69204ImageMagick: ImageMagick: Denial of Service via integer overflow in SVG image processing
- CVE-2025-68973GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write
- CVE-2025-68972gnupg: GnuPG: Signature bypass via form feed character in signed messages
- CVE-2025-68950ImageMagick: ImageMagick: Denial of Service via circular references in MVG files
- CVE-2025-68823kernel: Linux kernel: Denial of Service in ublk due to deadlock when reading partition table
- CVE-2025-68822kernel: Input: alps - fix use-after-free bugs caused by dev3_register_work
- CVE-2025-68821kernel: Linux kernel FUSE: Denial of Service via readahead reclaim deadlock
- CVE-2025-68820kernel: ext4: xattr: fix null pointer deref in ext4_raw_inode()
- CVE-2025-68819kernel: media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
- CVE-2025-68818kernel: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"
- CVE-2025-68817kernel: ksmbd: Use-after-free vulnerability allows arbitrary code execution
- CVE-2025-68816kernel: Linux kernel: mlx5 firmware tracer vulnerable to arbitrary memory access or denial of service via malformed format strings
- CVE-2025-68815kernel: net/sched: ets: Remove drr class from the active list if it changes to strict
- CVE-2025-68814kernel: Linux kernel: Memory leak in io_uring's __io_openat_prep() leading to denial of service
- CVE-2025-68813kernel: ipvs: fix ipv4 null-ptr-deref in route error path
- CVE-2025-68811kernel: svcrdma: use rc_pageoff for memcpy byte offset
- CVE-2025-68810kernel: Kernel: KVM use-after-free due to improper handling of guest memory file descriptor flags
- CVE-2025-68809kernel: ksmbd: Remote race condition leads to data integrity issues and denial of service
- CVE-2025-68808kernel: Linux kernel: Memory corruption in vidtv due to uninitialized pointers
- CVE-2025-68807kernel: block: fix race between wbt_enable_default and IO submission
- CVE-2025-68806kernel: ksmbd: Information disclosure via buffer validation error in Extended Attributes
- CVE-2025-68805kernel: Linux kernel (fuse): Use-after-free vulnerability via io-uring list corruption
- CVE-2025-68804kernel: platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver
- CVE-2025-68803kernel: NFSD: NFSv4 file creation neglects setting ACL
- CVE-2025-68802kernel: drm/xe: Limit num_syncs to prevent oversized allocations
- CVE-2025-68801kernel: mlxsw: spectrum_router: Fix neighbour use-after-free
- CVE-2025-68800kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
- CVE-2025-68799kernel: Linux kernel (caif): Integer underflow leads to memory exhaustion and information disclosure
- CVE-2025-68798kernel: perf/x86/amd: Check event before enable to avoid GPF
- CVE-2025-68797kernel: char: applicom: fix NULL pointer dereference in ac_ioctl
- CVE-2025-68796kernel: f2fs: fix to avoid updating zero-sized extent in extent cache
- CVE-2025-68795kernel: ethtool: Avoid overflowing userspace buffer on stats query
- CVE-2025-68794kernel: iomap: adjust read range correctly for non-block-aligned positions
- CVE-2025-68793kernel: Linux kernel: `drm/amdgpu` use-after-free vulnerability leading to denial of service
- CVE-2025-68792kernel: tpm2-sessions: Fix out of range indexing in name_size
- CVE-2025-68791kernel: fuse: missing copy_finish in fuse-over-io-uring argument copies