2025 CVEs (page 238)
Page 238 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-38450 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_sta_set_decap_offload() Ad… |
CVE-2025-38449 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released… |
CVE-2025-38448 | Medium | 4.7 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Fix race condition in TTY wakeup A race condition occurs when gs_s… |
CVE-2025-38447 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix potential out-of-bounds page table access during batched unmap As pointed ou… |
CVE-2025-38446 | High | 7.3 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: clk: imx: Fix an out-of-bounds access in dispmix_csr_clk_dev_data When num_parents is 4… |
CVE-2025-38445 | High | 7.1 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: md/raid1: Fix stack memory use after return in raid1_reshape In the raid1_reshape functio… |
CVE-2025-38444 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: raid10: cleanup memleak at raid10_make_request If raid10_read_request or raid10_write_req… |
CVE-2025-38443 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: nbd: fix uaf in nbd_genl_connect() error path There is a use-after-free issue in nbd: bl… |
CVE-2025-38442 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: block: reject bs > ps block devices when THP is disabled If THP is disabled and when a bl… |
CVE-2025-38441 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() syzbot found a… |
CVE-2025-38440 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix race between DIM disable and net_dim() There's a race between disabling DI… |
CVE-2025-38439 | Critical | 9.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT When transmitting an XDP_REDIRECT p… |
CVE-2025-38438 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak. sof_pdata->tplg_filename can… |
CVE-2025-38437 | High | 8.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potential use-after-free in oplock/lease break ack If ksmbd_iov_pin_rsp return… |
CVE-2025-34139 | | 2025-07-25 | A vulnerability exists in Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud that could allow an unauthent… | |
CVE-2025-34136 | | 2025-07-25 | An SQL injection vulnerability exists in Commvault 11.32.0 - 11.32.93, 11.36.0 - 11.36.51, and 11.38.0 - 11.38.19 Web Server component that allows a remote, un… | |
CVE-2025-34114 | | 2025-07-25 | A client-side security misconfiguration vulnerability exists in OpenBlow whistleblowing platform across multiple versions and default deployments, due to the a… | |
CVE-2025-2329 | | 2025-07-25 | In high traffic environments, a Silicon Labs OpenThread RCP (see impacted versions) fails to clear the SPI transmit buffer and may send a corrupt packet over S… | |
CVE-2025-8160 | High | 8.8 | 2025-07-25 | A vulnerability classified as critical has been found in Tenda AC20 up to 16.03.08.12. Affected is an unknown function of the file /goform/SetSysTimeCfg of the… |
CVE-2025-8159 | High | 8.8 | 2025-07-25 | A vulnerability was found in D-Link DIR-513 1.0. It has been rated as critical. This issue affects the function formLanguageChange of the file /goform/formLang… |
CVE-2025-52360 | High | 8.8 | 2025-07-25 | A Cross-Site Scripting (XSS) vulnerability exists in the OPAC search feature of Koha Library Management System v24.05. Unsanitized input entered in the search… |
CVE-2025-45467 | High | 7.1 | 2025-07-25 | Unitree Go1 <= Go1_2022_05_11 is vulnerable to Insecure Permissions as the firmware update functionality (via Wi-Fi/Ethernet) implements an insecure verificati… |
CVE-2025-44608 | Medium | 6.5 | 2025-07-25 | CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter. |
CVE-2025-38436 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/scheduler: signal scheduled fence when kill job When an entity from application B is… |
CVE-2025-38435 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: riscv: vector: Fix context save/restore with xtheadvector Previously only v0-v7 were corr… |
CVE-2025-38434 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: Revert "riscv: Define TASK_SIZE_MAX for __access_ok()" This reverts commit ad5643cf2f69 (… |
CVE-2025-38433 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: riscv: fix runtime constant support for nommu kernels the `__runtime_fixup_32` function d… |
CVE-2025-38432 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: net: netpoll: Initialize UDP checksum field before checksumming commit f1fce08e63fe ("net… |
CVE-2025-38431 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix regression with native SMB symlinks Some users and customers reported th… |
CVE-2025-38430 | Critical | 9.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request If the request bein… |
CVE-2025-38429 | Critical | 10.0 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only after buffer is written Inside mhi_ep_ring_add_ele… |
