Debian
Page 3 of 43 — Debian CVEs from a corpus of 4293, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-38650 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: remove mutex_lock check in hfsplus_free_extents Syzbot reported an issue in hfsp… |
CVE-2025-38645 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Check device memory pointer before usage Add a NULL check before accessing devi… |
CVE-2025-38644 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject TDLS operations when station is not associated syzbot triggered a… |
CVE-2025-38639 | High | 7.1 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_nfacct: don't assume acct name is null-terminated BUG: KASAN: slab-out-of-b… |
CVE-2025-38635 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: clk: davinci: Add NULL check in davinci_lpsc_clk_register() devm_kasprintf() returns NULL… |
CVE-2025-38634 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-charger: Fix null check for power_supply_get_by_name In the cpcap_us… |
CVE-2025-38630 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref fb_add_videomode() can fai… |
CVE-2025-38624 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: PCI: pnv_php: Clean up allocated IRQs on unplug When the root of a nested PCIe bridge con… |
CVE-2025-38623 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: PCI: pnv_php: Fix surprise plug detection and recovery The existing PowerNV hotplug code… |
CVE-2025-38622 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: drop UFO packets in udp_rcv_segment() When sending a packet with virtio_net_hdr to t… |
CVE-2025-38618 | High | 7.8 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to autobind to… |
CVE-2025-38617 | High | 7.8 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/packet: fix a race in packet_set_ring() and packet_notifier() When packet_set_ring()… |
CVE-2025-38614 | High | 7.8 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a grap… |
CVE-2025-38612 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() In the error paths… |
CVE-2025-38610 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() The get_pd_power_uw… |
CVE-2025-38609 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Check governor before using governor->name Commit 96ffcdf239de ("PM / devfr… |
CVE-2025-38608 | High | 8.6 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls When sending plainte… |
CVE-2025-38604 | High | 7.8 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Kill URBs before clearing tx status queue In rtl8187_stop() move the call… |
CVE-2025-38602 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: iwlwifi: Add missing check for alloc_ordered_workqueue Add check for the return value of… |
CVE-2025-38601 | High | 8.8 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: clear initialized flag for deinit-ed srng lists In a number of cases we see… |
CVE-2025-38588 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent infinite loop in rt6_nlmsg_size() While testing prior patch, I was able to… |
CVE-2025-38587 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6_info_uses_dev() fib6_info_uses_dev() seems to re… |
CVE-2025-38583 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: clk: xilinx: vcu: unregister pll_post only if registered correctly If registration of pll… |
CVE-2025-38581 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix crash when rebind ccp device for ccp.ko When CONFIG_CRYPTO_DEV_CCP_DEBU… |
CVE-2025-38579 | High | 7.8 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix KMSAN uninit-value in extent_info usage KMSAN reported a use of uninitialized v… |
CVE-2025-38578 | High | 7.8 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid UAF in f2fs_sync_inode_meta() syzbot reported an UAF issue as below: [… |
CVE-2025-38577 | High | 7.8 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid panic in f2fs_evict_inode As syzbot [1] reported as below: R10: 00000… |
CVE-2025-38576 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: Make EEH driver device hotplug safe Multiple race conditions existed between… |
CVE-2025-38574 | High | 8.6 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: pptp: ensure minimal skb length in pptp_xmit() Commit aabc6596ffb3 ("net: ppp: Add bound… |
CVE-2025-38572 | High | 7.8 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: reject malicious packets in ipv6_gso_segment() syzbot was able to craft a packet wi… |
CVE-2025-38569 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: benet: fix BUG when creating VFs benet crashes as soon as SRIOV VFs are created: kernel… |
CVE-2025-38565 | High | 7.8 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Exit early on perf_mmap() fail When perf_mmap() fails to allocate a buffer, it… |
CVE-2025-38563 | High | 7.8 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Prevent VMA split of buffer mappings The perf mmap code is careful about mmap(… |
