Debian
Page 5 of 43 — Debian CVEs from a corpus of 4293, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-38215 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var If fb… |
CVE-2025-38214 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var If fb_add_videomod… |
CVE-2025-38212 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after… |
CVE-2025-38211 | Critical | 9.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction The commit 59c68ac3… |
CVE-2025-38206 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayed_free The double free could happen in the following path… |
CVE-2025-38204 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds read in add_missing_indices stbl is s8 but it must con… |
CVE-2025-38203 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: jfs: Fix null-ptr-deref in jfs_ioc_trim [ Syzkaller Report ] Oops: general protection fa… |
CVE-2025-38202 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() bpf_map_lookup_perc… |
CVE-2025-38200 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40e_clear_hw When the device sends a s… |
CVE-2025-38198 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: fbcon: Make sure modelist not set on unregistered console It looks like attempting to wri… |
CVE-2025-38197 | High | 7.3 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell_rbu: Fix list usage Pass the correct list head to list_for_each_entry*… |
CVE-2025-38194 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: jffs2: check that raw node were preallocated before writing summary Syzkaller detected a… |
CVE-2025-38193 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: reject invalid perturb period Gerrard Tai reported that SFQ perturb_p… |
CVE-2025-38191 | High | 7.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in destroy_previous_session If client set ->PreviousS… |
CVE-2025-38190 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: atm: Revert atm_account_tx() if copy_from_iter_full() fails. In vcc_sendmsg(), we account… |
CVE-2025-38185 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: atm: atmtcp: Free invalid length skb in atmtcp_c_send(). syzbot reported the splat below… |
CVE-2025-38184 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer The reproduction ste… |
CVE-2025-38183 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() Befor… |
CVE-2025-38181 | High | 7.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). syzkaller reported a null-ptr… |
CVE-2025-38180 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: net: atm: fix /proc/net/atm/lec handling /proc/net/atm/lec must ensure safety against dev… |
CVE-2025-38177 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: make hfsc_qlen_notify() idempotent hfsc_qlen_notify() is not idempotent either… |
CVE-2025-38174 | High | 8.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Do not double dequeue a configuration request Some of our devices crash in t… |
CVE-2025-38173 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/cesa - Handle zero-length skcipher requests Do not access random memory f… |
CVE-2025-38170 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Discard stale CPU state when handling SME traps The logic for handling SME… |
CVE-2025-38167 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: handle hdr_first_de() return value The hdr_first_de() function returns a pointe… |
CVE-2025-38166 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: bpf: fix ktls panic with sockmap [ 2172.936997] ------------[ cut here ]------------ [ 21… |
CVE-2025-38165 | High | 7.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skb_linearize The panic can be reproduced by executi… |
CVE-2025-38163 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sbi->total_valid_block_count syzbot reported a f2fs bug a… |
CVE-2025-38161 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction Upon RQ destruction if… |
CVE-2025-38160 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() devm_kasprintf() returns NULL… |
CVE-2025-38159 | High | 7.1 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds Set the size to 6… |
CVE-2025-38158 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: fix XQE dma address error The dma addresses of EQE and AEQE are wrong… |
CVE-2025-38157 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: Abort software beacon handling if disabled A malicious USB device can se… |
CVE-2025-38154 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Avoid using sk_socket after free when sending The sk->sk_socket is not lock… |
CVE-2025-38153 | High | 7.1 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: fix error handling of usbnet read calls Syzkaller, courtesy of syzbot… |
CVE-2025-38151 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work The cited commit fixed… |
CVE-2025-38148 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: phy: mscc: Fix memory leak when using one step timestamping Fix memory leak when run… |
CVE-2025-38147 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: calipso: Don't call calipso functions for AF_INET sk. syzkaller reported a null-ptr-deref… |
CVE-2025-38146 | Critical | 9.4 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Fix the dead loop of MPLS parse The unexpected MPLS packet may not end… |
CVE-2025-38145 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() devm_kasprintf() returns NULL wh… |
CVE-2025-38143 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: backlight: pm8941: Add NULL check in wled_configure() devm_kasprintf() returns NULL when… |
CVE-2025-38142 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus-ec-sensors) check sensor index in read_string() Prevent a potential invalid… |
CVE-2025-38138 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: Add NULL check in udma_probe() devm_kasprintf() returns NULL when memory a… |
CVE-2025-38136 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: usb: renesas_usbhs: Reorder clock handling and power management in probe Reorder the init… |
CVE-2025-38135 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: serial: Fix potential null-ptr-deref in mlb_usio_probe() devm_ioremap() can return NULL o… |
CVE-2025-38131 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: coresight: prevent deactivate active config while enabling the config While enable active… |
CVE-2025-38126 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping The stmmac… |
CVE-2025-38124 | High | 7.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: fix udp gso skb_segment after pull from frag_list Commit a1e40ac5b5e9 ("net: gso: fi… |
CVE-2025-38122 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO gve_alloc_pending_pa… |
CVE-2025-38120 | Critical | 9.4 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_set_pipapo_avx2: fix initial map fill If the first field doesn't cover the… |
CVE-2025-38119 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: ufs: Fix a hang in the error handler ufshcd_err_handling_prepare() calls ufsh… |
