CVE 2025 document archive · 64
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,053 documents · Identifier year 2025 · 64 / 82
- CVE-2025-21898kernel: ftrace: Avoid potential division by zero in function_stat_show()
- CVE-2025-21897kernel: sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance()
- CVE-2025-21896kernel: fuse: revert back to __readahead_folio() for readahead
- CVE-2025-21895kernel: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list
- CVE-2025-21894kernel: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
- CVE-2025-21893kernel: keys: Fix UAF in key_put()
- CVE-2025-21892kernel: RDMA/mlx5: Fix the recovery flow of the UMR QP
- CVE-2025-21891kernel: ipvlan: ensure network headers are in skb linear part
- CVE-2025-21890kernel: idpf: fix checksums set in idpf_rx_rsc()
- CVE-2025-21889kernel: perf/core: Add RCU read lock protection to perf_iterate_ctx()
- CVE-2025-21888kernel: RDMA/mlx5: Fix a WARN during dereg_mr for DM type
- CVE-2025-21887kernel: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- CVE-2025-21886kernel: RDMA/mlx5: Fix implicit ODP hang on parent deregistration
- CVE-2025-21885kernel: RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
- CVE-2025-21884kernel: net: better track kernel sockets lifetime
- CVE-2025-21883kernel: ice: Fix deinitializing VF in error path
- CVE-2025-21882kernel: net/mlx5: Fix vport QoS cleanup on error
- CVE-2025-21881kernel: uprobes: Reject the shared zeropage in uprobe_write_opcode()
- CVE-2025-21880kernel: drm/xe/userptr: fix EFAULT handling
- CVE-2025-21879kernel: btrfs: fix use-after-free on inode when scanning root during em shrinking
- CVE-2025-21878kernel: i2c: npcm: disable interrupt enable bit before devm_request_irq
- CVE-2025-21877kernel: usbnet: gl620a: fix endpoint checking in genelink_bind()
- CVE-2025-21876kernel: iommu/vt-d: Fix suspicious RCU usage
- CVE-2025-21875kernel: mptcp: always handle address removal under msk socket lock
- CVE-2025-21874kernel: dm-integrity: Avoid divide by zero in table status in Inline mode
- CVE-2025-21873kernel: scsi: ufs: core: bsg: Fix crash when arpmb command fails
- CVE-2025-21872kernel: efi: Don't map the entire mokvar table to determine its size
- CVE-2025-21871kernel: tee: optee: Fix supplicant wait loop
- CVE-2025-21870kernel: ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
- CVE-2025-21869kernel: powerpc/code-patching: Disable KASAN report during patching via temporary mm
- CVE-2025-21868kernel: net: allow small head cache usage with large MAX_SKB_FRAGS values
- CVE-2025-21867kernel: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()
- CVE-2025-21866kernel: powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC
- CVE-2025-21865kernel: gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().
- CVE-2025-21864kernel: tcp: drop secpath at the same time as we currently drop dst
- CVE-2025-21863kernel: io_uring: prevent opcode speculation
- CVE-2025-21862kernel: drop_monitor: fix incorrect initialization order
- CVE-2025-21861kernel: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
- CVE-2025-21860kernel: mm/zswap: fix inconsistency when zswap_store_page() fails
- CVE-2025-21859kernel: USB: gadget: f_midi: f_midi_complete to call queue_work
- CVE-2025-21858kernel: geneve: Fix use-after-free in geneve_find_dev().
- CVE-2025-21857kernel: net/sched: cls_api: fix error handling causing NULL dereference
- CVE-2025-21856kernel: s390/ism: add release function for struct device
- CVE-2025-21855kernel: ibmvnic: Don't reference skb after sending to VIOS
- CVE-2025-21854kernel: sockmap, vsock: For connectible sockets allow only connected
- CVE-2025-21853kernel: bpf: avoid holding freeze_mutex during mmap operation
- CVE-2025-21852kernel: net: Add rx_skb of kfree_skb to raw_tp_null_args[].
- CVE-2025-21851kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel
- CVE-2025-21850kernel: nvmet: Fix crash when a namespace is disabled
- CVE-2025-21849kernel: drm/i915/gt: Use spin_lock_irqsave() in interruptible context