Debian
Page 4 of 43 — Debian CVEs from a corpus of 4293, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-38444 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: raid10: cleanup memleak at raid10_make_request If raid10_read_request or raid10_write_req… |
CVE-2025-38443 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: nbd: fix uaf in nbd_genl_connect() error path There is a use-after-free issue in nbd: bl… |
CVE-2025-38441 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() syzbot found a… |
CVE-2025-38439 | Critical | 9.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT When transmitting an XDP_REDIRECT p… |
CVE-2025-38437 | High | 8.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potential use-after-free in oplock/lease break ack If ksmbd_iov_pin_rsp return… |
CVE-2025-38430 | Critical | 9.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request If the request bein… |
CVE-2025-38428 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - check record size in ims_pcu_flash_firmware() The "len" variable comes f… |
CVE-2025-38425 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: check msg length in SMBUS block read For SMBUS block read, do not continue to… |
CVE-2025-38424 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix sample vs do_exit() Baisheng Gao reported an ARM64 crash, which Mark decoded as… |
CVE-2025-38422 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices Maximum OTP and EEPROM… |
CVE-2025-38420 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: do not ping device which has failed to load firmware Syzkaller reports [1… |
CVE-2025-38419 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_… |
CVE-2025-38418 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Release rproc->clean_table after rproc_attach() fails When rproc->state… |
CVE-2025-38416 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: NFC: nci: uart: Set tty->disc_data only in success path Setting tty->disc_data before ope… |
CVE-2025-38415 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: Squashfs: check return result of sb_min_blocksize Syzkaller reports an "UBSAN: shift-out-… |
CVE-2025-38412 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks After retr… |
CVE-2025-38410 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix a fence leak in submit error path In error paths, we could unref the submit… |
CVE-2025-38409 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix another leak in the submit error path put_unused_fd() doesn't free the insta… |
CVE-2025-38406 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: remove WARN on bad firmware input If the firmware gives bad input, that's n… |
CVE-2025-38404 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: displayport: Fix potential deadlock The deadlock can occur due to a recursive… |
CVE-2025-38403 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: Clear the vmci transport packet properly when initializing it In vmci_transpo… |
CVE-2025-38401 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: mtk-sd: Prevent memory corruption from DMA map failure If msdc_prepare_data() fails to ma… |
CVE-2025-38400 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. syzbot reported a warn… |
CVE-2025-38399 | High | 7.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() The functio… |
CVE-2025-38396 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass Export anon_inode_… |
CVE-2025-38395 | High | 8.4 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods drvdata::gpiods is suppo… |
CVE-2025-38393 | High | 7.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN We found a few different systems hung… |
CVE-2025-38391 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: do not index invalid pin_assignments A poorly implement… |
CVE-2025-38389 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix timeline left held on VMA alloc error The following error has been repor… |
CVE-2025-38387 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert The obj_event may be loade… |
CVE-2025-38386 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Refuse to evaluate a method if arguments are missing As reported in [1], a platfo… |
CVE-2025-38385 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect Remove redundant net… |
CVE-2025-38384 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix memory leak of ECC engine conf Memory allocated for the ECC engine conf… |
CVE-2025-38382 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix iteration of extrefs during log replay At __inode_add_ref() when processing ex… |
CVE-2025-38377 | High | 8.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rose_rt_device_down() There are two bugs in rose… |
CVE-2025-38375 | High | 8.4 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: virtio-net: ensure the received length does not exceed allocated size In xdp_linearize_pa… |
CVE-2025-38371 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Disable interrupts before resetting the GPU Currently, an interrupt can be trigg… |
CVE-2025-38365 | Critical | 9.1 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a race between renames and directory logging We have a race between a rename a… |
CVE-2025-38364 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() Temporarily clear the preallo… |
CVE-2025-38363 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fix a possible null pointer dereference In tegra_crtc_reset(), new memory is a… |
CVE-2025-38362 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check for get_first_active_display() The function mod_h… |
CVE-2025-38354 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/gpu: Fix crash when throttling GPU immediately during boot There is a small chanc… |
CVE-2025-38352 | High | 7.8 | 2025-07-22 | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If… |
CVE-2025-38350 | High | 7.8 | 2025-07-19 | In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful qdis… |
CVE-2025-6558 | High | 8.8 | 2025-07-15 | Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox… |
CVE-2025-38348 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() Robert Morris reported: |… |
CVE-2025-38347 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on ino and xnid syzbot reported a f2fs bug as below: INFO… |
CVE-2025-38346 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix UAF when lookup kallsym after ftrace disabled The following issue happens wit… |
CVE-2025-38345 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: fix acpi operand cache leak in dswstate.c ACPICA commit 987a3b5cf7175916e2a4b6ea5… |
CVE-2025-38344 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: fix acpi parse and parseext cache leaks ACPICA commit 8829e70e1360c81e7a5a901b5d4… |
CVE-2025-38342 | High | 7.0 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in software_node_get_reference_args() software_node_ge… |
CVE-2025-38337 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() Since handle->h_t… |