CVE-2025-38428 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - check record size in ims_pcu_flash_firmware() The "len" variable comes f… |
CVE-2025-38427 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: video: screen_info: Relocate framebuffers behind PCI bridges Apply PCI host-bridge window… |
CVE-2025-38426 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add basic validation for RAS header If RAS header read from EEPROM is corrupt… |
CVE-2025-38425 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: check msg length in SMBUS block read For SMBUS block read, do not continue to… |
CVE-2025-38424 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix sample vs do_exit() Baisheng Gao reported an ARM64 crash, which Mark decoded as… |
CVE-2025-38423 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd9375: Fix double free of regulator supplies Driver gets regulator suppli… |
CVE-2025-38422 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices Maximum OTP and EEPROM… |
CVE-2025-38421 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: pmf: Use device managed allocations If setting up smart PC fails for an… |
CVE-2025-38420 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: do not ping device which has failed to load firmware Syzkaller reports [1… |
CVE-2025-30086 | Medium | 4.9 | 2025-07-25 | CNCF Harbor 2.13.x before 2.13.1 and 2.12.x before 2.12.4 allows information disclosure by administrators who can exploit an ORM Leak present in the /api/v2.0/… |
CVE-2025-8158 | Medium | 6.3 | 2025-07-25 | A vulnerability was found in PHPGurukul Login and User Management System 3.3. It has been declared as critical. This vulnerability affects unknown code of the… |
CVE-2025-45939 | Medium | 6.5 | 2025-07-25 | Apwide Golive 10.2.0 Jira plugin allows Server-Side Request Forgery (SSRF) via the test webhook function. |
CVE-2025-45777 | Critical | 9.8 | 2025-07-25 | An issue in the OTP mechanism of Chavara Family Welfare Centre Chavara Matrimony Site v2.0 allows attackers to bypass authentication via supplying a crafted re… |
CVE-2025-38419 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_… |
CVE-2025-38418 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Release rproc->clean_table after rproc_attach() fails When rproc->state… |
CVE-2025-38417 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: ice: fix eswitch code memory leak in reset scenario Add simple eswitch mode checker in at… |
CVE-2025-38416 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: NFC: nci: uart: Set tty->disc_data only in success path Setting tty->disc_data before ope… |
CVE-2025-38415 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: Squashfs: check return result of sb_min_blocksize Syzkaller reports an "UBSAN: shift-out-… |
CVE-2025-38414 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 GCC_GCC_PCIE_HOT_RST is wro… |
CVE-2025-38413 | High | 7.7 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: virtio-net: xsk: rx: fix the frame's length check When calling buf_to_xdp, the len argume… |
CVE-2025-38412 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks After retr… |
CVE-2025-38411 | Critical | 9.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix double put of request If a netfs request finishes during the pause loop, it wi… |
CVE-2025-38410 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix a fence leak in submit error path In error paths, we could unref the submit… |
CVE-2025-38409 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix another leak in the submit error path put_unused_fd() doesn't free the insta… |
CVE-2025-38408 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: genirq/irq_sim: Initialize work context pointers properly Initialize `ops` member's point… |
CVE-2025-38407 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: riscv: cpu_ops_sbi: Use static array for boot_data Since commit 6b9f29b81b15 ("riscv: Ena… |
CVE-2025-38406 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: remove WARN on bad firmware input If the firmware gives bad input, that's n… |
CVE-2025-38405 | High | 7.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak of bio integrity If nvmet receives commands with metadata there is… |
CVE-2025-38404 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: displayport: Fix potential deadlock The deadlock can occur due to a recursive… |
CVE-2025-38403 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: Clear the vmci transport packet properly when initializing it In vmci_transpo… |
CVE-2025-8157 | Medium | 6.3 | 2025-07-25 | A vulnerability was found in PHPGurukul User Registration & Login and User Management 3.3. It has been classified as critical. This affects an unknown part of… |
CVE-2025-8156 | Medium | 6.3 | 2025-07-25 | A vulnerability was found in PHPGurukul User Registration & Login and User Management 3.3 and classified as critical. Affected by this issue is some unknown fu… |
