Debian
Page 2 of 100 — Debian CVEs from a corpus of 10223, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-39787 | High | 7.8 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdt_loader: Ensure we don't read past the ELF header When the MDT loader is us… |
CVE-2025-39783 | High | 7.8 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix configfs group list head handling Doing a list_del() on the epf_group… |
CVE-2025-39782 | Medium | 5.5 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2_log_do_checkpoint() Both jbd2_log_do_checkpoint() and jb… |
CVE-2025-39776 | High | 7.0 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: mm/debug_vm_pgtable: clear page table entries at destroy_args() The mm/debug_vm_pagetable… |
CVE-2025-39773 | Medium | 5.5 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix soft lockup in br_multicast_query_expired() When set multicast_query_int… |
CVE-2025-39772 | Medium | 5.5 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: drm/hisilicon/hibmc: fix the hibmc loaded failed bug When hibmc loaded failed, the driver… |
CVE-2025-39770 | High | 7.5 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM When performing… |
CVE-2025-39766 | High | 7.8 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit The following setu… |
CVE-2025-39760 | High | 7.1 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: usb: core: config: Prevent OOB read in SS endpoint companion parsing usb_parse_ss_endpoin… |
CVE-2025-39759 | High | 7.0 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix race between quota disable and quota rescan ioctl There's a race betwe… |
CVE-2025-39757 | High | 7.1 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 cluster segment descriptors UAC3 class segment descriptors… |
CVE-2025-39756 | Medium | 5.5 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: fs: Prevent file descriptor table allocations exceeding INT_MAX When sysctl_nr_open is se… |
CVE-2025-39752 | Medium | 5.5 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: ARM: rockchip: fix kernel hang during smp initialization In order to bring up secondary C… |
CVE-2025-39749 | High | 7.0 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: rcu: Protect ->defer_qs_iw_pending from data race On kernels built with CONFIG_IRQ_WORK=y… |
CVE-2025-39743 | High | 7.8 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: jfs: truncate good inode pages when hard link is 0 The fileset value of the inode copy fr… |
CVE-2025-39742 | Medium | 5.5 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() The function divides num… |
CVE-2025-39738 | High | 7.3 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not allow relocation of partially dropped subvolumes [BUG] There is an internal… |
CVE-2025-39737 | Medium | 5.5 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() A soft lockup warning was obser… |
CVE-2025-39736 | Medium | 5.5 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock When netpoll is ena… |
CVE-2025-39734 | Medium | 5.5 | 2025-09-07 | In the Linux kernel, the following vulnerability has been resolved: Revert "fs/ntfs3: Replace inode_trylock with inode_lock" This reverts commit 69505fe98f19… |
CVE-2025-39731 | Medium | 5.5 | 2025-09-07 | In the Linux kernel, the following vulnerability has been resolved: f2fs: vm_unmap_ram() may be called from an invalid context When testing F2FS with xfstest… |
CVE-2025-39730 | High | 7.8 | 2025-09-07 | In the Linux kernel, the following vulnerability has been resolved: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() The function needs to check the… |
CVE-2025-39724 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix panic due to PSLVERR When the PSLVERR_RESP_EN parameter is set to 1, th… |
CVE-2025-39719 | High | 7.1 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: iio: imu: bno055: fix OOB access of hw_xlate array Fix a potential out-of-bounds array ac… |
CVE-2025-39718 | High | 8.4 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in packet header before skb_put() When receiving a vsock pa… |
CVE-2025-39716 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: parisc: Revise __get_user() to probe user read access Because of the way read access supp… |
CVE-2025-39715 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: parisc: Revise gateway LWS calls to probe user read access We use load and stbys,e instru… |
CVE-2025-39714 | High | 7.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Lock resolution while streaming When an program is streaming (ffplay) and a… |
CVE-2025-39713 | Medium | 4.7 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() In the interrupt han… |
CVE-2025-39710 | High | 7.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: media: venus: Add a check for packet size after reading from shared memory Add a check to… |
CVE-2025-39709 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: media: venus: protect against spurious interrupts during probe Make sure the interrupt ha… |
CVE-2025-39706 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Destroy KFD debugfs after destroy KFD wq Since KFD proc content was moved to… |
CVE-2025-39703 | Critical | 9.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: net, hsr: reject HSR frame if skb can't hold tag Receiving HSR frame with insufficient sp… |
CVE-2025-39702 | Critical | 9.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to… |
CVE-2025-39701 | High | 7.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: ACPI: pfr_update: Fix the driver update version check The security-version-number check s… |
CVE-2025-39697 | High | 7.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a race when updating an existing write After nfs_lock_and_join_requests() tests… |
CVE-2025-39694 | High | 7.3 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix SCCB present check Tracing code called by the SCLP interrupt handler conta… |
CVE-2025-39693 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid a NULL pointer dereference [WHY] Although unlikely drm_atomic_get_… |
CVE-2025-39692 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() We can't call… |
CVE-2025-39691 | High | 7.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: fs/buffer: fix use-after-free when call bh_read() helper There's issue as follows: BUG: K… |
CVE-2025-39689 | High | 7.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Also allocate and copy hash for reading of filter files Currently the reader of s… |
CVE-2025-39687 | High | 7.1 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: iio: light: as73211: Ensure buffer holes are zeroed Given that the buffer is copied to a… |
CVE-2025-39686 | High | 7.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: comedi: Make insn_rw_emulate_bits() do insn->n samples The `insn_rw_emulate_bits()` funct… |
CVE-2025-39685 | High | 7.1 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: comedi: pcl726: Prevent invalid irq number The reproducer passed in an irq number(0x80008… |
CVE-2025-39684 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() syzbot… |
CVE-2025-39683 | High | 7.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: tracing: Limit access to parser->buffer when trace_get_user failed When the length of the… |
