CVE 2025 document archive · 50
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,053 documents · Identifier year 2025 · 50 / 82
- CVE-2025-37963kernel: arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
- CVE-2025-37962kernel: ksmbd: fix memory leak in parse_lease_state()
- CVE-2025-37961kernel: ipvs: fix uninit-value for saddr in do_output_route4
- CVE-2025-37960kernel: memblock: Accept allocated memory before use in memblock_double_array()
- CVE-2025-37959kernel: bpf: Scrub packet on bpf_redirect_peer
- CVE-2025-37958kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry
- CVE-2025-37957kernel: KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
- CVE-2025-37956kernel: ksmbd: prevent rename with empty string
- CVE-2025-37955kernel: Linux kernel virtio-net: Memory leak in virtnet_xsk_pool_enable() error path
- CVE-2025-37954kernel: smb: client: Avoid race in open_cached_dir with lease breaks
- CVE-2025-37953kernel: Linux kernel: sch_htb NULL pointer dereference
- CVE-2025-37952kernel: ksmbd: Fix UAF in __close_file_table_ids
- CVE-2025-37951kernel: drm/v3d: Add job to pending list if the reset was skipped
- CVE-2025-37950kernel: ocfs2: fix panic in failed foilio allocation
- CVE-2025-37949kernel: xenbus: Use kref to track req lifetime
- CVE-2025-37948kernel: arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
- CVE-2025-37947kernel: ksmbd: prevent out-of-bounds stream writes by validating *pos
- CVE-2025-37946kernel: s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs
- CVE-2025-37945kernel: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY
- CVE-2025-37944kernel: wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
- CVE-2025-37943kernel: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
- CVE-2025-37941kernel: ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe()
- CVE-2025-37940kernel: ftrace: Add cond_resched() to ftrace_graph_set_hash()
- CVE-2025-37939kernel: libbpf: Fix accessing BTF.ext core_relo header
- CVE-2025-37938kernel: tracing: Verify event formats that have "%*p.."
- CVE-2025-37937kernel: objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- CVE-2025-37936kernel: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
- CVE-2025-37935kernel: net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM
- CVE-2025-37934kernel: ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction
- CVE-2025-37933kernel: octeon_ep: Fix host hang issue during device reboot
- CVE-2025-37932kernel: sch_htb: make htb_qlen_notify() idempotent
- CVE-2025-37931kernel: btrfs: adjust subpage bit start based on sectorsize
- CVE-2025-37930kernel: drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()
- CVE-2025-37929kernel: arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
- CVE-2025-37928kernel: dm-bufio: don't schedule in atomic context
- CVE-2025-37927kernel: Linux kernel: `iommu/amd`: Buffer overflow in `parse_ivrs_acpihid`
- CVE-2025-37926kernel: ksmbd: fix use-after-free in ksmbd_session_rpc_open
- CVE-2025-37925kernel: jfs: reject on-disk inodes of an unsupported type
- CVE-2025-37924kernel: ksmbd: fix use-after-free in kerberos authentication
- CVE-2025-37923kernel: tracing: Fix oob write in trace_seq_to_buffer()
- CVE-2025-37922kernel: book3s64/radix : Align section vmemmap start address to PAGE_SIZE
- CVE-2025-37921kernel: vxlan: vnifilter: Fix unlocked deletion of default FDB entry
- CVE-2025-37920kernel: xsk: Fix race condition in AF_XDP generic RX path
- CVE-2025-37919kernel: ASoC: amd: acp: Fix NULL pointer deref in acp_i2s_set_tdm_slot
- CVE-2025-37918kernel: Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()
- CVE-2025-37917kernel: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll
- CVE-2025-37916kernel: pds_core: remove write-after-free of client_id
- CVE-2025-37915kernel: net_sched: drr: Fix double list add in class with netem as child qdisc
- CVE-2025-37914kernel: net_sched: ets: Fix double list add in class with netem as child qdisc
- CVE-2025-37913kernel: net_sched: qfq: Fix double list add in class with netem as child qdisc