CVE-2025-38336 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 The controller has a hardware… |
CVE-2025-38335 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT When enabling PREEMPT_RT, the… |
CVE-2025-38334 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Prevent attempts to reclaim poisoned pages TL;DR: SGX page reclaim touches the p… |
CVE-2025-38332 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Use memcpy() for BIOS version The strlcat() with FORTIFY support is triggerin… |
CVE-2025-38331 | High | 7.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Use TOE/TSO on all TCP It is desireable to push the hardware acce… |
CVE-2025-38328 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: jffs2: check jffs2_prealloc_raw_node_refs() result in few other places Fuzzing hit anothe… |
CVE-2025-38326 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: aoe: clean device rq_list in aoedev_downdev() An aoe device's rq_list contains accepted b… |
CVE-2025-38324 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). As syzbot reported [0], mpls_… |
CVE-2025-38323 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: net: atm: add lec_mutex syzbot found its way in net/atm/lec.c, and found an error path in… |
CVE-2025-38322 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix crash in icl_update_topdown_event() The perf_fuzzer found a hard-lock… |
CVE-2025-38320 | High | 7.1 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() KASAN reports a… |
CVE-2025-38319 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table Th… |
CVE-2025-38313 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: fix double-free on mc_dev The blamed commit tried to simplify how the deallo… |
CVE-2025-38312 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() In fb_find_mode_cvt(), iff mo… |
CVE-2025-38310 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: seg6: Fix validation of nexthop addresses The kernel currently validates that the length… |
CVE-2025-38305 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() There is no disagreement th… |
CVE-2025-38304 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix NULL pointer deference on eir_get_service_data The len parameter is consid… |
CVE-2025-38300 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare() Fix two DMA cle… |
CVE-2025-38298 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: EDAC/skx_common: Fix general protection fault After loading i10nm_edac (which automatical… |
CVE-2025-38293 | High | 8.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix node corruption in ar->arvifs list In current WLAN recovery code flow… |
CVE-2025-38286 | High | 7.1 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91_gpio_probe() doesn't check that g… |
CVE-2025-38285 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix WARN() in get_bpf_raw_tp_regs syzkaller reported an issue: WARNING: CPU: 3 PID… |
CVE-2025-38282 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: kernfs: Relax constraint in draining guard The active reference lifecycle provides the br… |
CVE-2025-38280 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid __bpf_prog_ret0_warn when jit fails syzkaller reported an issue: WARNING: CPU… |
CVE-2025-38277 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: mtd: nand: ecc-mxic: Fix use of uninitialized variable ret If ctx->steps is zero, the loo… |
CVE-2025-38275 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug The qmp_usb_iomap() helper function curren… |
CVE-2025-38273 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: net: tipc: fix refcount warning in tipc_aead_encrypt syzbot reported a refcount warning [… |
CVE-2025-38263 | Medium | 5.5 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: bcache: fix NULL pointer in cache_set_flush() 1. LINE#1794 - LINE#1887 is some codes abou… |
CVE-2025-38262 | High | 7.8 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: uartlite: register uart driver in init When two instances of uart devices ar… |
CVE-2025-38260 | Medium | 5.5 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: btrfs: handle csum tree error with rescue=ibadroots correctly [BUG] There is syzbot based… |
CVE-2025-38259 | High | 7.8 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd9335: Fix missing free of regulator supplies Driver gets and enables all… |
CVE-2025-38257 | High | 7.3 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Prevent overflow in size calculation for memdup_user() Number of apqn target l… |
CVE-2025-38251 | Medium | 5.5 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: atm: clip: prevent NULL deref in clip_push() Blamed commit missed that vcc_destroy_socket… |
CVE-2025-38249 | High | 7.1 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() In snd_usb_get_… |
CVE-2025-38245 | High | 7.8 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). syzbot reported… |
CVE-2025-38239 | High | 7.3 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: scsi: megaraid_sas: Fix invalid node index On a system with DRAM interleave enabled, out-… |
CVE-2025-48384 | High | 8.0 | 2025-07-08 | Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to int… |
CVE-2025-38237 | Medium | 5.5 | 2025-07-08 | In the Linux kernel, the following vulnerability has been resolved: media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() In fimc_i… |
CVE-2025-38236 | High | 7.8 | 2025-07-08 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't leave consecutive consumed OOB skbs. Jann Horn reported a use-after-free i… |
CVE-2025-38231 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: nfsd: Initialize ssc before laundromat_work to prevent NULL dereference In nfs4_state_sta… |
CVE-2025-38230 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: jfs: validate AG parameters in dbMount() to prevent crashes Validate db_agheight, db_agwi… |
CVE-2025-38229 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: media: cxusb: no longer judge rbuf when the write fails syzbot reported a uninit-value in… |
CVE-2025-38227 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Terminating the subsequent process of initialization failure syzbot reporte… |
CVE-2025-38226 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: media: vivid: Change the siize of the composing syzkaller found a bug: BUG: KASAN: vmall… |
CVE-2025-38225 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Cleanup after an allocation error When allocation failures are not clean… |
CVE-2025-38222 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: ext4: inline: fix len overflow in ext4_prepare_inline_data When running the following cod… |
CVE-2025-38219 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: f2fs: prevent kernel warning due to negative i_nlink from corrupted image WARNING: CPU: 1… |
CVE-2025-38218 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sit_bitmap_size w/ below testcase, resize will generate a… |