PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2025 document archive · 59

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 59 / 82

  1. CVE-2025-23087node.js: End-of-Life Node.js Versions Pose Security Risks 17.x or prior
  2. CVE-2025-23085nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap
  3. CVE-2025-23083nodejs: Node.js Worker Thread Exposure via Diagnostics Channel
  4. CVE-2025-23050qt: qt5: qt6: Qt missing length checks
  5. CVE-2025-23048httpd: mod_ssl: access control bypass by trusted clients is possible using TLS 1.3 session resumption
  6. CVE-2025-23022freetype: signed integer overflow in cf2_doFlex
  7. CVE-2025-22874crypto/x509: Usage of ExtKeyUsageAny disables policy validation in crypto/x509
  8. CVE-2025-22873os: os: Information disclosure via path traversal using specially crafted filenames
  9. CVE-2025-22872golang.org/x/net/html: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net
  10. CVE-2025-22871net/http: Request smuggling due to acceptance of invalid chunked data in net/http
  11. CVE-2025-22870golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net
  12. CVE-2025-22869golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh
  13. CVE-2025-22868golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws
  14. CVE-2025-22867cmd/go: Arbitrary code execution during build on darwin in cmd/go
  15. CVE-2025-22866crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec
  16. CVE-2025-22865crypto/x509: ParsePKCS1PrivateKey panic with partial keys in crypto/x509
  17. CVE-2025-22247open-vm-tools: Insecure file handling
  18. CVE-2025-22235org.springframework.boot/spring-boot: Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed
  19. CVE-2025-22232spring-cloud-config-server: Spring Cloud Config Server May Not Use Vault Token Sent By Clients
  20. CVE-2025-22150undici: Undici Uses Insufficiently Random Values
  21. CVE-2025-22134vim: heap-buffer-overflow with visual mode in Vim < 9.1.1003
  22. CVE-2025-22128kernel: wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error path
  23. CVE-2025-22127kernel: f2fs: fix potential deadloop in prepare_compress_overwrite()
  24. CVE-2025-22126kernel: md: fix mddev uaf while iterating all_mddevs list
  25. CVE-2025-22125kernel: md/raid1,raid10: don't ignore IO flags
  26. CVE-2025-22124kernel: md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb
  27. CVE-2025-22123kernel: f2fs: fix to avoid accessing uninitialized curseg
  28. CVE-2025-22122kernel: block: fix adding folio to bio
  29. CVE-2025-22121kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
  30. CVE-2025-22120kernel: ext4: goto right label 'out_mmap_sem' in ext4_setattr()
  31. CVE-2025-22119kernel: wifi: cfg80211: init wiphy_work before allocating rfkill fails
  32. CVE-2025-22118kernel: ice: validate queue quanta parameters to prevent OOB access
  33. CVE-2025-22117kernel: ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw()
  34. CVE-2025-22116kernel: idpf: check error for register_netdev() on init
  35. CVE-2025-22115kernel: btrfs: fix block group refcount race in btrfs_create_pending_block_groups()
  36. CVE-2025-22114kernel: btrfs: don't clobber ret in btrfs_validate_super()
  37. CVE-2025-22113kernel: ext4: avoid journaling sb update on error if journal is destroying
  38. CVE-2025-22112kernel: eth: bnxt: fix out-of-range access of vnic_info array
  39. CVE-2025-22111kernel: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.
  40. CVE-2025-22110kernel: netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation error
  41. CVE-2025-22109kernel: ax25: Remove broken autobind
  42. CVE-2025-22108kernel: bnxt_en: Mask the bd_cnt field in the TX BD properly
  43. CVE-2025-22107kernel: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
  44. CVE-2025-22106kernel: vmxnet3: unregister xdp rxq info in the reset path
  45. CVE-2025-22105kernel: bonding: check xdp prog when set bond mode
  46. CVE-2025-22104kernel: ibmvnic: Use kernel helpers for hex dumps
  47. CVE-2025-22103kernel: net: fix NULL pointer dereference in l3mdev_l3_rcv
  48. CVE-2025-22102kernel: Bluetooth: btnxpuart: Fix kernel panic during FW release
  49. CVE-2025-22101kernel: net: libwx: fix Tx L4 checksum
  50. CVE-2025-22100kernel: drm/panthor: Fix race condition when gathering fdinfo group samples
CVE 2025 document archive — Page 59 | PulseLinux