PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2025 document archive · 54

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 54 / 82

  1. CVE-2025-37758kernel: ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
  2. CVE-2025-37757kernel: tipc: fix memory leak in tipc_link_xmit
  3. CVE-2025-37756kernel: net: tls: explicitly disallow disconnect
  4. CVE-2025-37755kernel: net: libwx: handle page_pool_dev_alloc_pages error
  5. CVE-2025-37754kernel: drm/i915/huc: Fix fence not released on early probe errors
  6. CVE-2025-37753kernel: s390/cpumf: Fix double free on error in cpumf_pmu_event_init()
  7. CVE-2025-37752kernel: net_sched: sch_sfq: move the limit validation
  8. CVE-2025-37751kernel: x86/cpu: Avoid running off the end of an AMD erratum table
  9. CVE-2025-37750kernel: smb: client: fix UAF in decryption with multichannel
  10. CVE-2025-37749kernel: net: ppp: Add bound checking for skb data on ppp_sync_txmung
  11. CVE-2025-37748kernel: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group
  12. CVE-2025-37747kernel: perf: Fix hang while freeing sigtrap event
  13. CVE-2025-37746kernel: perf/dwc_pcie: fix duplicate pci_dev devices
  14. CVE-2025-37745kernel: PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
  15. CVE-2025-37744kernel: wifi: ath12k: fix memory leak in ath12k_pci_remove()
  16. CVE-2025-37743kernel: wifi: ath12k: Avoid memory leak while enabling statistics
  17. CVE-2025-37742kernel: jfs: Fix uninit-value access of imap allocated in the diMount() function
  18. CVE-2025-37741kernel: jfs: Prevent copying of nlink with value 0 from disk inode
  19. CVE-2025-37740kernel: jfs: add sanity check for agwidth in dbMount
  20. CVE-2025-37739kernel: f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
  21. CVE-2025-37738kernel: ext4: ignore xattrs past end
  22. CVE-2025-35998Intel (R): From CVEorg collector
  23. CVE-2025-35979kernel: Kernel: Information disclosure via shared microarchitectural predictor state in Intel(R) Processors
  24. CVE-2025-35973kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling
  25. CVE-2025-35036hibernate-validator: Hibernate Validator Expression Language Injection
  26. CVE-2025-32997http-proxy-middleware: Improper Check for Unusual or Exceptional Conditions in http-proxy-middleware
  27. CVE-2025-32996http-proxy-middleware: Always-Incorrect Control Flow Implementation in http-proxy-middleware
  28. CVE-2025-32990gnutls: Vulnerability in GnuTLS certtool template parsing
  29. CVE-2025-32989gnutls: Vulnerability in GnuTLS SCT extension parsing
  30. CVE-2025-32988gnutls: Vulnerability in GnuTLS otherName SAN export
  31. CVE-2025-32914libsoup: OOB Read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process
  32. CVE-2025-32913libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header
  33. CVE-2025-32912libsoup: NULL pointer dereference in client when server omits the "nonce" parameter in an Unauthorized response with Digest authentication
  34. CVE-2025-32911libsoup: Double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" GHashTable value
  35. CVE-2025-32910libsoup: Null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an Unauthorized response with Digest authentication
  36. CVE-2025-32909libsoup: NULL Pointer Dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c
  37. CVE-2025-32908libsoup: Denial of service on libsoup through HTTP/2 server
  38. CVE-2025-32907libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header
  39. CVE-2025-32906libsoup: Out of bounds reads in soup_headers_parse_request()
  40. CVE-2025-32728openssh: OpenSSH SSHD Agent Forwarding and X11 Forwarding
  41. CVE-2025-32464haproxy: Buffer Overflow via Improper Back-Reference Replacement Length Check
  42. CVE-2025-32463sudo: LPE via chroot option
  43. CVE-2025-32462sudo: LPE via host option
  44. CVE-2025-32441rack: Rack Session Reuse Vulnerability
  45. CVE-2025-32421next.js: Next.js Race Condition to Cache Poisoning
  46. CVE-2025-32415libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables
  47. CVE-2025-32414libxml2: Out-of-Bounds Read in libxml2
  48. CVE-2025-32365poppler: Out-of-Bounds Read in Poppler
  49. CVE-2025-32364poppler: Floating-Point Exception in Poppler
  50. CVE-2025-32053libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()
CVE 2025 document archive — Page 54 | PulseLinux