PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2025 document archive · 58

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 58 / 82

  1. CVE-2025-24070dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method
  2. CVE-2025-24032pam_pkcs11: PAM-PKCS#11 vulnerable to authentication bypass with default value for `cert_policy` (`none`)
  3. CVE-2025-24031pam_pkcs11: PAM-PKCS#11 vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN
  4. CVE-2025-24014vim: segmentation fault in win_line() in Vim < 9.1.1043
  5. CVE-2025-23419nginx: TLS Session Resumption Vulnerability
  6. CVE-2025-23395screen: Local Root Exploit via `logfile_reopen()`
  7. CVE-2025-23359nvidia-container-toolkit: TOCTOU Vulnerability in NVIDIA Container Toolkit
  8. CVE-2025-23282kvm: NVIDIA Display Driver vulnerability due to race condition leading to escalate privileges
  9. CVE-2025-23267nvidia-container-toolkit: NVIDIA Container Toolkit Link Following Vulnerability
  10. CVE-2025-23266nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit
  11. CVE-2025-23167nodejs: Improper HTTP Header Termination in Node.js 20 Enables Request Smuggling
  12. CVE-2025-23166nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js
  13. CVE-2025-23165nodejs: Memory Leak in Node.js ReadFileUtf8 Binding Leading to DoS
  14. CVE-2025-23163kernel: net: vlan: don't propagate flags on open
  15. CVE-2025-23162kernel: drm/xe/vf: Don't try to trigger a full GT reset if VF
  16. CVE-2025-23161kernel: PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
  17. CVE-2025-23160kernel: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization
  18. CVE-2025-23159kernel: media: venus: hfi: add a check to handle OOB in sfr region
  19. CVE-2025-23158kernel: media: venus: hfi: add check to handle incorrect queue size
  20. CVE-2025-23157kernel: media: venus: hfi_parser: add check to avoid out of bound access
  21. CVE-2025-23156kernel: media: venus: hfi_parser: refactor hfi packet parsing logic
  22. CVE-2025-23155kernel: net: stmmac: Fix accessing freed irq affinity_hint
  23. CVE-2025-23154kernel: io_uring/net: fix io_req_post_cqe abuse by send bundle
  24. CVE-2025-23153kernel: arm/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch()
  25. CVE-2025-23152kernel: arm64/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch()
  26. CVE-2025-23151kernel: bus: mhi: host: Fix race between unprepare and queue_buf
  27. CVE-2025-23150kernel: ext4: fix off-by-one error in do_split
  28. CVE-2025-23149kernel: tpm: do not start chip while suspended
  29. CVE-2025-23148kernel: soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
  30. CVE-2025-23147kernel: i3c: Add NULL pointer check in i3c_master_queue_ibi()
  31. CVE-2025-23146kernel: mfd: ene-kb3930: Fix a potential NULL pointer dereference
  32. CVE-2025-23145kernel: mptcp: fix NULL pointer in can_accept_new_subflow
  33. CVE-2025-23144kernel: backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  34. CVE-2025-23143kernel: net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
  35. CVE-2025-23142kernel: Linux kernel: SCTP use-after-free due to race condition in sendmsg
  36. CVE-2025-23141kernel: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
  37. CVE-2025-23140kernel: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
  38. CVE-2025-23139kernel: Bluetooth: hci_uart: Fix another race during initialization
  39. CVE-2025-23138kernel: watch_queue: fix pipe accounting mismatch
  40. CVE-2025-23137kernel: cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update
  41. CVE-2025-23136kernel: thermal: int340x: Add NULL check for adev
  42. CVE-2025-23135kernel: RISC-V: KVM: Teardown riscv specific bits after kvm_exit
  43. CVE-2025-23134kernel: ALSA: timer: Don't take register_mutex with copy_from/to_user()
  44. CVE-2025-23133kernel: wifi: ath11k: update channel list in reg notifier instead reg worker
  45. CVE-2025-23132kernel: f2fs: quota: fix to avoid warning in dquot_writeback_dquots()
  46. CVE-2025-23131kernel: dlm: prevent NPD when writing a positive value to event_done
  47. CVE-2025-23130kernel: f2fs: fix to avoid panic once fallocation fails for pinfile
  48. CVE-2025-23129kernel: wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path
  49. CVE-2025-23089nodejs: End-of-Life Node.js Versions Pose Security Risks 21.x
  50. CVE-2025-23088nodejs: End-of-Life Node.js Versions Pose Security Risks 19.x
CVE 2025 document archive — Page 58 | PulseLinux