CVE-2025-38562 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference error in generate_encryptionkey If client send two se… |
CVE-2025-38561 | Critical | 9.8 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests… |
CVE-2025-38560 | Critical | 9.3 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: x86/sev: Evict cache lines during SNP memory validation An SNP cache coherency vulnerabil… |
CVE-2025-38555 | High | 7.8 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget : fix use-after-free in composite_dev_cleanup() 1. In func configfs_composite… |
CVE-2025-38552 | Critical | 9.4 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: mptcp: plug races between subflow fail and subflow creation We have races similar to the… |
CVE-2025-38550 | High | 7.8 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Delay put pmc->idev in mld_del_delrec() pmc->idev is still used in ip6_mc_cl… |
CVE-2025-38548 | High | 7.8 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-cpro) Validate the size of the received input buffer Add buffer_recv_size… |
CVE-2025-38546 | Medium | 5.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) allocates struct clip_v… |
CVE-2025-38543 | Medium | 5.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: drm/tegra: nvdec: Fix dma_alloc_coherent error check Check for NULL return value with dma… |
CVE-2025-38542 | High | 7.8 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: net: appletalk: Fix device refcount leak in atrtr_create() When updating an existing rout… |
CVE-2025-38540 | Medium | 5.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras The Chicony Electronics H… |
CVE-2025-38539 | High | 7.8 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: tracing: Add down_write(trace_event_sem) when adding trace event When a module is loaded… |
CVE-2025-38538 | High | 7.8 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: nbpfaxi: Fix memory corruption in probe() The nbpf->chan[] array is allocated… |
CVE-2025-38535 | High | 7.8 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode When transitioning fr… |
CVE-2025-38530 | High | 7.1 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: comedi: pcl812: Fix bit shift out of bounds When checking for a supported IRQ number, the… |
CVE-2025-38529 | High | 7.1 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: comedi: aio_iiro_16: Fix bit shift out of bounds When checking for a supported IRQ number… |
CVE-2025-38528 | High | 7.1 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject %p% format string in bprintf-like helpers static const char fmt[] = "%p%"; … |
CVE-2025-38527 | Critical | 9.8 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_break A race condition can occur in cifs_o… |
CVE-2025-38520 | Medium | 5.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Don't call mmput from MMU notifier callback If the process is exiting, the mm… |
CVE-2025-38516 | Medium | 5.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: qcom: msm: mark certain pins as invalid for interrupts On some platforms, the UF… |
CVE-2025-38515 | Medium | 4.7 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: drm/sched: Increment job count before swapping tail spsc queue A small race exists betwee… |
CVE-2025-38514 | High | 7.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix oops due to non-existence of prealloc backlog struct If an AF_RXRPC service so… |
CVE-2025-38513 | Medium | 5.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() There is a p… |
CVE-2025-38512 | High | 8.8 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: wifi: prevent A-MSDU attacks in mesh networks This patch is a mitigation to prevent the A… |
CVE-2025-38510 | Medium | 5.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: kasan: remove kasan_find_vm_area() to prevent possible deadlock find_vm_area() couldn't b… |
CVE-2025-38503 | Medium | 5.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix assertion when building free space tree When building the free space tree with… |
CVE-2025-38502 | High | 7.8 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix oob access in cgroup local storage Lonial reported that an out-of-bounds access… |
CVE-2025-38501 | High | 7.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: limit repeated connections from clients with the same IP Repeated connections from… |
CVE-2025-38500 | High | 7.8 | 2025-08-12 | In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collect_md xfrm interface collect_md p… |
CVE-2025-38499 | High | 7.8 | 2025-08-11 | In the Linux kernel, the following vulnerability has been resolved: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns What we… |
CVE-2025-8454 | Critical | 9.8 | 2025-08-01 | It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the l… |
CVE-2025-38498 | High | 7.8 | 2025-07-30 | In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation… |
CVE-2025-38497 | High | 7.1 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Fix OOB read on empty string write When writing an empty string to… |