CVE-2025-38118 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete This reworks MGMT_OP_REMOVE_… |
CVE-2025-38115 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: fix a potential crash on gso_skb handling SFQ has an assumption of al… |
CVE-2025-38113 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used With nosmp in cmdline, other… |
CVE-2025-38112 | Medium | 4.7 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: Fix TOCTOU issue in sk_is_readable() sk->sk_prot->sock_is_readable is a valid functi… |
CVE-2025-38111 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds read/write access When using publicly available… |
CVE-2025-38108 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net_sched: red: fix a race in __red_change() Gerrard Tai reported a race condition in RED… |
CVE-2025-38107 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: fix a race in ets_qdisc_change() Gerrard Tai reported a race condition in… |
CVE-2025-38103 | High | 7.1 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() Update struct hid_de… |
CVE-2025-38102 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify During our test… |
CVE-2025-38100 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: x86/iopl: Cure TIF_IO_BITMAP inconsistencies io_bitmap_exit() is invoked from exit_thread… |
CVE-2025-38097 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: espintcp: remove encap socket caching to avoid reference leak The current scheme for cach… |
CVE-2025-38095 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: dma-buf: insert memory barrier before updating num_fences smp_store_mb() inserts memory b… |
CVE-2025-38094 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: cadence: macb: Fix a possible deadlock in macb_halt_tx. There is a situation where a… |
CVE-2025-6297 | High | 8.2 | 2025-07-01 | It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is document… |
CVE-2025-32463 | Critical | 9.3 | 2025-06-30 | Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option. |
CVE-2025-38090 | High | 7.8 | 2025-06-30 | In the Linux kernel, the following vulnerability has been resolved: drivers/rapidio/rio_cm.c: prevent possible heap overwrite In riocm_cdev_ioctl(RIO_CM_CHA… |
CVE-2025-38088 | High | 7.1 | 2025-06-30 | In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap memtrace mmap issue ha… |
CVE-2025-53391 | Critical | 9.3 | 2025-06-28 | The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt_6.2.0-1 package has insecure PolicyKit allow_any/allow_inactive/allow_active sett… |
CVE-2025-38086 | Medium | 5.5 | 2025-06-28 | In the Linux kernel, the following vulnerability has been resolved: net: ch9200: fix uninitialised access during mii_nway_restart In mii_nway_restart() the c… |
CVE-2025-38085 | High | 7.8 | 2025-06-28 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race huge_pmd_unshare() drops a reference… |
CVE-2025-38084 | High | 7.8 | 2025-06-28 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: unshare page tables during VMA split, not before Currently, __split_vma() tri… |
CVE-2015-0849 | Low | 3.9 | 2025-06-26 | pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability. |
CVE-2015-0843 | Critical | 9.8 | 2025-06-26 | yubiserver before 0.6 is prone to buffer overflows due to misuse of sprintf. |
CVE-2015-0842 | Critical | 9.8 | 2025-06-26 | yubiserver before 0.6 is prone to SQL injection issues, potentially leading to an authentication bypass. |
CVE-2014-7210 | Critical | 9.8 | 2025-06-26 | pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backen… |
CVE-2013-1424 | Medium | 5.6 | 2025-06-26 | Buffer overflow vulnerability in matplotlib.This issue affects matplotlib: before upstream commit ba4016014cb4fb4927e36ce8ea429fed47dcb787. |
CVE-2025-38083 | High | 7.8 | 2025-06-20 | In the Linux kernel, the following vulnerability has been resolved: net_sched: prio: fix a race in prio_tune() Gerrard Tai reported a race condition in PRIO… |
CVE-2025-38079 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - fix double free in hash_accept If accept(2) is called on socket type… |
CVE-2025-38078 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix race of buffer access at PCM OSS layer The PCM OSS layer tries to clear th… |
CVE-2025-38077 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() If the '… |
CVE-2025-38075 | Critical | 9.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix timeout on deleted connection NOPIN response timer may expire on… |
CVE-2025-38074 | High | 8.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: protect vq->log_used with vq->mutex The vhost-scsi completion path may access… |
CVE-2025-38072 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Fix divide error in nd_label_data_init() If a faulty CXL memory device… |
CVE-2025-38071 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: x86/mm: Check return value from memblock_phys_alloc_range() At least with CONFIG_PHYSICAL… |
CVE-2025-38068 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: crypto: lzo - Fix compression buffer overrun Unlike the decompression code, the compressi… |
CVE-2025-38067 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: rseq: Fix segfault on registration when rseq_cs is non-zero The rseq_cs field is document… |
CVE-2025-38066 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: dm cache: prevent BUG_ON by blocking retries on failed device resumes A cache device fail… |
CVE-2025-38065 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: orangefs: Do not truncate file size 'len' is used to store the result of i_size_read(), s… |
CVE-2025-38063 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: dm: fix unconditional IO throttle caused by REQ_PREFLUSH When a bio with REQ_PREFLUSH is… |
CVE-2025-38062 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie The IOMMU t… |
CVE-2025-38061 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() Honour the… |
CVE-2025-38058 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock ... or we risk s… |
CVE-2025-38052 | High | 8.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Syzbot reported a slab-u… |
CVE-2025-38051 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifs_fill_dirent There is a race condition in the read… |
CVE-2025-38048 | Medium | 4.7 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN syzbot reports a… |
CVE-2025-38044 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: set device_caps for 417 The video_device for the MPEG encoder did not set… |
CVE-2025-38043 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Set dma_mask for ffa devices Set dma_mask for FFA devices, otherwise D… |
CVE-2025-38040 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: serial: mctrl_gpio: split disable_ms into sync and no_sync APIs The following splat has b… |
CVE-2025-38037 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: vxlan: Annotate FDB data races The 'used' and 'updated' fields in the FDB entry structure… |