CVE-2025-51411 | Medium | 6.1 | 2025-07-25 | A reflected cross-site scripting (XSS) vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postquerypublic endpoint. The… |
CVE-2025-43712 | Low | 2.9 | 2025-07-25 | JHipster before v.8.9.0 allows privilege escalation via a modified authorities parameter. Upon registering in the JHipster portal and logging in as a standard… |
CVE-2025-38402 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: idpf: return 0 size for RSS key if not supported Returning -EOPNOTSUPP from function retu… |
CVE-2025-38401 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: mtk-sd: Prevent memory corruption from DMA map failure If msdc_prepare_data() fails to ma… |
CVE-2025-38400 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. syzbot reported a warn… |
CVE-2025-38399 | High | 7.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() The functio… |
CVE-2025-38398 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: reallocate BAM transactions Using the mtd_nandbiterrs module for tes… |
CVE-2025-38397 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix suspicious RCU usage warning When I run the NVME over TCP test in vir… |
CVE-2025-38396 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass Export anon_inode_… |
CVE-2025-38395 | High | 8.4 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods drvdata::gpiods is suppo… |
CVE-2025-38394 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix memory corruption of input_handler_list In appletb_kbd_probe an inp… |
CVE-2025-38393 | High | 7.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN We found a few different systems hung… |
CVE-2025-38392 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: idpf: convert control queue mutex to a spinlock With VIRTCHNL2_CAP_MACFILTER enabled, the… |
CVE-2025-38391 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: do not index invalid pin_assignments A poorly implement… |
CVE-2025-38390 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix memory leak by freeing notifier callback node Commit e0573444edbf… |
CVE-2025-38389 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix timeline left held on VMA alloc error The following error has been repor… |
CVE-2025-38388 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context The current… |
CVE-2025-38387 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert The obj_event may be loade… |
CVE-2025-38386 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Refuse to evaluate a method if arguments are missing As reported in [1], a platfo… |
CVE-2025-38385 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect Remove redundant net… |
CVE-2025-38384 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix memory leak of ECC engine conf Memory allocated for the ECC engine conf… |
CVE-2025-38383 | Medium | 4.7 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix data race in show_numa_info() The following data-race was found in show_n… |
CVE-2025-38382 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix iteration of extrefs during log replay At __inode_add_ref() when processing ex… |
CVE-2025-38381 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt() The cs40l50… |
CVE-2025-38379 | High | 7.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix warning when reconnecting channel When reconnecting a channel in smb2_re… |
CVE-2025-38378 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix slab use-after-free bug in appletb_kbd_probe In probe appletb_kbd_p… |
CVE-2025-38377 | High | 8.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rose_rt_device_down() There are two bugs in rose… |
CVE-2025-38376 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume Shawn and John… |
CVE-2025-38375 | High | 8.4 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: virtio-net: ensure the received length does not exceed allocated size In xdp_linearize_pa… |
CVE-2025-38374 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: optee: ffa: fix sleep in atomic context The OP-TEE driver registers the function notif_ca… |
CVE-2025-38373 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix potential deadlock in MR deregistration The issue arises when kzalloc() is i… |
CVE-2025-38372 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling __xa_store() and __xa_erase(… |
CVE-2025-38371 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Disable interrupts before resetting the GPU Currently, an interrupt can be trigg… |
CVE-2025-38370 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix failure to rebuild free space tree using multiple transactions If we are rebui… |
CVE-2025-38369 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using … |
CVE-2025-38368 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe() The returned value, pf… |
CVE-2025-38367 | High | 8.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Avoid overflow with array index The variable index is modified and reused… |