CVE-2025-38495 | High | 8.8 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the… |
CVE-2025-38494 | High | 7.8 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: HID: core: do not bypass hid_hw_raw_request hid_hw_raw_request() is actually useful to en… |
CVE-2025-38491 | High | 8.2 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action and fallback decision atomic Syzkaller reported the following… |
CVE-2025-38488 | Critical | 9.8 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in crypt_message when using async crypto The CVE-2024-500… |
CVE-2025-38487 | Medium | 5.5 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled Mitigate e.g. the foll… |
CVE-2025-38485 | High | 7.8 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush fxls8962af_fifo_flush… |
CVE-2025-38483 | High | 7.1 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: comedi: das16m1: Fix bit shift out of bounds When checking for a supported IRQ number, th… |
CVE-2025-38482 | High | 7.1 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: comedi: das6402: Fix bit shift out of bounds When checking for a supported IRQ number, th… |
CVE-2025-38481 | Medium | 5.5 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large The handling of the `COMEDI_IN… |
CVE-2025-38480 | Medium | 5.5 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: comedi: Fix use of uninitialized data in insn_rw_emulate_bits() For Comedi `INSN_READ` an… |
CVE-2025-38478 | High | 7.8 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: comedi: Fix initialization of data for instructions that write to subdevice Some Comedi s… |
CVE-2025-38477 | High | 7.8 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix race condition on qfq_aggregate A race condition can occur when '… |
CVE-2025-38476 | Critical | 9.8 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: rpl: Fix use-after-free in rpl_do_srh_inline(). Running lwt_dst_cache_ref_loop.sh in self… |
CVE-2025-38474 | Medium | 5.5 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: usb: net: sierra: check for no status endpoint The driver checks for having three endpoin… |
CVE-2025-38473 | Medium | 5.5 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() syzbot reported null-ptr-deref in… |
CVE-2025-38472 | Critical | 9.8 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry A crash in connt… |
CVE-2025-38471 | Critical | 9.8 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: tls: always refresh the queue when reading sock After recent changes in net-next TCP comp… |
CVE-2025-38470 | High | 7.8 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime Assuming th… |
CVE-2025-38468 | Medium | 5.5 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree htb_lookup_leaf ha… |
CVE-2025-38467 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling If there's support for an… |
CVE-2025-38466 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: perf: Revert to requiring CAP_SYS_ADMIN for uprobes Jann reports that uprobes can be used… |
CVE-2025-38465 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: netlink: Fix wraparounds of sk->sk_rmem_alloc. Netlink has this pattern in some places … |
CVE-2025-38464 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipc_conn_close(). syzbot reported a null-ptr-deref in tipc_c… |
CVE-2025-38462 | Medium | 4.7 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport_{g2h,h2g} TOCTOU vsock_find_cid() and vsock_dev_do_ioctl() may race… |
CVE-2025-38461 | High | 7.0 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport_* TOCTOU Transport assignment may race with module unload. Protect n… |
CVE-2025-38460 | High | 7.0 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix potential null-ptr-deref in to_atmarpd(). atmarpd is protected by RTNL sin… |
CVE-2025-38459 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix infinite recursive call of clip_push(). syzbot reported the splat below. [… |
CVE-2025-38458 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix NULL pointer dereference in vcc_sendmsg() atmarpd_dev_ops does not impleme… |
CVE-2025-38457 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: net/sched: Abort __tc_modify_qdisc if parent class does not exist Lion's patch [1] reveal… |
CVE-2025-38456 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() The "intf" list it… |
CVE-2025-38455 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight Reject migra… |
CVE-2025-38451 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: fix GPF in bitmap_get_stats() The commit message of commit 6ec1f0239485 ("m… |
CVE-2025-38448 | Medium | 4.7 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Fix race condition in TTY wakeup A race condition occurs when gs_s… |
CVE-2025-38445 | High | 7.1 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: md/raid1: Fix stack memory use after return in raid1_reshape In the raid1_reshape functio… |