CVE 2025 document archive · 66
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,053 documents · Identifier year 2025 · 66 / 82
- CVE-2025-21798kernel: firewire: test: Fix potential null dereference in firewire kunit test
- CVE-2025-21797kernel: HID: corsair-void: Add missing delayed work cancel for headset status
- CVE-2025-21796kernel: nfsd: clear acl_access/acl_default after releasing them
- CVE-2025-21795kernel: NFSD: fix hang in nfsd4_shutdown_callback
- CVE-2025-21794kernel: HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
- CVE-2025-21793kernel: spi: sn-f-ospi: Fix division by zero
- CVE-2025-21792kernel: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
- CVE-2025-21791kernel: vrf: use RCU protection in l3mdev_l3_out()
- CVE-2025-21790kernel: vxlan: check vxlan_vnigroup_init() return value
- CVE-2025-21789kernel: LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
- CVE-2025-21788kernel: net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases
- CVE-2025-21787kernel: team: better TEAM_OPTION_TYPE_STRING validation
- CVE-2025-21786kernel: workqueue: Put the pwq after detaching the rescuer from the pool
- CVE-2025-21785kernel: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- CVE-2025-21784kernel: drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
- CVE-2025-21783kernel: gpiolib: Fix crash on error in gpiochip_get_ngpios()
- CVE-2025-21782kernel: orangefs: fix a oob in orangefs_debug_write
- CVE-2025-21781kernel: batman-adv: fix panic during interface removal
- CVE-2025-21780kernel: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- CVE-2025-21779kernel: KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- CVE-2025-21778kernel: tracing: Do not allow mmap() of persistent ring buffer
- CVE-2025-21777kernel: ring-buffer: Validate the persistent meta data subbuf array
- CVE-2025-21776kernel: USB: hub: Ignore non-compliant devices with too many configs or interfaces
- CVE-2025-21775kernel: can: ctucanfd: handle skb allocation failure
- CVE-2025-21774kernel: can: rockchip: rkcanfd_handle_rx_fifo_overflow_int(): bail out if skb cannot be allocated
- CVE-2025-21773kernel: can: etas_es58x: fix potential NULL pointer dereference on udev->serial
- CVE-2025-21772kernel: partitions: mac: fix handling of bogus partition table
- CVE-2025-21771kernel: sched_ext: Fix incorrect autogroup migration detection
- CVE-2025-21770kernel: iommu: Fix potential memory leak in iopf_queue_remove_device()
- CVE-2025-21769kernel: ptp: vmclock: Add .owner to vmclock_miscdev_fops
- CVE-2025-21768kernel: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels
- CVE-2025-21767kernel: clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context
- CVE-2025-21766kernel: ipv4: use RCU protection in __ip_rt_update_pmtu()
- CVE-2025-21765kernel: ipv6: use RCU protection in ip6_default_advmss()
- CVE-2025-21764kernel: ndisc: use RCU protection in ndisc_alloc_skb()
- CVE-2025-21763kernel: neighbour: use RCU protection in __neigh_notify()
- CVE-2025-21762kernel: arp: use RCU protection in arp_xmit()
- CVE-2025-21761kernel: openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- CVE-2025-21760kernel: ndisc: extend RCU protection in ndisc_send_skb()
- CVE-2025-21759kernel: ipv6: mcast: extend RCU protection in igmp6_send()
- CVE-2025-21758kernel: ipv6: mcast: add RCU protection to mld_newpack()
- CVE-2025-21757kernel: net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels
- CVE-2025-21756kernel: vsock: Keep the binding until socket destruction
- CVE-2025-21755kernel: vsock: Orphan socket after transport release
- CVE-2025-21754kernel: btrfs: fix assertion failure when splitting ordered extent after transaction abort
- CVE-2025-21753kernel: btrfs: fix use-after-free when attempting to join an aborted transaction
- CVE-2025-21752kernel: btrfs: don't use btrfs_set_item_key_safe on RAID stripe-extents
- CVE-2025-21751kernel: net/mlx5: HWS, change error flow on matcher disconnect
- CVE-2025-21750kernel: wifi: brcmfmac: Check the return value of of_property_read_string_index()
- CVE-2025-21749kernel: net: rose: lock the socket in rose_bind()