CVE-2025-39682 | Critical | 9.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process… |
CVE-2025-39681 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper Since 923f3a2b48bd… |
CVE-2025-39676 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Prevent a potential error pointer dereference The qla4xxx_get_ep_fwdb() fu… |
CVE-2025-39675 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() The function m… |
CVE-2025-39673 | Critical | 9.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: ppp: fix race conditions in ppp_fill_forward_path ppp_fill_forward_path() has two race co… |
CVE-2025-38736 | High | 7.1 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization Syzbot reported s… |
CVE-2025-38735 | High | 7.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: gve: prevent ethtool ops after shutdown A crash can occur if an ethtool operation is invo… |
CVE-2025-38732 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject: don't leak dst refcount for loopback packets recent patches to add… |
CVE-2025-38729 | High | 7.8 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descriptors, too UAC3 power domain descriptor… |
CVE-2025-38728 | Critical | 9.1 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to… |
CVE-2025-38727 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: netlink: avoid infinite retry looping in netlink_unicast() netlink_attachskb() checks for… |
CVE-2025-38725 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: net: usb: asix_devices: add phy_mask for ax88772 mdio bus Without setting phy_mask for ax… |
CVE-2025-38724 | Critical | 9.8 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently r… |
CVE-2025-38723 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix jump offset calculation in tailcall The extra pass of bpf_int_jit_com… |
CVE-2025-38721 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: fix refcount leak on table dump There is a reference count leak in… |
CVE-2025-38718 | High | 7.8 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: sctp: linearize cloned gso packets in sctp_rcv A cloned head skb still shares these frag… |
CVE-2025-38715 | High | 7.8 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: hfs: fix slab-out-of-bounds in hfs_bnode_read() This patch introduces is_bnode_offset_val… |
CVE-2025-38714 | High | 7.8 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() The hfsplus_bnode_read() method c… |
CVE-2025-38713 | High | 7.1 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() The hfsplus_readdir() method is… |
CVE-2025-38712 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() When the volume header co… |
CVE-2025-38711 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: smb/server: avoid deadlock when linking with ReplaceIfExists If smb2_create_link() is cal… |
CVE-2025-38708 | Critical | 9.8 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: drbd: add missing kref_get in handle_write_conflicts With `two-primaries` enabled, DRBD t… |
CVE-2025-38707 | High | 7.1 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add sanity check for file name The length of the file name should be smaller th… |
CVE-2025-38706 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() snd_soc_remove_pcm_runt… |
CVE-2025-38702 | High | 7.8 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: fbdev: fix potential buffer overflow in do_register_framebuffer() The current implementat… |
CVE-2025-38701 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr A syzbot fuzzed image trigge… |
CVE-2025-38700 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated In case of an… |
CVE-2025-38699 | High | 7.8 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Double-free fix When the bfad_im_probe() function fails during initialization… |
CVE-2025-38698 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: jfs: Regular file corruption check The reproducer builds a corrupted file on disk with a… |
CVE-2025-38697 | High | 7.8 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: jfs: upper bound check of tree index in dbAllocAG When computing the tree index in dbAllo… |
CVE-2025-38696 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: MIPS: Don't crash in stack_top() for tasks without ABI or vDSO Not all tasks have an ABI… |
CVE-2025-38695 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure If a call to lp… |
CVE-2025-38694 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() In dib7090p_rw… |
CVE-2025-38693 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_t… |
CVE-2025-38691 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on the third attempt t… |
CVE-2025-38687 | High | 7.3 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: comedi: fix race between polling and detaching syzbot reports a use-after-free in comedi… |
CVE-2025-38685 | High | 7.8 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit This issue triggers when a users… |
CVE-2025-38684 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: use old 'nbands' while purging unused classes Shuang reported sch_ets tes… |
CVE-2025-38683 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix panic during namespace deletion with VF The existing code move the VF NIC… |
CVE-2025-38681 | Medium | 4.7 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() Memory hot remove unmaps… |
CVE-2025-38680 | High | 7.1 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() The buffer length ch… |
CVE-2025-38679 | High | 7.3 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: media: venus: Fix OOB read due to missing payload bound check Currently, The event_seq_ch… |
CVE-2025-38677 | High | 7.8 | 2025-08-30 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in dnode page As Jiaming Zhang reported: <TAS… |
CVE-2024-58240 | Critical | 9.8 | 2025-08-28 | In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, t… |
CVE-2025-38676 | High | 7.8 | 2025-08-26 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel cmdline While the kernel command line… |
CVE-2025-38671 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: i2c: qup: jump out of the loop in case of timeout Original logic only sets the return val… |
CVE-2025-38670 | High | 7.8 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() `cpu_switch_to()` and `cal… |
CVE-2025-38668 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix NULL dereference on unbind due to stale coupling data Failing to res… |
CVE-2025-38666 | High | 7.8 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: appletalk: Fix use-after-free in AARP proxy probe The AARP proxy‐probe routine (aarp… |
CVE-2025-38665 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode An… |
CVE-2025-38664 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() Add check for the return v… |
CVE-2025-38663 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject invalid file types when reading inodes To prevent inodes with invalid file… |
CVE-2025-38653 | High | 7.8 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al Check p… |
CVE-2025-38652 | High | 7.3 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in devs.path - touch /mnt/f2fs/0123456789012345… |